Privacy Policy

1. Scope of this policy

This Privacy Policy explains how flowmusic.lol ("Flow Music", "we", "us") handles personal data when you visit the site, sign in, write a song, subscribe to a paid plan or contact support.

It does not cover third-party services you reach through Flow Music, such as Google Sign-In, Stripe or any platform you publish your music on. Those services have their own privacy policies.

2. Data we collect

We keep collection to what is needed to run the Service, secure accounts and bill subscriptions.

• Account data: your name, email address, profile picture and Google account identifier, received when you sign in with Google.
• Content data: the prompts, lyrics, style selections and settings you submit, plus the audio renders, takes and stems generated from them.
• Billing data: your plan, subscription status, credit balance and invoice history. Card details are entered on Stripe and never reach our servers.
• Technical data: IP address, browser and device information, and log entries needed for security, abuse prevention and debugging.
• Support data: the contents of messages you send to support@flowmusic.lol.

3. How we use your data

We use your data to create and secure your account, render the songs you request, keep your projects available across sessions, meter credits, process payments, prevent abuse and answer support requests.

We also use aggregated, non-identifying statistics to understand which features are used so we can improve the Service.

4. Legal bases

Where data protection law requires a legal basis, we rely on the performance of our contract with you (providing the Service you signed up for), our legitimate interests (keeping the Service secure, preventing abuse and improving it), your consent (where we ask for it, for example for optional cookies) and legal obligation (tax and accounting records).

You can withdraw consent at any time. Withdrawing consent does not affect processing that already happened.

5. Cookies and analytics

Flow Music uses a small number of cookies: a session cookie that keeps you signed in, a preference cookie for language and theme, and cookies set by our payment provider during checkout.

We also use Google Analytics to measure aggregate traffic and product usage. Analytics data is used to understand which pages and features help people finish a song; it is not used to build advertising profiles, and we do not sell personal data.

You can block or delete cookies in your browser settings. Blocking the session cookie will sign you out and prevent checkout from working.

6. Sharing and processors

We do not sell your personal data. We share it only with the processors that make the Service work, and only as far as each one needs it.

• Cloud hosting and database providers that run the site and store account and project data.
• Stripe, for subscription billing, invoicing and payment failure handling.
• Google, for sign-in and for aggregate analytics.
• Email delivery providers, for verification and account notifications.
• Professional advisers or authorities, where we are legally required to disclose information.

7. Retention

Account data is kept while your account is open. Renders, lyrics and settings stay available until you delete them or close your account, after which they are removed from live systems and expire from backups on our normal backup cycle.

Billing records are kept for as long as tax and accounting law requires. Security logs are kept for a shorter, rolling window.

8. Security

Traffic is encrypted in transit. Access to production systems is limited to the people who need it, protected by strong authentication, and reviewed when team membership changes.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authority where the law requires it.

9. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent.

You can exercise most of these rights from your account settings, or by writing to support@flowmusic.lol. We respond within the period the applicable law allows, and we do not charge a fee for a reasonable request.

10. Children

Flow Music is not intended for children under 13, or under the minimum age required to consent to online services in your country. We do not knowingly collect data from children. If you believe a child has created an account, contact support and we will remove it.

11. International transfers

Our providers may process data outside your country. Where that happens, transfers are covered by the safeguards those providers have in place, such as standard contractual clauses.

12. Changes and contact

We may update this policy as the Service changes. The date at the top of this page always shows the current version, and material changes are announced in the product or by email.

Questions, requests and complaints: support@flowmusic.lol.