Privacy Policy

This policy explains what Frankenstein Audio (operated by GonzyDesigns LLC) collects, why, and your choices. Short version: we collect what the product needs to work, we don't sell your data, and your audio is yours.

1. What we collect

• Account: your email address and a salted, hashed password (never the password itself). If you sign in with Google, we receive your email from Google and store no password at all.
• Your audio: files you upload and the stems, analyses and exports derived from them, stored so the studio can work with them.
• Usage records: plan tier, export/library counters, and standard server logs (IP address, timestamps, requests) kept for security and abuse prevention.
• Cookies: one essential session cookie to keep you signed in. No advertising or cross-site tracking cookies.

2. Payments

Payments are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we store only Stripe's customer and subscription identifiers and your plan status. Stripe's own privacy policy applies to payment data.

3. Service providers

We share data only with the providers needed to run the Service: Stripe (billing), Google (optional sign-in), Resend (transactional email such as verification links), and Amazon Web Services (hosting, United States). We do not sell or rent personal information, and we do not run third-party ads or analytics.

4. How we use your data

To provide and secure the Service (processing your audio, enforcing plan limits, preventing abuse), to send transactional email (verification, billing notices), and to respond when you contact us. We do not use your uploads to train models or share them with other users.

5. Retention and deletion

Your library persists while your account is active. Rendered exports are cleaned up automatically after roughly 24 hours (download them promptly). You can delete songs at any time, and you can request full account deletion — including your library and personal data — by emailing gonzydesigns@gmail.com; we honor such requests within 30 days, except records we must keep (e.g., billing history).

6. Your rights

Depending on where you live (e.g., GDPR or CCPA jurisdictions), you may have rights to access, correct, export or delete your personal data, and to object to certain processing. Email us and we will honor applicable requests. We do not discriminate for exercising privacy rights.

7. Security

All traffic is encrypted in transit (HTTPS). Passwords are hashed with scrypt. Access to production systems is limited to GonzyDesigns LLC. No system is perfectly secure — use a unique password.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

9. Changes and contact

We may update this policy; material changes will be announced on the site or by email. Questions or requests: gonzydesigns@gmail.com.