Privacy Policy
1. Data controller and contact
SunoShaper is the controller of personal data processed through the SunoShaper website and application.
Privacy and support contact: helpdesk@sunoshaper.com
Website: https://sunoshaper.com
2. Personal data we collect
Account and Google sign-in data
When you sign in with Google, we may receive the basic account information authorised by you, such as your Google account identifier, email address, display name and profile image. SunoShaper does not receive your Google password.
Account data
When you create or use a SunoShaper account, we store only the basic account information received through Google sign-in: your account identifier, first name, last name and email address.
Musical inputs and generated content
When you use SunoShaper AI, the musical selections, text, lyrics, preset data and other inputs you provide are processed to produce Style Prompt, Arrangement Cues and Exclusions. SunoShaper does not state that these inputs or generated outputs are stored permanently unless that functionality is introduced and this Policy is updated.
Analytics and technical data
We use Google Analytics 4 to understand visits and use of the website and application. Depending on your device and settings, analytics data may include page views, events, approximate location derived from network information, device type, browser, operating system, referral source and interaction data. SunoShaper configures IP anonymisation where supported.
Communications
If you contact us, we process your email address, message content and related support information.
3. Why we process personal data
- to create and manage accounts;
- to authenticate users through Google;
- to operate SunoShaper and generate requested outputs;
- to provide support and transactional communications;
- to maintain security, diagnose errors and prevent abuse;
- to analyse product usage and improve the service;
- to comply with legal, accounting and regulatory obligations.
4. Legal bases
Where the GDPR or similar law applies, we process personal data on one or more of the following legal bases:
- Contract: to provide the account, application, credits and purchased services you request.
- Legitimate interests: to secure, maintain, troubleshoot and improve SunoShaper, provided those interests are not overridden by your rights.
- Consent: where consent is legally required, including for certain analytics or similar technologies.
- Legal obligation: to retain records or respond to lawful requests.
5. Google user data
SunoShaper uses Google sign-in only to authenticate your account and obtain the basic profile information you authorise. We do not use Google user data for advertising, and we do not sell it.
SunoShaper’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Service providers and recipients
We use specialist service providers to operate SunoShaper. They may process personal data only as necessary to provide their services. Current categories include:
- Google: authentication and Google Analytics;
- Supabase: authentication, database and backend infrastructure;
- hosting and infrastructure providers: website delivery, security and technical operations.
We may also disclose data where required by law, to protect rights or security, or in connection with a legitimate business restructuring.
7. International data transfers
Some providers may process data outside the European Economic Area. Where required, transfers are protected through adequacy decisions, Standard Contractual Clauses or other safeguards recognised by applicable law.
8. Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing the account, maintaining security, resolving disputes and meeting legal or accounting requirements.
Basic account data may be retained while the account is active and for a reasonable period afterwards where necessary for security, support or legal obligations. Support communications and technical logs are retained only as long as needed for support, security and legal purposes.
9. Cookies, local storage and analytics
SunoShaper uses browser storage and similar technologies for essential functions such as session handling and analytics state. The selected interface language may be saved locally in the user’s browser so the site can reopen in the same language; this preference is not part of the personal account data stored by SunoShaper. Google Analytics may use cookies or comparable identifiers to measure website and application usage.
You can restrict cookies through your browser settings. Blocking essential storage may affect login, language selection or other application functions. Where required by law, non-essential analytics should be activated only after the appropriate user choice.
10. Your privacy rights
Depending on your location, you may have rights to:
- access personal data held about you;
- correct inaccurate or incomplete data;
- request deletion of personal data;
- restrict or object to certain processing;
- receive portable data where applicable;
- withdraw consent at any time where processing relies on consent;
- lodge a complaint with a competent data-protection authority.
To exercise a right, contact helpdesk@sunoshaper.com. We may need to verify your identity before completing a request.
11. Account deletion
You may request deletion of your SunoShaper account and associated personal data by emailing helpdesk@sunoshaper.com. Some limited records may be retained where required for legal or security purposes.
12. Security
We use reasonable technical and organisational measures designed to protect personal data. No internet service can guarantee absolute security, and users remain responsible for protecting their Google account and devices.
13. Children
SunoShaper is not directed to children below the minimum age required to consent to online services in their country. We do not knowingly collect personal data from children in violation of applicable law.
14. Changes to this Policy
We may update this Privacy Policy to reflect changes to the service, providers, law or data practices. The revised version will be published on this page with an updated effective date.
15. Contact
For privacy questions, account deletion or requests concerning your personal data: