Songnara Studio

Legal

Privacy Policy

Last updated: 28 July 2026

  1. Controller. Songnara Studio is operated by Kiki Mulyana, Indonesia (“Songnara”, “we”, or “us”). Privacy requests may be sent to [email protected].
  2. Scope. This policy explains what the Songnara desktop application and website collect. Projects, imported media, exports, and AI provider API keys remain on your device unless you deliberately send them to a third-party service you configure.
  3. Data We Process.
    • Required license and subscription data: a hashed device license identifier, device-key fingerprint, entitlement status, plan, expiry, order reference, and anti-abuse security events. This is separate from optional diagnostics and is required to provide trials, subscriptions, refunds, and licensed access.
    • Optional device diagnostics: only after you opt in inside the App, Songnara may send a random install-scoped diagnostic ID; app/build version; operating system and architecture; CPU/GPU model, vendor, memory and driver information; available encoder and acceleration capabilities; bounded probe status and timing; hardware-profile fingerprint; crash, render, and sanitized error details; and a periodic active-install heartbeat. The diagnostic ID is not the license identifier.
    • Data never included in optional diagnostics: imported audio/video/images, project or export files, AI prompts, API keys, payment-card details, raw hardware serial numbers, MAC addresses, or the license HWID.
    • Website and support data: information you provide when contacting support and basic hosting/security logs produced by our website provider.
  4. Purposes and Legal Bases. We process required license, subscription, and payment records to perform our contract with you; security and anti-abuse records for our legitimate interest in protecting customers and the service; optional device diagnostics only with your consent; and records required by tax, accounting, consumer-protection, or other law to meet legal obligations.
  5. Optional Consent. Device diagnostics are off by default. The App describes the categories and recipient before you opt in. You may withdraw consent at any time in Settings without losing licensed features. Withdrawal stops future optional transmissions; license validation may still use the required license data described above.
  6. Payments and Recipients. Paddle.com Market Limited acts as Merchant of Record and handles payment-card data under its own privacy policy. Supabase hosts Songnara license and optional diagnostic records in Singapore. Website infrastructure and support providers process limited data needed to operate those services. AI or cloud-storage providers receive data only when you choose and configure those features.
  7. Retention. Optional hardware, crash, and render diagnostics are deleted after 90 days; optional security diagnostics after 180 days; and inactive heartbeat rows after 90 days. Local diagnostic delivery state is bounded and automatically rotated. License, subscription, order, refund, and accounting records are retained for the contract period and any additional period required to resolve disputes or comply with applicable financial and legal obligations. Support correspondence is retained only while needed to answer and document the request.
  8. Security. We use transport encryption, access controls, row-level database security, bounded payloads, path and credential sanitization, and separate projects for Songnara and other products. No security measure can guarantee absolute protection.
  9. International Transfers. Because we operate from Indonesia and use providers in other countries, data may be processed outside your country. Where required, transfers rely on an adequacy decision, contractual safeguards such as standard contractual clauses, or another lawful transfer mechanism. You may contact us for information about applicable safeguards.
  10. Your Choices and Rights. Depending on your location, you may request access, correction, deletion, restriction, portability, or objection; withdraw diagnostic consent; and complain to your local data-protection authority. Email [email protected] with enough information to verify the relevant order or device. We will not discriminate against you for exercising applicable privacy rights.
  11. No Sale or Advertising Profiling. We do not sell personal information, share it for cross-context behavioural advertising, or use optional diagnostics for advertising profiles or solely automated decisions with legal effects.
  12. Children. Songnara is not directed to children under 16. Do not provide data through the App if you are below the minimum age applicable in your country without valid parental authorization.
  13. Changes and Contact. Material changes will be reflected by the “Last updated” date and, when required, a renewed in-app consent request. Privacy questions and requests: [email protected].