Privacy Policy

Last updated: July 3, 2026

1. Who is responsible for your data

This service (“Presetsmith”, the “Service”) is operated by:

We are the “data controller” for the personal data described below, under the EU General Data Protection Regulation (GDPR) and Spanish data-protection law.

2. What data we collect

• Account data: your email address, and a password that is stored in encrypted (hashed) form by our authentication provider — we never see your actual password.
• Usage data: the number of tokens you use each day and the dates, so we can apply the daily free-tier limit.
• Content you submit: the tone descriptions and requests you type to generate presets, and any feedback you choose to send us about a preset.
• Technical data: your IP address and basic browser information, processed to deliver the site and to protect it against abuse (for example, rate-limiting).

3. Why we use it, and our legal basis

• To provide the Service (create your account, generate presets) — legal basis: performance of a contract with you.
• To enforce the free-tier limits (token counting) — legal basis: performance of a contract and our legitimate interest in running the Service fairly.
• To keep the Service secure and prevent abuse — legal basis: our legitimate interest.
• To improve the Service using aggregated, non-identifying usage patterns — legal basis: our legitimate interest.
• To send you optional product updates (e.g., new features or launch news), only if you opt in — legal basis: your consent, which you can withdraw at any time.

4. Who we share it with

We don't sell your personal data. We use a small number of trusted providers (“processors”) to run the Service:

• Supabase — stores your account and usage data, and handles login. Region: EU (Ireland, eu-west-1).
• Cloudflare — routes and protects requests to the Service (security and rate-limiting).
• Anthropic — the AI provider that processes the tone descriptions you type in order to generate your preset. Your descriptions are sent to Anthropic's API for this purpose and handled under Anthropic's terms.
• Hostinger — hosts this website.
• Google Fonts — this site loads fonts from Google, which means Google may receive your IP address when the page loads.

5. International transfers

Your account and usage data (Supabase) are stored within the European Economic Area (Ireland). Some other providers may process data outside the EEA — notably Anthropic (United States) when it processes the tone descriptions you submit, and Cloudflare, which operates a global network. Where data is transferred outside the EEA, the transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. How long we keep your data

We keep your account data for as long as your account is active. If you ask us to delete your account, we remove your personal data, except where we must keep something to comply with a legal obligation. Technical logs used for security are kept for a limited period and then deleted.

7. Your rights

Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. Where we rely on consent, you can withdraw it at any time. To exercise any of these, email info.auramusiclab@gmail.com.

You also have the right to complain to the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Cookies and local storage

The Service uses only essential, functional storage needed to keep you logged in (managed by our authentication provider). We do not use advertising or tracking cookies. The only third-party request on page load is Google Fonts, as noted above.

9. How we protect your data

Connections use HTTPS, passwords are stored hashed, database access is restricted per-user, and the AI provider key is kept on a secure server so it is never exposed in your browser.

10. Children

The Service is not directed to children under 16. If you are under that age, please do not create an account.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above.

12. Contact

Questions about this policy or your data: info.auramusiclab@gmail.com.