Last updated: September 28, 2026 · Applies to: the TuneFlows website and web application (the "Service")
This Privacy Policy explains how TuneFlows ("we", "us", "our") collects, uses, and protects information when you use the Service. It should be read together with our Terms of Service and Acceptable Use Policy. By using the Service you agree to this policy.
When you sign in we collect your name, email address, profile picture, and a unique account identifier (for example, your Google user ID).
We process the prompts, lyrics, titles, audio, cover art, sheet music, and other material you generate or upload through the Service so we can create and store your music.
We collect device and browser type, IP address, timestamps, and interaction events (such as generation requests, likes, and comments) to operate, secure, and improve the Service.
Payments are handled by third-party processors. We do not store your full card number or wallet private keys. We do store transaction references, the plan or credit pack purchased, and your subscription status. For cryptocurrency payments we may store the public transaction hash and the sending address as recorded on-chain, which is public by nature.
If you list a track on the Marketplace you must publish at least one way for buyers to reach you: a Discord handle or a professional email address. That address is stored in a field of its own and is deliberately separate from the address you sign in with — it is never copied from your sign-in email, and you choose what to enter.
TuneFlows is partly a public showcase, and some of your information is visible to anyone, signed in or not:
Your Marketplace contact method is public. Anyone can read it. Use a handle or address you are willing to make public, and remove the listing if you change your mind.
Your sign-in email address, credits, subscription status, and private drafts are never shown to other users.
We use one strictly necessary session cookie, tf_session, to keep you signed in. Your browser also stores a token and a cached copy of your profile in local storage under the keys tf_token and tf_user, so the interface can render before the server responds; signing out clears them. We do not use advertising cookies. Where the law requires it, we will show a consent banner before setting anything that is not strictly necessary.
We share limited data with the vendors needed to run the Service, each under their own terms:
We do not sell your personal information. We may disclose information where we are legally required to, or where it is necessary to investigate a breach of our Terms or a rights complaint.
We retain your account and content for as long as your account is active, and for a reasonable period afterward to meet legal, tax, and security obligations. Marketplace listings are deleted when you remove them or delete your account. You may request deletion of your account and data at any time.
Depending on where you live (for example under the GDPR or UK GDPR, or the CCPA), you may have the right to access, correct, delete, restrict, port, or object to the processing of your personal data, and to withdraw consent where processing is based on consent. To exercise these rights, contact us at [email protected]. You also have the right to complain to your local data protection authority.
We use appropriate technical and organizational measures to protect your data, including hashed session tokens and access controls on the database. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.
We and our vendors may process data in countries outside your country of residence, including the United States and China. Where required, we rely on appropriate safeguards such as standard contractual clauses.
If you believe content on the Service infringes your copyright, follow the takedown procedure in section 7 of our Terms of Service. Complaints about a Marketplace listing go to the same designated agent.
We may update this policy from time to time. We will post the updated version here and, where appropriate, notify you. The date at the top of this page shows when it last changed.
Questions about this policy or your data? Contact TuneFlows at [email protected].