Privacy Policy

1. What we collect

• Account data: your email address and authentication details (managed by our auth provider, Supabase).
• Content you create: the prompts, themes, and lyrics you enter, and the songs, lyrics, and cover images you generate.
• Usage & technical data: logs, device/browser information, and diagnostics used to run and secure the Service.
• Billing data: handled by Paddle, our Merchant of Record. Paddle processes your payment details — we do not store your full card numbers. We keep a record of your plan, credit ledger, and transaction references.

2. How we use it

• To provide the Service — generate and deliver your content, and track your credit balance.
• To operate subscriptions and grant credits when Paddle confirms a payment.
• To secure the Service, prevent abuse, and comply with legal obligations.
• To communicate service and account notices.

3. Who we share it with

We share data only with service providers that help us run Faceless Lab:

• Paddle — payments, invoicing, tax (Merchant of Record).
• Supabase — authentication and database.
• AI / model & cloud infrastructure providers — to generate and host content.

We do not sell your personal data.

4. Retention

We keep your account and content while your account is active. Financial records (e.g. the credit ledger and transaction references) may be retained longer where required for tax, accounting, or dispute purposes.

5. Your rights & controls

You can export your data or delete your account and content at any time from the app's settings (Danger zone). Deleting your account removes your personal profile and generated content; retained financial records are anonymized where possible. To exercise any privacy right, contact us at support@faceless-lab.com.

6. Cookies

We use essential cookies/local storage for sign-in and session management. Payment pages hosted by Paddle may set their own cookies under Paddle's privacy policy.

7. International transfers & security

Your data may be processed in countries other than yours by the providers listed above. We rely on their security and contractual protections and take reasonable measures to protect your data, though no method of transmission or storage is 100% secure.

8. Children

The Service is not directed to children under 18, and we do not knowingly collect their data.

9. Changes & contact

We may update this policy; the "last updated" date reflects the latest version. Questions or requests: support@faceless-lab.com. For payment-related data, Paddle is the Merchant of Record and its privacy policy also applies.