Privacy Policy
Draft. This policy is a working draft and not yet legal advice. The section structure and providers below are accurate to how the service runs, but the binding language should be reviewed by counsel before launch.
What we collect
- Account — your email address or mobile phone number (used to sign you in), and a display name you choose.
- Your content — the songs, lyrics, images, books, and other works you create, upload, or generate.
- Usage & technical — basic logs needed to operate and secure the service (e.g. request timing, error diagnostics).
- Payment — if you subscribe, billing is processed by Stripe; we do not store your card number.
Text messages (SMS)
If you sign in with your phone number, we send a one-time verification code by SMS through our provider (Twilio). This is transactional — we do not send marketing texts. Message and data rates may apply. Reply STOP to opt out of further messages; message frequency varies with your sign-in activity.
How we use your information
To create and secure your account, deliver the features you use, process payments, communicate service-related notices, and improve reliability. We do not sell your personal information.
Service providers
We share the minimum necessary with vendors that run the service on our behalf:
- Supabase — authentication & database
- Twilio — SMS verification codes
- Stripe — subscription payments
- Cloudflare R2 — media & asset storage
- Vercel — application hosting
- AI generation providers (e.g. Meshy and image/audio model APIs) — to produce the content you request
Asset storage & security
Assets you upload are stored under unique, randomly-generated identifiers (UUIDs). The storage cannot be browsed or listed — an asset is reachable only by someone who has its exact link. We do not apply per-file login protection to stored assets, and a link you share acts like a key: anyone who holds it can view that one asset. Do not upload material that must remain confidential.
Data retention
We keep your account and content while your account is active. You can ask us to delete your account and associated content; some records may be retained where required for legal, security, or accounting purposes.
Your choices
You can update your profile, opt out of SMS by replying STOP, and request access to or deletion of your data by contacting us.
Questions or requests? dadbotstudio.com