Privacy Policy

1. Information We Collect

We collect only the information necessary to provide our service:

• Account Information: Email address and name from your Google account when you sign in. This is required to identify your account and manage your subscription.
• Audio Files: Files you upload for stem separation. Uploads are automatically deleted within 24 hours. Processed outputs are available for 30 days before deletion.
• Usage Data: Basic information about how you use the service, including processing history displayed in your dashboard.
• Payment Information: Handled securely by Polar (our Merchant of Record). We do not store your card details directly.

2. How We Use Your Information

• To provide and improve our audio processing service.
• To process payments and manage your subscription.
• To communicate with you about your account.
• To detect and prevent fraud or abuse.

3. Data Storage and Security

Your data is stored securely using industry-standard encryption and protected infrastructure.

• Uploaded Files: Automatically deleted within 24 hours via our storage lifecycle policy.
• Processed Outputs: Available for download for 30 days, then automatically deleted.
• Processing History: Job records in your dashboard are retained permanently for your reference. You can manually delete individual jobs at any time.
• Account Data: Your account information is retained while your account is active and deleted upon request.

4. Data Sharing and Service Providers

We do not sell your personal information. We share data only with the following service providers necessary to operate Stems.run:

• Cloudflare: Hosting, content delivery, and file storage. Cloudflare operates globally and may process data in multiple regions.
• Modal: GPU-based audio processing. Audio files are processed on Modal's infrastructure, with control plane routing through the United States.
• Polar: Payment processing as our Merchant of Record. Polar handles billing, taxes, and payment data. We do not store your card details.
• Google: Authentication via Google OAuth. We receive only your email and name for account creation.

5. International Data Transfers

Your data may be processed outside of India. Cloudflare operates globally, and Modal's audio processing infrastructure routes through the United States. By using Stems.run, you consent to these international transfers as necessary to provide the service.

6. Cookies and Analytics

We use minimal, privacy-respecting analytics to understand how the service is used. We do not use tracking cookies for advertising purposes.

7. Your Rights

You have the following rights regarding your data:

• Access: You can request a copy of your data.
• Deletion: You can request deletion of your account and associated data by contacting us.
• Correction: You can update your account information.
• Grievance: You may raise privacy concerns or complaints by contacting us at the address below.

8. Children's Privacy

Stems.run is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us to have it removed.

9. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify affected users promptly via email and take appropriate steps to mitigate any harm.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or through the service.

11. Contact and Legal Entity

Stems.run is operated by Parmar Labs, Karnataka, India.

For privacy-related questions, data requests, or grievances, please contact us at support@stems.run