1. Definitions and Introduction

This Privacy Policy (“Policy”) is published by Vocuno LLC, a limited liability company organized under the laws of the State of Wyoming, United States (“Vocuno,” the “Company,” “we,” “us,” or “our”). Unless otherwise defined herein, capitalized terms shall have the meanings ascribed to them in this Section.

“Personal Data” means any information that identifies, relates to, describes, or is reasonably capable of being associated with a particular individual or household.

“User-Generated Content” means any text, files, images, audio, documents, prompts, outputs, or other materials that you create, upload, submit, or otherwise generate through or in connection with the Service.

“Service” means, collectively, all products, services, applications, platforms, and websites owned, operated, or controlled by the Company.

“Underlying Vendors” means the third-party service providers, platforms, APIs, and tools whose functionalities the Company aggregates, integrates, or otherwise makes accessible through the Service. As of the effective date of this Policy, Underlying Vendors include, by way of example and without limitation, Suno and LALAL.AI. The specific Underlying Vendors integrated with the Service are subject to change at any time, at the Company’s sole discretion, as new providers are onboarded or existing providers are discontinued. An up-to-date list of current Underlying Vendors and links to their respective privacy policies is maintained within the Service and made available to you prior to your use of any vendor-dependent feature.

This Policy applies to all Personal Data and User-Generated Content collected, processed, or stored by the Company in connection with the Service. The Company recognizes the fundamental importance of protecting the privacy of individuals who access or use the Service and is committed to processing Personal Data in a manner consistent with applicable data protection laws, including, without limitation, the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) and the Swiss Federal Act on Data Protection (“FADP”).

The Company adheres to the Swiss Safe Harbor privacy principles of Notice, Choice, Onward Transfer, Security, Data Integrity, Access, and Enforcement.

Where additional detail is required to explain the Company’s privacy practices for a particular feature or service, supplemental privacy notices are published and made available through the Company’s help center. Such supplemental notices are incorporated herein by reference.

2. Categories of Information Collected

The Company may collect and process the following categories of information in connection with the provision of the Service:

2.1 Information You Provide Directly

When you create an account or enroll in any feature of the Service that requires authentication, the Company collects Personal Data that you voluntarily submit, including, without limitation, your name, email address, and account credentials. For paid features, the Company may also collect payment instrument details (e.g., credit or debit card information), which are maintained in encrypted form on secure servers and are never stored in plaintext.

2.2 User-Generated Content

In the course of using the Service, you may create, upload, or submit User-Generated Content. The Company stores such content on its infrastructure for the purpose of providing, operating, and improving the Service. You retain full and exclusive ownership of all intellectual property rights in your User-Generated Content at all times. The storage of User-Generated Content by the Company does not constitute a transfer, assignment, or licence of any ownership rights from you to the Company, except for the limited, non-exclusive, revocable licence necessary to operate the Service on your behalf.

2.3 Information Collected Automatically

Cookies and Similar Technologies. When you access the Service, the Company may place one or more cookies — small text files containing a unique alphanumeric identifier — on your device. Cookies are deployed to store user preferences, maintain authenticated session state, and analyze aggregate usage patterns. You may configure your browser to reject all cookies or to alert you when a cookie is being transmitted; however, disabling cookies may impair the functionality of certain features of the Service.

Server Log Data. The Company’s servers automatically record certain technical information transmitted by your browser or client application each time you access the Service. Such log data may include your Internet Protocol (IP) address, browser type and version, preferred language, referring and exit URLs, date and time stamps, and one or more cookies that may uniquely identify your browser session.

2.4 User Communications

When you contact the Company via email, in-app messaging, or any other communication channel, the Company may retain such correspondence and any metadata associated therewith for the purposes of processing your inquiry, responding to your request, maintaining a record of the communication, and improving the Service.

2.5 Third-Party Websites and Services

This Policy applies exclusively to the Service. The Company does not exercise control over, and expressly disclaims responsibility for, the privacy practices, data collection methods, or content of any third-party websites, applications, or services that may be linked to, integrated with, or otherwise accessible from the Service. You are encouraged to review the privacy policies of any third-party service before providing Personal Data thereto.

3. Purposes of Processing

The Company processes Personal Data and User-Generated Content solely for the purposes described in this Policy and any applicable supplemental privacy notices. Such purposes include, without limitation:

• Providing, operating, maintaining, and improving the Service, including the rendering of personalized content and features;
• Storing and processing User-Generated Content to enable you to access, edit, and retrieve your work across sessions and devices;
• Transmitting User-Generated Content and associated inputs to Underlying Vendors for the purpose of executing processing tasks you have specifically requested;
• Conducting auditing, research, and analysis activities necessary to maintain, protect, and enhance the Service;
• Ensuring the technical integrity, availability, and security of the Company’s infrastructure and systems;
• Developing new products, features, functionalities, and services;
• Communicating with you regarding your account, Service-related announcements, security alerts, and support inquiries.

