Privacy Policy

1. Information We Collect

1.1 Information You Provide

Account Information:

• Email address
• Username / display name
• Password (stored encrypted)
• Profile information (bio, profile picture, social links)
• Date of birth (to verify age eligibility)

Creator Information:

• AI tool subscription details (for verification)
• Connected accounts (Suno, Udio, etc.)
• Uploaded audio files and metadata
• Track titles, descriptions, tags, and genres
• Pricing preferences

Buyer Information:

• Billing name and address
• Payment information (processed by Stripe — we do not store full card numbers)
• License purchase history
• Downloaded files

1.2 Information Collected Automatically

Usage Data:

• Pages visited and features used
• Time spent on the platform
• Search queries
• Clicks and interactions
• Referring websites

Device Information:

• IP address
• Browser type and version
• Operating system
• Device identifiers

1.3 Information from Third Parties

• Payment Processor (Stripe): Transaction status, payout information, fraud detection
• AI Tool Providers: Subscription status for verification (we do NOT receive your passwords)
• OAuth Providers: Email, name, profile picture (if you sign in with Google, etc.)

2. How We Use Your Information

2.1 To Provide and Operate the Platform

• Create and manage your account
• Process uploads and generate Provenance Certificates
• Facilitate license transactions between Creators and Buyers
• Process payments and payouts
• Provide customer support
• Send transactional emails (purchase confirmations, payout notifications)

2.2 To Verify and Protect

• Verify Creator commercial rights from AI tools
• Detect and prevent fraud, abuse, and policy violations
• Generate audio fingerprints for duplicate detection
• Enforce our Terms of Service
• Respond to legal requests and protect our rights

2.3 To Improve and Develop

• Analyze usage patterns to improve the platform
• Develop new features and services
• Conduct research and analytics
• Fix bugs and technical issues

2.4 To Communicate

• Send service-related announcements
• Notify you of policy changes
• Respond to your inquiries
• Send marketing communications (with your consent — you can opt out)

3. How We Share Your Information

3.1 Information Shared with Other Users

Creator Profiles (Public):

• Username and display name
• Profile picture and bio
• Track catalog (titles, descriptions, previews)
• Verification status and badges

Buyer Information (Shared with Creators):

When you purchase a license, the Creator receives your email and name for license records. This is necessary for the license agreement between you and the Creator.

3.2 Service Providers

3.3 Legal Requirements

We may disclose your information if required to:

• Comply with applicable law, regulation, or legal process
• Respond to valid subpoenas, court orders, or government requests
• Protect the rights, property, or safety of Anka, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues

4. Data Retention

4.1 Active Accounts

4.2 After Account Deletion

When you close your account:

• Your profile and tracks are removed from public view immediately
• We retain your data for 90 days before permanent deletion
• This allows time for dispute resolution and accidental deletion recovery
• After 90 days, personal data is permanently deleted or anonymized

5. Your Rights and Choices

5.1 Account Settings

You can:

• Update your profile information at any time
• Change your email preferences
• Download your data
• Delete your account

5.2 Communication Preferences

• Transactional emails: Required for platform operation
• Marketing emails: Opt-in only; you can unsubscribe at any time
• Platform notifications: Configurable in settings

5.3 Data Access and Portability

You have the right to:

• Access the personal information we hold about you
• Request a copy of your data in a portable format
• Request correction of inaccurate information

To exercise these rights, contact privacy@anka.so.

6. International Users

6.1 Data Location

Anka is based in the United States. Your information is processed and stored in the United States. By using the Platform, you consent to the transfer of your information to the United States.

6.2 European Economic Area (EEA) Users — GDPR

If you are located in the EEA, UK, or Switzerland, you have additional rights under GDPR:

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion (“right to be forgotten”)
• Restriction: Request restriction of processing
• Portability: Request your data in a portable format
• Objection: Object to processing based on legitimate interest
• Withdraw Consent: Withdraw consent at any time

Contact for GDPR requests: privacy@anka.so (Subject: “GDPR Request”)

6.3 California Users — CCPA/CPRA

If you are a California resident, you have rights under CCPA/CPRA:

• Know: Request disclosure of personal information collected
• Delete: Request deletion of your personal information
• Correct: Request correction of inaccurate information
• Opt-Out of Sale: We do NOT sell personal information
• Non-Discrimination: We will not discriminate against you for exercising your rights

7. Cookies and Tracking

7.1 Types of Cookies We Use

7.2 Your Cookie Choices

Most browsers allow you to block all cookies, block third-party cookies, delete cookies when you close the browser, or receive alerts when cookies are set. Note: Blocking essential cookies may prevent the platform from functioning properly.

8. Data Security

8.1 Security Measures

• Encryption: Data encrypted in transit (TLS/HTTPS) and at rest
• Access Controls: Limited employee access on need-to-know basis
• Authentication: Secure password hashing, optional two-factor authentication
• Monitoring: Security monitoring and intrusion detection
• Audits: Regular security reviews and updates

8.2 Payment Security

Payment information is processed by Stripe, a PCI-DSS compliant payment processor. We do not store full credit card numbers on our servers.

8.3 Breach Notification

In the event of a data breach that affects your personal information, we will notify you as required by applicable law and take steps to mitigate the impact.

9. Children's Privacy

Anka is not intended for children under 13 years old. We do not knowingly collect personal information from children under 13.

Users between 13 and 17 must have parental consent to use the platform.

If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information promptly. Contact privacy@anka.so if you believe this has occurred.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy, sending an email notification, or displaying a prominent notice on the Platform.

Changes become effective when posted unless we specify otherwise. Your continued use of the Platform after changes constitutes acceptance.

11. Contact Us

12. Summary