Privacy Policy — International

1. Controller and scope

The controller is Sole Proprietor Elena Yurievna Strebizh, INN 440101951111, OGRNIP 304440136200493, 156025, Kostroma, Russian Federation; email: strebizh1968@mail.ru. This policy covers the creative studio, enquiries, music account, lab, payments and website analytics.

2. Information and purposes

Enquiries: name, telephone, email or Telegram contact, requested service, optional website and message. We use these to respond, call back when requested, prepare an offer and perform an agreed project. Account data: name, email, password hash, consent records, referral details, balance and operation history. Registration IP and bonus records are used to prevent repeated trial and registration referral awards within 30 days, not for advertising. A separate IP/timestamp anti-abuse claim remains effective for 30 days even after account deletion; expired claims are purged on the next registration.

Lab inputs include prompts, artwork descriptions, images, track and artist names and audio supplied for processing. Payment data includes transaction reference, amount, provider status and receipt email. Technical data includes IP, browser, device, time and relevant security or consent records. We do not receive complete card details.

3. Legal bases and choices

Depending on the purpose and applicable law, processing relies on steps requested before a contract, performance of a contract, legal duties, proportionate security interests, or specific consent. Consent is obtained separately from service terms where required. Merely visiting or continuing to use the site is not treated as explicit consent to an international transfer.

Non-essential analytics, including Yandex Metrica and Top.Mail.ru, follows the cookie choice. Sending an enquiry does not subscribe you to advertising. Publishing your name, image, voice, testimonial or confidential work needs a separate valid basis.

4. Recipients and international processing

Initial website records are stored on infrastructure in Russia. Necessary recipients may include hosting and technical providers, mail providers (including the operator’s Gmail collection chain), Telegram notification infrastructure when used, YooKassa or Prodamus for a selected payment method, and RouterAI or related processing infrastructure for the selected AI tool.

Processing and onward routing may involve countries outside your own country. Any required transfer mechanism, notices and safeguards must be established under applicable law before the relevant transfer. This policy does not itself create Standard Contractual Clauses or make a blanket Article 49 GDPR consent valid. Contact us before submitting personal or confidential material requiring specific transfer safeguards; anonymised creative inputs should be used where possible.

5. Retention, security and rights

Account information is needed while the account is in use. Enquiries are retained for their purpose and any valid contractual or legal retention. Payment and accounting records may need retention after account deletion. We do not promise instant automatic deletion of every audio, job or backup copy unless the corresponding mechanism is established. Save your outputs and contact us to request deletion of supplied materials.

Access controls, password hashing, HTTPS, logging and backups support security. You may request access, correction, deletion, restriction or withdrawal of consent and, where applicable, portability or objection, and complain to a competent supervisory authority. We may verify identity proportionately. Lawful record-keeping duties may limit deletion.

We do not sell enquiry data. Do not submit sensitive categories of data or other people’s personal details to a generation tool without appropriate permissions and safeguards. For commissioned systems involving your customers’ data, roles and processing instructions are agreed separately.