4. User-Generated Content — Storage, Export, and Deletion

The Company stores User-Generated Content on secure infrastructure for the duration of your active use of the Service and for a reasonable period thereafter, as described in this Section. The Company processes User-Generated Content solely for the purposes of operating, maintaining, and improving the Service and, where applicable, transmitting such content to Underlying Vendors (as described in Section 4.5 and Section 8) to fulfill your specific processing requests.

4.1 Ownership

You retain all right, title, and interest — including all intellectual property rights — in and to your User-Generated Content. Nothing in this Policy or the Terms of Service shall be construed as transferring any ownership rights in your content to the Company.

4.2 Data Portability and Export

In accordance with Article 20 of the GDPR and analogous provisions under other applicable data protection legislation, you have the right to receive your User-Generated Content in a structured, commonly used, and machine-readable format. The Company provides in-app export functionality enabling you to download your content at any time, without charge and without the need to submit a formal request. Where in-app export is not available for a particular content type, you may submit a data portability request to contact@vocuno.com, and the Company shall fulfil such request without undue delay and in any event within thirty (30) calendar days of receipt.

4.3 Retention

User-Generated Content is retained for the duration of your active account with the Service. Following account closure or deletion, the Company shall retain User-Generated Content for a maximum period of thirty (30) calendar days to facilitate account recovery, after which it shall be permanently and irrevocably deleted from all primary storage systems. Residual copies in encrypted backup systems shall be purged in accordance with the Company’s standard backup rotation schedule, which does not exceed ninety (90) calendar days.

4.4 Deletion

You may delete individual items of User-Generated Content at any time through the Service’s interface. You may also request the deletion of all User-Generated Content associated with your account by contacting the Company at contact@vocuno.com. All verified deletion requests shall be processed within twenty-four (24) hours of receipt. Upon deletion, the Company shall cease all processing of the affected content, except to the extent that retention is required by applicable law, regulation, or a valid and enforceable legal order.

4.5 Content Generated Through Underlying Vendors

The Service operates as an aggregation platform that enables you to access and utilize the functionalities of various Underlying Vendors through a unified interface. When you use the Service to generate, transform, or process content through an Underlying Vendor — including, without limitation, AI-generated audio, music, vocal separation, text-to-speech outputs, or any other vendor-produced materials — such content may be transmitted to, processed by, and temporarily or permanently stored on the infrastructure of the applicable Underlying Vendor in accordance with that Underlying Vendor’s own data processing practices.

You expressly acknowledge and agree that any content generated through, processed by, or otherwise routed to an Underlying Vendor is subject to the privacy policy, terms of service, and data retention practices of that Underlying Vendor, in addition to this Policy. The Company acts solely as an intermediary and does not control, and shall not be held liable for, the data collection, retention, use, disclosure, or security practices of any Underlying Vendor. It is your responsibility to review and understand the privacy policies of the Underlying Vendors whose services you access through the Service prior to initiating any vendor-dependent processing.

The Company shall make commercially reasonable efforts to: (a) integrate only Underlying Vendors that maintain privacy and security practices broadly consistent with applicable data protection laws; (b) clearly identify the specific Underlying Vendor being utilized prior to the initiation of any vendor-dependent processing operation; and (c) provide you with direct hyperlinks to the applicable Underlying Vendor’s current privacy policy within the Service interface. However, because the roster of Underlying Vendors may change at any time and without advance notice to you, and because each Underlying Vendor may independently amend its own privacy policy, you are encouraged to periodically review the current list of Underlying Vendors and their respective policies as made available within the Service.

For the avoidance of doubt, the Company’s obligations under this Policy with respect to deletion, export, and data portability (as set forth in Sections 4.2 through 4.4 above) apply exclusively to copies of User-Generated Content stored on the Company’s own infrastructure. To the extent that any Underlying Vendor independently retains copies of content generated through or processed by its platform, the deletion, export, or portability of such copies is governed solely by that Underlying Vendor’s own policies and procedures, and any requests in that regard must be directed to the Underlying Vendor concerned.

5. Data Storage and Protection

Personal Data and User-Generated Content stored by the Company are maintained on secure cloud infrastructure with industry-standard security controls. Authentication tokens are encrypted at rest using AES-256 encryption or its cryptographic equivalent. All data transmissions between your device and the Company’s servers occur over connections protected by Transport Layer Security (TLS) 1.2 or higher.

