Privacy Policy

1. Introduction

IA.Puru - Innovation and Technology LTDA, CNPJ 64.604.875/0001-85, operator of the Create Music platform, is committed to protecting your privacy and the proper handling of your personal data. We adopt the privacy-by-design principle, incorporating personal data protection at all stages of platform development, operation, and improvement, in a preventive and continuous manner. This Privacy Policy describes what data we collect, how we collect it, how we use, store, and share your information, in compliance with the General Data Protection Law (LGPD - Law No. 13.709/2018) and ANPD Resolution No. 2, of January 27, 2022.

2.1. Registration Data

We collect the following information during registration:

• Email: Used for account creation, authentication, communication, and password recovery
• Name (when provided via OAuth): Collected through authentication providers like Google
• Profile photo (when provided via OAuth): Collected through authentication providers

2.2 Sensitive Personal Data

2.2. Biometric Data - Audio Recordings

By using our service, you record audio containing:

• Personal stories and narratives related to emotional bonds and relationships
• Names of third parties occasionally mentioned in the stories

2.3. Usage Data

• Created songs and their metadata
• Credit usage history
• Access information (IP address, browser, device)
• Platform activity logs

2.4. Payment Data

We process payment information through secure partners (Stripe). We do not store complete credit card data on our servers.

3.1. Partners and Purpose

We share your audio recordings and related data with the following technology partners:

• OpenAI: For natural language processing, text generation, audio transcription, semantic analysis, and image generation
• Google DeepMind / Google AI: For language models, image generation, audio processing, and multimodal solutions
• Anthropic: For understanding, generation, and analysis of text through large-scale language models
• Microsoft Azure OpenAI Services: For hosting, processing, and execution of language models and generative AI
• Meta AI: For research, development, and execution of language, image, and audio models
• Amazon Web Services (AWS Bedrock): For infrastructure, data processing, and access to foundational AI models
• Cohere: For text generation, classification, embeddings, and semantic analysis
• Mistral AI: For large-scale language models applied to text generation and understanding
• Stability AI: For image generation, visual content, and multimodal generative models
• Hugging Face: For hosting, execution, and integration of language, image, and audio models
• Midjourney: For image generation through artificial intelligence models
• Runway ML: For generation and editing of visual content, including images and videos generated by AI
• ElevenLabs: For voice synthesis, transformation, and generation by artificial intelligence
• AssemblyAI: For audio transcription, voice analysis, and spoken language processing
• Speechmatics: For speech recognition and audio-to-text conversion
• Adobe Firefly / Adobe AI: For image, video, and creative content generation by AI
• IBM Watsonx: For foundational models, data analysis, and corporate generative AI solutions
• Baidu AI: For language models, multimodal processing, and generative AI solutions
• Tencent AI Lab: For research and development of language, image, and audio models
• NVIDIA AI: For acceleration, execution, and infrastructure of generative AI models

3.2. Legal Basis for Sharing

The sharing of personal data with technological partners responsible for processing through artificial intelligence solutions is carried out based on the legitimate interest of the controller, in accordance with article 7, item IX, of the General Data Protection Law (Law No. 13.709/2018), strictly necessary for the execution, improvement, and adequate provision of the contracted service, observing the fundamental rights and freedoms of the data subjects, as well as the principles of purpose, necessity, and proportionality.

3.3. Protections and Guarantees

• ✓ All partners operate under strict confidentiality agreements
• ✓ Data is transmitted through encrypted connections (HTTPS/TLS)
• ✓ Our partners use the data exclusively to process your request
• ✓ Partners do not use your data to train AI models (according to opt-out policies)
• ✓ Temporary audio is deleted after processing

We use your data to:

• ✓ Create personalized songs based on your stories
• ✓ Manage your account and authentication
• ✓ Process payments and manage credits
• ✓ Send notifications about song status
• ✓ Improve our services and user experience
• ✓ Comply with legal and regulatory obligations
• ✓ Prevent fraud and ensure platform security
• ✓ Display relevant ads and measure advertising campaign performance

5.1. Retention Period

• Original audio recordings: Temporarily stored during processing and may be kept to allow song regeneration. You can request deletion at any time.
• Generated songs: Kept while your account is active or until deletion request
• Registration data: Kept while your account is active
• Access logs: Kept for up to 6 months for security purposes

5.2. Security Measures

• ✓ Encryption of data in transit (TLS/SSL) and at rest
• ✓ Strict access controls and multi-factor authentication for administrators
• ✓ Continuous security monitoring and anomaly detection
• ✓ Regular backups in secure environments
• ✓ Periodic security auditing

6. Your Rights (LGPD)

You have the following rights regarding your personal data:

• Confirmation and Access: Confirm if we process your data and access your information
• Correction: Correct incomplete, inaccurate, or outdated data
• Anonymization/Blocking/Deletion: Request anonymization, blocking, or deletion of unnecessary or improperly processed data
• Portability: Request the portability of your data to another provider
• Consent Revocation: Revoke consent for biometric data processing (will prevent service use)
• Opposition: Object to processing carried out without your consent
• Sharing Information: Know which public and private entities we share your data with

To exercise your rights, contact us at: contato@iapuru.com.br

7. Account Closure and Data Deletion

Upon request for account closure by the data subject, the personal data provided by them will be securely and definitively deleted, in accordance with article 15 of the General Data Protection Law (Law No. 13.709/2018), except for the preservation of those data whose maintenance is mandatory or authorized by legal or regulatory provision, including for compliance with legal obligations, regular exercise of rights in judicial, administrative, or arbitral proceedings, as well as for audit and record preservation purposes, observing the applicable legal deadlines.

8. Informed Consent

You can revoke your consent at any time, but this will prevent the continued use of the service for creating new songs.

9. Cookies and Similar Technologies

We use cookies and similar technologies to ensure the platform works properly and to offer you a more relevant experience.

• Essential cookies: Required for basic platform functionality, such as authentication and language preferences. These cookies cannot be disabled.
• Analytics cookies: Used to understand how you interact with our site, allowing us to continuously improve the experience. Data is collected in aggregate and anonymized form.
• Advertising cookies: Used by advertising partners to display more relevant ads based on your interests. These cookies may track your browsing across other sites to personalize the ads shown to you.

You can manage your cookie preferences at any time through your browser settings. Refusing non-essential cookies does not prevent you from using the platform, but may limit the personalization of your experience.

All data collected through cookies is handled in compliance with the LGPD (Law No. 13.709/2018) and used exclusively for the purposes described above. We do not sell your personal data to third parties.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via registered email. We recommend reviewing this page regularly.

11. Contact

12. Legal Compliance

This Privacy Policy was prepared in compliance with the General Data Protection Law (Law No. 13.709/2018) and reflects our commitment to transparency and protection of your personal data.