Privacy Policy

Draft — not published. Last reviewed against the code on 2 September 2026.

Banger Studio is operated by AI Machine Solutions LLC ("we", "us"). This policy explains what the service collects, why, who else sees it, and what you can ask us to do about it.

What we collect

Your account. When you sign in, our identity provider Clerk gives us your user ID and email address. We store those, plus a display name (generated for you, and editable) and the date you joined. We never receive or store your password — Clerk handles sign-in entirely.

What you type. The hook lines, titles, cover-art prompts, and any messages you send to the in-app assistant. These are stored with your account and are sent to the AI providers listed below in order to make what you asked for.

What you make. The audio, vocal track, MIDI arrangement, cover art and video produced for you, together with the settings that produced them (genre, tempo, key, voice style).

Your IP address and a browser ID. The free tier allows five generations before payment. To enforce that we store your IP address and a random identifier kept in your browser's local storage, each with a counter. These are used for nothing else — not advertising, not analytics, not profiling. We keep no browser fingerprint and read no user-agent string.

How you found us. If you arrive with a ?ref= or ?utm_source= tag, we count it. This is stored as an aggregate tally per source and is not linked to your account.

Purchases. If you buy coins or a tier, we store the Stripe session and payment-intent identifiers, the amount, and what you bought.

What we never collect

• Card details. Payments run entirely through Stripe's hosted checkout. Your card number never touches our servers and is never stored by us. We see only that a payment succeeded and for how much.
• Analytics or advertising trackers. There are none in the application — no Google Analytics, no Meta pixel, no session recording, no third-party advertising identifiers.
• Cookies set by us. The application sets no cookies of its own. Clerk sets its own session storage to keep you signed in; that is described in Clerk's privacy policy.

What your browser stores

All of these live in your browser's local storage and never leave it except where stated:

| Stored value | Purpose | | --- | --- | | Device identifier | Sent with each request to enforce the free-tier limit | | Referral source | The ?ref= tag you arrived with | | Volume, grid/list preference | Interface settings | | "First visit done", "coach mark dismissed", "artist prompt skipped" | One-time interface flags |

You can clear all of it at any time through your browser's site-data settings. Doing so resets your free-tier counter for that browser but not for your IP address or your account.

Who else sees your data

We use these processors. Each receives only what it needs to do its job.

| Provider | What we send | Why | | --- | --- | --- | | Clerk | Nothing — we only verify the sign-in token you present | Sign-in | | Stripe | Your user ID, the item and price | Payments | | OpenAI | Your assistant messages; your cover-art prompt, which may include your hook line | The in-app assistant and cover art | | ElevenLabs | Your lyrics or hook line and voice settings | Vocal synthesis | | Runway | Your cover image and a text prompt | AI video | | Cloudflare R2 | The finished files for each song | Long-term storage | | Resend | Your email address and the song's title | "Your track is ready" email | | SoundCloud | Only if you connect it: the track, title and artwork you chose to publish | Publishing | | Render | Hosting and database — all data at rest lives here | Infrastructure |

We do not sell your data, and we do not share it with anyone outside this list.

We do not use your songs, lyrics or prompts to train any AI model. The providers above process your content under their own terms; if that matters to you, read theirs as well as ours.

What is public

Read this part carefully — it is the least obvious thing about the service.

Unless you mark it private, a finished song that has vocals is visible to other people in two ways:

• The Floor. It appears in the in-app community radio alongside your display name and tier, where any signed-in user can play it.
• A share link. Every finished song has a page at /s/<id> that anyone with the link can open without signing in. It shows the title, your artist name, the cover, a player, and any SoundCloud or Spotify links you added to your profile.

You can switch this off, per song. There is a "keep this track private" checkbox next to the Generate button, and a Private/Public control in each song's drawer in your library, so a song already made can be changed either way at any time. A private song does not appear on the Floor, and its /s/ share link stops resolving — so a link you had already sent to someone will no longer open. Private is the whole of it: the song stays in your library and nowhere else.

New songs are public by default. Existing songs were left as they were when the switch was introduced, rather than being changed for you.

Your email address and account ID are never shown publicly — only your display name and artist name, both of which you choose.

Publishing to SoundCloud is separate, opt-in, and happens only when you press the button on a specific track.

Your in-progress renders appear in the live queue with your display name, genre and progress — not the title or the audio.

How long we keep things

• Finished songs are archived to Cloudflare R2 and kept indefinitely, so that your library still works months later. Unarchived working files are deleted after 3 days.
• Your account, purchases and reaction history are kept until you ask us to delete them.
• Free-tier counters (IP and device ID) are currently kept indefinitely.

Your choices

• Make a song private. The Private/Public control in a song's drawer takes it off the Floor and switches off its share link, without deleting it. You can set this before generating too, with the checkbox next to Generate.
• Delete a song. The delete option on any track removes it from your library and from every public surface immediately.
• Change what people see. Your display name and artist name are editable in Settings at any time.
• Disconnect SoundCloud to revoke our ability to post on your behalf.
• Delete your account. Email us at the address below and we will remove your account, your songs and your stored files. We do this by hand today.
• Ask what we hold. Email us and we will tell you, and send you a copy.

If you are in the UK or EU, you have rights of access, correction, erasure, portability and objection under GDPR. Use the same address; we will respond within 30 days.

Children

The service is not intended for anyone under 13, and we do not knowingly collect information from children. If you believe a child has given us information, email us and we will remove it.

Security

Data in transit is encrypted. Our database and file storage are managed by Render and Cloudflare respectively. Access to production data is limited to the operator of the service. No system is perfectly secure, and we cannot guarantee absolute security.

Changes

If we change this policy materially, we will say so in the app before the change takes effect. The date at the top always reflects the current version.

Contact

AI Machine Solutions LLC Email: admin@bangerstudioai.com

_Postal address available on request — email admin@bangerstudioai.com._