The Company maintains commercially reasonable administrative, technical, and physical safeguards designed to protect data against unauthorized access, alteration, disclosure, loss, or destruction. The Company processes data on servers located in the United States of America, the European Union, Switzerland, and such other jurisdictions as may be necessary for the provision of the Service. In all cases where Personal Data is transferred to a jurisdiction that does not provide an adequate level of data protection as determined by the European Commission, the Company ensures that appropriate safeguards are in place, including, where applicable, Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms approved under the GDPR.

6. Your Rights and Choices

Subject to applicable law, you have the following rights with respect to your Personal Data and User-Generated Content held by the Company:

1. Right of Access. You have the right to obtain confirmation as to whether the Company processes your Personal Data and, where such is the case, to request access to such data together with certain supplementary information as prescribed by applicable law.
2. Right to Rectification. You have the right to request the correction of inaccurate Personal Data and the completion of incomplete Personal Data held by the Company.
3. Right to Erasure. You have the right to request the deletion of your Personal Data and User-Generated Content in accordance with the conditions set forth in Section 4.4 of this Policy and Article 17 of the GDPR.
4. Right to Data Portability. You have the right to receive your Personal Data and User-Generated Content in a structured, commonly used, and machine-readable format, and to transmit such data to another controller, as described in Section 4.2 of this Policy.
5. Right to Restrict Processing. You have the right to request the restriction of processing of your Personal Data under the circumstances prescribed by applicable law.
6. Right to Object. You have the right to object to the processing of your Personal Data on grounds relating to your particular situation, where such processing is based on the Company’s legitimate interests.
7. Right to Withdraw Consent. Where the processing of your Personal Data is based on your consent, you have the right to withdraw such consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the foregoing rights, please contact the Company at contact@vocuno.com. The Company shall respond to all verified requests without undue delay and in any event within the time periods prescribed by applicable law. If you believe that the Company has not adequately addressed your request, you have the right to lodge a complaint with the competent supervisory authority in your jurisdiction.

You may also decline to provide Personal Data at any time; however, please be advised that doing so may limit or entirely preclude your ability to access or use certain features of the Service.

Please note that the foregoing rights apply to Personal Data and User-Generated Content held on the Company’s own infrastructure. To the extent that an Underlying Vendor independently holds or processes your data, the exercise of data subject rights with respect to such data must be directed to the Underlying Vendor in accordance with its own policies and procedures.

7. Disclosure of Information

The Company shall not disclose Personal Data or User-Generated Content to any third party except in the following narrowly defined circumstances:

1. Consent. The Company may disclose Personal Data where you have provided your prior express opt-in consent to such disclosure. The sharing of any category of sensitive Personal Data shall, in all cases, require your separate affirmative opt-in consent.
2. Underlying Vendors. When you initiate a processing task that requires the involvement of an Underlying Vendor, the Company shall transmit the minimum quantum of data strictly necessary to execute the requested operation to that Underlying Vendor. Such transmission constitutes a disclosure to a third party, and by initiating the processing task you consent to such disclosure. The Underlying Vendor’s handling of your data thereafter is governed by that Underlying Vendor’s own privacy policy.
3. Authorized Sub-Processors. The Company may disclose Personal Data or User-Generated Content to other third-party service providers engaged to process such data on the Company’s behalf, provided that each such party is bound by a written data processing agreement requiring it to process data strictly in accordance with the Company’s documented instructions, this Policy, and all applicable confidentiality and security obligations.
4. Legal Obligations and Legitimate Interests. The Company may disclose Personal Data where it maintains a good-faith belief that such disclosure is reasonably necessary to: (i) comply with applicable law, regulation, judicial or administrative proceeding, or enforceable governmental request; (ii) enforce the Company’s applicable Terms of Service, including the investigation of potential violations thereof; (iii) detect, prevent, or otherwise address fraud, security vulnerabilities, or technical issues; or (iv) protect against imminent and serious harm to the rights, property, or safety of the Company, its users, or the general public, as required or permitted by applicable law.
5. Corporate Transactions. In the event that the Company becomes involved in a merger, acquisition, corporate reorganization, asset sale, or any other transaction involving the transfer of all or a substantial portion of its assets, the Company shall provide affected users with prior written notice before any Personal Data or User-Generated Content is transferred to, and becomes subject to the privacy practices of, a successor entity or acquirer.

8. Underlying Vendors and Third-Party Data Processing

The Service functions as an aggregation platform, providing you with unified access to the capabilities of multiple Underlying Vendors. The Company may onboard new Underlying Vendors or discontinue existing Underlying Vendors at any time, at its sole discretion, without prior notice to you. The Company shall, however, ensure that the current roster of Underlying Vendors and their respective privacy policies are accessible to you within the Service at all times.

The Company engages only those Underlying Vendors and third-party providers that, to the Company’s reasonable knowledge, maintain privacy and data security practices consistent with applicable law. However, the Company does not warrant, guarantee, or assume responsibility for the privacy practices of any Underlying Vendor. Each Underlying Vendor operates as an independent data controller (or, where applicable, as a joint controller or processor) with respect to the data it receives, and its processing activities are governed exclusively by its own privacy policy and terms of service.

By using any feature of the Service that relies on an Underlying Vendor, you acknowledge and agree that: (a) the Company will transmit the data necessary to fulfill your request to the applicable Underlying Vendor; (b) such data, once received by the Underlying Vendor, is subject to that Underlying Vendor’s privacy policy and not solely to this Policy; (c) the Underlying Vendor may independently retain, process, or use such data in accordance with its own terms; and (d) the Company bears no liability for the Underlying Vendor’s handling of your data beyond the Company’s obligation to select vendors that maintain broadly adequate privacy practices.

8.1 Scope of Data Shared with Underlying Vendors

The Company does not transmit Personal Data identifiers — including, without limitation, your name, email address, or internal account identifiers — to any Underlying Vendor unless such transmission is strictly required for the requested operation. Only the minimum quantum of data necessary to execute the specific task you have initiated is transmitted.

All prompts, queries, instructions, and supplemental content you submit through the Service — together with any files, audio, images, or other materials you have explicitly and voluntarily attached to the processing context — may be transmitted to the applicable Underlying Vendor. All data subject to such transmission is clearly and conspicuously displayed to you within the Service interface at all times prior to transmission, affording you the opportunity to review and, if desired, remove any content before it is shared with the Underlying Vendor.

8.2 Underlying Vendor Policy Changes

Each Underlying Vendor reserves the right to amend its own privacy policy independently and without notice to the Company. The Company shall use commercially reasonable efforts to monitor material changes to the privacy policies of its Underlying Vendors and to update the links provided within the Service accordingly. Notwithstanding the foregoing, the Company does not guarantee that such links will reflect the most current version of an Underlying Vendor’s privacy policy at all times. You are encouraged to independently verify the applicable Underlying Vendor’s current privacy policy before initiating any vendor-dependent processing.

9. Information Security

The Company implements and maintains commercially reasonable administrative, technical, and physical security measures designed to protect Personal Data and User-Generated Content against unauthorized access, use, alteration, disclosure, loss, or destruction. Such measures include, without limitation, periodic internal audits of the Company’s data collection, storage, and processing practices; role-based access controls; encryption of data at rest and in transit; and physical security safeguards for systems and facilities on which data is stored or processed.

Access to Personal Data and User-Generated Content is restricted to those employees, contractors, and authorized agents of the Company who have a demonstrable need to access such information in order to operate, develop, maintain, or improve the Service. All such personnel are bound by written confidentiality obligations and are subject to disciplinary action — up to and including termination of engagement and referral for civil or criminal legal proceedings — in the event of any breach of such obligations.

10. Data Integrity

The Company processes Personal Data and User-Generated Content only for the specific purposes for which such data was collected and in strict accordance with this Policy and any applicable service-specific privacy notice. The Company conducts periodic reviews of its data collection, storage, and processing practices to verify that it collects, retains, and processes only such data as is necessary and proportionate to the provision and improvement of the Service. While the Company takes commercially reasonable steps to ensure that the Personal Data in its possession is accurate, complete, and current, the Company relies upon you to update or correct your Personal Data as and when necessary.

11. Enforcement and Dispute Resolution

The Company conducts periodic internal reviews to verify its ongoing compliance with this Policy. Should you have any question, concern, or complaint regarding this Policy or the Company’s treatment of your Personal Data, you may contact the Company at the address specified in Section 13 below.

Upon receipt of a formal written complaint, the Company shall promptly contact the complainant to acknowledge receipt and to address the substance of the concerns raised. In the event that a dispute cannot be resolved directly between the Company and the affected individual through good-faith negotiation, the Company shall cooperate with the competent regulatory authorities, including applicable local data protection supervisory authorities, to achieve a resolution.

12. Amendments to This Policy

The Company reserves the right to amend, modify, or supplement this Policy at any time, at its sole discretion. The Company shall not, however, materially diminish your rights under this Policy without first obtaining your explicit and informed consent. All amendments shall be published on this page, identified by an updated effective date. In the case of material amendments, the Company shall provide prominent advance notice by means it deems reasonably calculated to inform affected users, which may include, without limitation, email notification, in-app notification, or banner display within the Service. Archived versions of prior iterations of this Policy shall be maintained and made available upon written request.