Privacy Policy

1. Introduction

Sunographer ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service.

2. Information We Collect

Account Information

• Email address (for account creation and communication)
• Password (encrypted and securely stored)
• Subscription tier and payment history

Usage Data

• Projects you create (name and instructions)
• Documents you upload to projects (filename, content, file type)
• Chat conversations and AI-generated output within projects
• Credit usage and transaction history

Technical Data

• IP address (for security and rate limiting)
• Browser type and version
• Error logs (for debugging)

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process your lyrics and generate AI-powered suggestions
• Manage your account and subscriptions
• Communicate with you about the Service
• Prevent fraud and abuse
• Improve the Service

4. Data Storage and Security

Your data is stored securely using industry-standard practices:

• Account data is stored in Supabase (PostgreSQL with encryption at rest)
• Payment data is handled securely by Stripe (we never store card numbers)
• Project data (documents, chats, generated output) is stored in our database and protected by row-level security
• All data is transmitted over HTTPS

5. Third-Party Services

We use the following third-party services that may process your data:

• Supabase - Authentication and database
• Stripe - Payment processing
• Anthropic - AI processing (lyrics are sent for analysis)
• Vercel - Hosting
• Sentry - Error tracking (no personal data)
• PostHog - Product analytics (usage patterns, feature adoption, session recordings for UX improvement)

6. Chrome Extension

The Sunographer Chrome extension ("Import from Suno") helps you import songs from Suno into Sunographer. Here is how the extension handles your data:

• What it accesses - The extension reads only the URL of the current Suno song page when you click the extension icon. It does not read page content, cookies, browsing history, or any other data.
• When it activates - The extension only activates when you explicitly click its icon while on a suno.com page. It does not run in the background or monitor your browsing.
• What it sends - The song URL is passed to app.sunographer.com via a standard browser navigation. No data is sent to any other server.
• Permissions - The extension uses only the "activeTab" permission, which gives it temporary access to the current tab only when you click the icon.
• Data storage - The extension does not store any data locally or remotely.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Withdraw consent for marketing communications

To exercise these rights, please contact us at privacy@sunographer.com.

8. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know - You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete - You can request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out - You have the right to opt-out of the sale of your personal information. However, we do not sell your personal information to third parties
• Right to Non-Discrimination - We will not discriminate against you for exercising any of your CCPA rights

To exercise these rights, please contact us at privacy@sunographer.com. We will respond to verifiable requests within 45 days.

Categories of Personal Information Collected: Identifiers (email address), commercial information (subscription and payment history), internet activity (usage data, IP address), and user-generated content (projects, documents, chat conversations).

We Do Not Sell Personal Information. We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration.

9. Cookies and Analytics

We use the following types of cookies:

• Essential cookies - Required for authentication and session management
• Analytics cookies - Help us understand how you use our Service so we can improve it (via PostHog)

Our analytics collect information such as pages visited, features used, and button clicks. We also use session recordings (with sensitive fields masked) to identify and fix usability issues. We do not use advertising cookies or sell your data to third parties.

10. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except for data we are legally required to retain.

11. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect personal data from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the Service.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@sunographer.com.