Privacy policy
Words into Music is a Savuko product operated from Poland. Savuko is responsible for the personal information we use to run this service. This policy covers the website, account, writing tools, generated songs and support. Product and privacy questions can be sent to contact@wordsintomusic.com; the Savuko team is also available at contact@savuko.com.
01. Information you provide
Account information includes your name, email address, verification status and sign-in information. If you use email/password authentication, the authentication service stores a password hash rather than your password in plain text. Google sign-in supplies the identity information needed to authenticate you, such as your account identifier, name and email; it does not give us access to your Gmail messages.
Creation information includes your prompts, ideas, supplied lyrics, musical direction, chosen language and recording settings. We also store saved drafts, generated lyrics and audio, song titles, favorites and library metadata. Avoid including sensitive personal information or material you are not entitled to submit.
02. Payment, support and technical information
Billing records include your plan, credit purchases, subscription status, billing dates, transaction and customer references, amounts, currency and credit ledger. Stripe collects payment and checkout information directly, including payment-card details and billing information. We receive payment status and limited payment-method information needed to manage billing, not your full card number.
Support messages contain your email address and what you choose to tell us. Technical records can include IP address, browser/device information, request times, authentication events, generation status, provider request identifiers, errors, timing and estimated processing costs. Providers may also keep security, abuse-prevention and operational logs.
03. Why we process it
We process account and creation information to provide the service you request: authenticate you, retain drafts, generate songs, keep your library, enable playback/downloads, manage credits and payments, and respond to support. Where data-protection law requires a legal basis, this processing supports our contract with you or steps you request before a contract.
We process limited security and operational information for legitimate interests in protecting users, investigating abuse, preventing repeated trial claims and keeping the service reliable. We consider the effect on your rights and use only information relevant to those purposes. We retain records where necessary to meet legal obligations, including accounting and responding to lawful requests. Optional marketing or analytics that requires consent will rely on consent, which you may withdraw.
04. Our providers
Cloudflare hosts and serves our website through Cloudflare Workers and processes web requests to deliver and secure it. Convex provides the database, backend functions, authentication storage and audio-file storage. Better Auth is the authentication software running with the Convex component, rather than a separate destination to which we send your content. Google processes sign-in when you choose it.
Replicate processes AI generation requests. Stripe processes checkout, subscription billing and payment management. These providers receive the information needed for their roles. Some also act as independent controllers for their own security, payment, legal or account obligations.
Resend delivers account verification and password-recovery emails. It receives the recipient email address and message content, including the link needed to verify an account or reset a password. Migadu hosts our contact mailbox and processes support messages sent to us.
05. AI inputs, processing and provider retention
When you request writing or audio generation, we send the relevant brief, lyrics and musical settings to Replicate. Generated text and audio return to our backend. We save successful recordings and their associated library information so they remain available after the provider's temporary files disappear. Account and payment identifiers are not intentionally included in musical prompts.
Replicate documents automatic removal of API prediction inputs, outputs, output files and logs after about one hour by default. That is its prediction-data policy, not a one-hour limit on our saved songs or all records held by the provider. Provider billing, security and other records are governed by its policies and contractual obligations. We do not offer a blanket zero-retention or no-training guarantee for every provider.
Savuko does not use your private prompts, lyrics or recordings to train its own AI model. We do not instruct providers to create a custom training dataset from them. Processing still depends on provider terms. Do not submit content that must never leave your device.
06. Where information is stored
Our production Convex database and audio-file storage are hosted in its US East region in Northern Virginia, United States. This includes account information, saved drafts, generation records and recordings stored by the app.
Cloudflare serves the website through its global network. Website requests may be processed in different countries. AI processing, Google authentication, Stripe payment processing, support email and provider operations may also involve other countries, including the United States. The service does not restrict all processing to Poland or the European Economic Area.
Where required, international transfers must use an applicable safeguard, such as an adequacy decision or standard contractual clauses. You can contact us for information about safeguards relevant to your data. We update this policy if our storage or provider arrangements materially change.
07. Access, security and sharing
We restrict app queries and file access by authenticated account ownership. Authorized team members and providers may access information where needed for support, security, maintenance or legal obligations. We use authenticated connections and server-side credentials. No system can guarantee absolute security.
