1. Who we are
This policy explains how Vocaler ("Vocaler", "we", "us", "our") handles personal information when you use our websites, apps, APIs, CLI, MCP integrations, and related services (together, the "Service"). Vocaler is the controller of the personal information described here. The legal entity operating Vocaler and its contact address are set out in Section 15.
2. Information we collect
We collect information you give us, information created as you use the Service, and information from third parties you connect.
- Account data — name, email, password, organization, and profile settings.
- Billing data — plan, credit balance, and transaction history. Payments are processed by Stripe; we never receive or store your full card number.
- Inputs — the audio, lyrics, images, prompts, reference material, and settings you upload or enter to generate content.
- Outputs — the music, artwork, videos, visualizers, and bundles the Service generates for you.
- Connected accounts — when you link a social or distribution account, we receive the access tokens and account identifiers needed to publish on your behalf. We do not receive your passwords for those platforms.
- Usage and device data — pages viewed, features and API endpoints used, credits consumed, IP address, browser and device type, and diagnostic and error logs.
- Support and communications — messages you send us and their contents.
3. How and why we use your information
We use personal information to:
- provide, operate, and maintain the Service, including generating, rendering, bundling, and publishing your content;
- process payments, manage credits, and prevent fraud;
- secure the Service, detect and prevent abuse, and enforce our Terms;
- provide support and respond to your requests;
- analyze and improve the Service (using aggregated or de-identified data where possible); and
- send service and transactional messages, and — only with your consent where required — product updates.
Legal bases (EEA/UK). Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Service you request); our legitimate interests (to secure, maintain, and improve the Service and prevent abuse); your consent (for optional cookies and marketing, which you may withdraw at any time); and compliance with legal obligations.
4. Your content and AI generation
When you generate content, your Inputs are processed to produce your Outputs. Some generation runs on third-party AI models (for example, Suno, Udio, Google, Midjourney, and others). To fulfil your request, we transmit the relevant Inputs to the applicable provider, which processes them under its own terms and privacy policy.
We do not use your private Inputs or Outputs to train Vocaler's own models, and we do not sell them. We cannot control, and are not responsible for, how independent AI providers use data submitted to them; where a provider offers a "no-training" or zero-retention option, we aim to use it, but you should review the providers relevant to your workflow. A current list of the providers and sub-processors we use is available on request at privacy@vocaler.ai.
5. How we share information
We do not sell your personal information. We share it only with:
- Service providers and sub-processors that operate the Service on our behalf — hosting and cloud infrastructure, AI model providers, payment processing (Stripe), analytics, email delivery, and customer support — each bound by contract to protect your data.
- Platforms you connect — when you publish content, we share it and the necessary metadata with the destination platform you selected.
- Legal and safety — where required by valid legal process, to protect our rights, users, or the public, or to investigate abuse.
- Corporate transactions — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
6. International data transfers
We are based in the United States and use service providers in the United States and other countries. Where we transfer personal information out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or another lawful transfer mechanism.
7. How long we keep information
We keep personal information for as long as your account is active and as needed to provide the Service. In general: account and billing records are retained while your account is active and for up to 7 years afterward for tax and audit purposes; Inputs and Outputs are deleted within 30 days of account closure (unless you delete them sooner); operational logs are retained for up to 90 days; and backups are cycled out within 30 days. We may retain limited information longer where required by law or to resolve disputes.
8. How we protect information
We use technical and organizational measures appropriate to the risk — encryption in transit, access controls, least-privilege practices, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authorities as required by law.
9. Your rights (EEA, UK, and Switzerland)
Subject to applicable law, you have the right to access, correct, delete, restrict, or object to processing of your personal information, to data portability, and to withdraw consent at any time. You may exercise these rights by emailing privacy@vocaler.ai; we respond within one month. You also have the right to lodge a complaint with your local data protection authority.
If you are in the EEA, the UK, or Switzerland, the controller of your personal information is the entity identified in Section 15, which you can reach at privacy@vocaler.ai or the postal address there for any request under this Section.
10. Your rights (United States)
Depending on your state (including California, and states with comparable laws such as Colorado, Connecticut, Virginia, Texas, and others), you may have the right to know what personal information we collect and how we use it, to access or delete it, to correct it, to obtain a portable copy, and to opt out of "sale" or "sharing" of personal information and of targeted advertising. We do not sell or share personal information as those terms are defined under U.S. state privacy laws, and we do not use it for cross-context behavioral advertising.
California residents also have the right not to receive discriminatory treatment for exercising these rights. To make a request, email privacy@vocaler.ai. You may use an authorized agent; we will verify your identity before acting. We honor Global Privacy Control (GPC) signals where required.
11. Cookies and similar technologies
We use a small number of essential cookies, a functional theme preference, and analytics to improve the Service. Our current site analytics are cookieless; where analytics use cookies, we set them only with your consent. We do not use advertising cookies. For details and your choices, see our Cookie Policy.
12. Children's privacy
The Service is not directed to children, and you must be at least 16 years old (or the age of digital consent in your country) to use it. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@vocaler.ai and we will delete it.
13. Third-party links and services
The Service may link to or integrate with third-party sites and services we do not control. Their privacy practices are governed by their own policies; we encourage you to review them.
14. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by posting the updated policy here with a new "Last updated" date and, where appropriate, by additional notice. Your continued use of the Service after changes take effect means you accept the updated policy.
15. Contact us
Questions, requests, or complaints about privacy? Email privacy@vocaler.ai.
Data controller: Vocaler is a service operated by Wish Merge Wonder LLC, 75 E 3rd St, Sheridan, WY 82801, United States.