Privacy Policy

1. Introduction

Anka (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform for AI-generated music.

This policy applies to all users of Anka, including creators who upload music and buyers who license music. By using our Platform, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide when you:

• Create an account: Email address, password, display name
• Complete your profile: Bio, avatar image, website URL, social media handles (Twitter, Discord)
• Upload content: Audio files, track metadata (title, description, genre, mood, tags, BPM, key), AI tool used, prompts used for generation
• Apply for verification: Proof of AI tool subscription, portfolio links, additional notes
• Make purchases: Billing information is collected and processed by our payment processor (Stripe)
• Contact us: Name, email, message content

2.2 Information Collected Automatically

When you use our Platform, we automatically collect:

• Device information: Browser type, operating system, device type
• Usage data: Pages visited, features used, time spent on Platform, play counts, search queries
• Log data: IP address, access times, referring URLs
• Cookies and similar technologies: Session cookies for authentication, preference cookies for settings

2.3 Audio Fingerprints and Technical Data

For protection and provenance purposes, we generate and store:

• Audio fingerprints (unique identifiers derived from audio characteristics)
• SHA-256 hashes of uploaded audio files
• Timestamps and provenance certificates

This technical data is used solely for content protection and is not used to identify you personally.

3. How We Use Your Information

We use the information we collect to:

3.1 Provide and Improve Services

• Create and manage your account
• Process and deliver license transactions
• Enable discovery of tracks and artists
• Generate provenance certificates and audio fingerprints
• Process verification applications
• Improve Platform features and user experience

3.2 Payments and Financial Operations

• Process payments through Stripe
• Facilitate creator payouts
• Prevent fraud and unauthorized transactions
• Comply with financial regulations

3.3 Communications

• Send transactional emails (purchase confirmations, license deliveries)
• Notify you of verification status changes
• Respond to support requests
• Send platform updates and announcements (you can opt out of non-essential communications)

3.4 Security and Legal Compliance

• Detect and prevent fraud, abuse, and security incidents
• Enforce our Terms of Service
• Comply with legal obligations and respond to lawful requests
• Resolve disputes and process takedown requests

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data under the following legal bases:

• Contract: Processing necessary to perform our contract with you (providing the Platform services)
• Legitimate Interests: Processing necessary for our legitimate business interests (improving services, preventing fraud, marketing)
• Legal Obligation: Processing necessary to comply with legal requirements
• Consent: Where you have given explicit consent for specific processing activities

5. How We Share Your Information

5.1 Service Providers

We share information with third-party service providers who help us operate the Platform:

• Supabase: Database hosting and authentication services
• Stripe: Payment processing and creator payouts
• Resend: Transactional email delivery
• Vercel: Website hosting and content delivery

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

5.2 Public Information

Certain information is publicly visible on the Platform by design:

• Your display name and profile information (bio, avatar, social links)
• Tracks you upload (titles, descriptions, metadata)
• Verification status (if verified)

5.3 License Buyers

When a buyer purchases a license to your track, they receive:

• Your display name as the creator
• Track metadata included in the license

We do not share your email address or payment information with buyers.

5.4 Legal Requirements

We may disclose information when required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.5 Business Transfers

If Anka is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. Your Rights and Choices

6.1 Exercising Your Rights

To exercise any of these rights, you can:

• Access and update your profile information directly in your account settings
• Delete your tracks from your dashboard
• Contact us at privacy@anka.so for data access, deletion, or portability requests

We will respond to requests within 30 days (or as required by applicable law). We may need to verify your identity before processing certain requests.

6.2 Communication Preferences

You can opt out of promotional emails by clicking the unsubscribe link in any promotional email. Note that you cannot opt out of transactional emails related to your account or purchases.

6.3 Cookie Preferences

Most browsers allow you to control cookies through settings. Note that disabling cookies may affect Platform functionality, particularly authentication.

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information. If this changes, we will provide an opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at privacy@anka.so. We will verify your identity before processing requests.

8. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements

Specific retention periods:

• Account data: Retained while your account is active, deleted within 30 days of account deletion request
• Transaction records: Retained for 7 years for tax and legal compliance
• Uploaded tracks: Deleted when you remove them from the Platform
• License records: Retained indefinitely as proof of license grant (required for legal protection of both creators and buyers)
• Log data: Retained for up to 12 months

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption in transit (TLS/SSL) and at rest
• Secure password hashing
• Row-level security in our database
• Regular security audits and updates
• Access controls limiting employee access to personal data
• Secure payment processing through PCI-compliant providers

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Anka is based in the United States. If you are accessing the Platform from outside the United States, your information will be transferred to and processed in the United States.

For users in the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses approved by the European Commission to transfer data to the United States. Our service providers are also bound by appropriate data protection agreements.

11. Children's Privacy

Anka is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will promptly delete it. If you believe we have collected information from a child, please contact us.

12. Third-Party Links and Services

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the “Last updated” date. For significant changes, we may also notify you by email.

Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Anka Privacy Team
Email: privacy@anka.so

For general support: support@anka.so

Data Protection Officer (for EEA users)

If you are in the European Economic Area and have concerns about our data processing, you may contact our Data Protection Officer at dpo@anka.so.

You also have the right to lodge a complaint with your local data protection supervisory authority.

By using Anka, you acknowledge that you have read and understood this Privacy Policy.