Saved songs are not automatically published to a public gallery. The application protects playback/download access, but underlying storage URLs can act as bearer links: someone who receives a valid file URL may access its file. Treat those URLs and downloaded copies as private. Sharing a download is outside our control.
We may disclose information to comply with law, respond to a valid legal request, protect rights or investigate serious abuse. If the business is transferred, relevant information may transfer with it subject to appropriate safeguards and notice. We do not sell personal information or share private song content for targeted advertising.
08. Cookies and local device storage
Essential authentication cookies or tokens keep your session working and help secure sign-in. The wim-theme cookie stores an explicit light/dark preference for one year. Without a saved preference, the browser checks your device setting. The sidebar_state cookie remembers whether the app sidebar is open for seven days.
The composer saves a working song draft in your browser's local storage so you can return after signing in or refreshing. Writing tools also keep a brief in session storage for the current browser session. Local storage can persist until you clear it; session storage normally clears when the browser session ends. Signing out clears the app's saved composer and tool drafts in that browser. Server-saved drafts are separate.
You can clear cookies and site storage through browser settings, but doing so may sign you out or remove unsaved work. Essential storage is used to deliver requested account and preference functions.
09. Analytics and website hosting
Cloudflare hosts the website and processes request information, which can include IP addresses, requested URLs, browser information, request times and errors, to serve and secure it. Cloudflare Workers observability is enabled with a 10% sampling rate for operational monitoring. These operational records are separate from the account, draft and audio data stored in Convex.
Google Analytics, Vercel Web Analytics and Speed Insights are optional integrations in the project and are not enabled in the current configuration. We do not currently run advertising pixels or session replay. Other providers may also keep operational and security logs.
If optional analytics is enabled, we will describe the enabled services and introduce any consent controls required before collection. Such tools can process page addresses, referrers, approximate location, browser/device information and performance measurements. Song prompts, lyrics, audio, account emails and authentication tokens should not be included in analytics events.
10. How long we keep information
We keep account data, server-saved drafts and library information while needed to provide your account, unless you request deletion or another purpose requires retention. Saved audio remains until you delete the recording or request account deletion. There is currently no routine automatic expiry of saved recordings.
Deleting a song removes its active track entry and audio file. It does not automatically erase the separate generation job or its inputs, payment records, security logs, provider records or backup copies. Generation history currently remains associated with the account until addressed through a wider deletion request.
Accounting, subscription, payment-dispute and limited abuse-prevention records can remain for the periods required by law or reasonably needed to resolve a dispute. A record of a claimed trial may be retained to prevent repeated claims, subject to applicable privacy rights. We do not retain information longer than needed for its purpose. Residual backups and provider-held records may remain until their retention cycle ends; we do not promise immediate removal from every backup.
11. Your choices and privacy rights
You can edit your profile, delete library recordings, download your audio, stop future subscription renewal and contact us about closing your account. A billing cancellation does not delete personal information, and a song deletion is not an account deletion.
Depending on applicable law, you may request access, correction, deletion, restriction of processing or a portable copy of information. You may object to processing based on legitimate interests and withdraw consent where processing relies on it. Certain legal, security or third-party-rights obligations can limit a request; we will explain the relevant reason.
Email contact@wordsintomusic.com from your account email where possible. We may request proportionate identity verification. Under the GDPR we normally respond within one month; where a permitted extension is needed, we will tell you why. Requests are generally free unless the law allows a fee for a manifestly unfounded or excessive request. We do not make legally significant decisions about you solely through automated AI processing.
12. Children and sensitive information
The service is intended for people aged 18 or older. We do not knowingly provide accounts to children or seek their personal information. Contact us if you believe a child has submitted information so we can investigate and address it. Do not include health records, identity documents, precise location, financial credentials or another person's sensitive information in prompts.
13. Complaints, changes and contact
If you have a privacy concern, contact contact@wordsintomusic.com or the Savuko team at contact@savuko.com. You may complain to Poland's data-protection authority, the President of the Personal Data Protection Office, or the competent authority where you live, work or believe an infringement occurred.
We update this policy when the service or our practices change and show the revised date above. We will provide additional notice of material changes where required. This notice does not authorize a new incompatible use of your information without the legal basis or notice required by law.
