Privacy Policy

The short version

LoveMusic follows one rule: process your audio locally whenever possible, and be fully transparent when we can’t. Two kinds of tools live on this site, and they handle your files differently:

• Local tools (BPM Finder, Key Finder, Speed Changer, Pitch Shifter, 8D Audio Converter, Song Analyzer, Tap Tempo): your audio is processed entirely in your browser with the Web Audio API — and the Tap Tempo counter doesn’t touch a file at all. It is never uploaded. You can verify this yourself — open your browser’s network tab while a tool runs and watch for outgoing requests containing audio. There are none.
• AI stem tools (Vocal Remover, Stem Splitter, Acapella Extractor, Instrumental Maker): these need neural networks too large to run in a browser tab, so your file is uploaded, processed once, and deleted immediately after processing. We never store, share, or train on your audio.

We do not run advertising trackers and we don’t sell data to anyone. We do keep an account if you choose to create one: signing in with your email address gives you a generation history, paid credits, and the ability to download what you generated. We also run privacy-friendly analytics (see below) to understand which tools are useful.

Local-first tools: how they work

When you use the BPM Finder, Key Finder, Speed Changer, Pitch Shifter, 8D Audio Converter, or Song Analyzer, your file is decoded and analyzed by your own browser on your own device. No audio data, file metadata, or analysis results are transmitted to our servers. These tools keep working even if you disconnect from the internet after the page loads.

AI stem tools: what happens to your upload

Vocal removal and stem separation run on deep neural networks that cannot fit in a browser tab. When you use these tools:

1. Your file is uploaded over an encrypted (HTTPS) connection.
2. It is sent to our AI inference provider, Replicate, which runs the separation model. Replicate acts as a data processor on our behalf: it processes your file solely to return your result and does not retain or use it for any other purpose, including model training.
3. The separated tracks are returned to your browser via a temporary CDN link, which we do not persist.
4. Your original upload is deleted from our storage the moment processing completes. As a safety net, anything that slips through (for example, if deletion fails mid-request) is removed automatically by our storage lifecycle rules within hours.

The free tier allows 3 separations per day with a 20MB file size cap, which is what keeps this sustainable. You can use that free daily allowance without an account; signing in is optional and adds a generation history and paid credits.

AI music generation: what happens to your prompt

The AI Music Generator works without signing in — the free daily allowance does not need an account. If you sign in (email address plus a 6-digit code) you additionally get a generation history and the option to buy credits. The AI Music Video Generator is still open for waitlist sign-up, and the waitlist collects exactly one thing — the email address you submit to the waitlist, which is used for a single launch announcement and nothing else (no newsletter, no marketing drip, no sharing with third parties). Ask us to remove it any time via hello@lovemusic.ai.

The music generator works differently from the stem tools above, because it takes a text prompt instead of an audio file. The only thing you give us is that prompt — up to 2,800 characters — together with the style and instrument choices you pick in the form, which are combined into the same prompt text. What happens to it:

1. Your prompt is sent over an encrypted (HTTPS) connection to kie.ai, a third-party music generation service that acts as a data processor on our behalf. It runs the generation model on our instruction and returns the result.
2. The finished tracks reach you as links served from kie.ai’s own CDN, not from our servers. We do not host, copy, or re-upload the audio. How long a given link stays available is set by that provider’s own policy — we do not set it and we do not control it.
3. We keep no copy of your prompt. What we keep is a generation record: when you generated it, whether it succeeded, how many tracks it produced, and which of our own paid or free allowances paid for it. If you were signed in, that record is tied to your email address so you can find your songs again; if you were not, it is tied to an anonymous identifier. We never store your prompt, your lyrics, or the song titles — when you open your generation history, the titles are fetched live from the generation provider and are not written down on our side. Separately, we keep a running monthly cost total in USD, which we use to track what the generation service costs us.

So there is a real difference worth stating plainly: the stem tools take a file and delete it end to end, whereas the generator is text-in and link-out. We hold neither your prompt nor your audio, but the generated track is delivered from a third party’s servers, so its availability is outside our control after it reaches you. Download anything you want to keep.

What we collect (and don’t)

• Buying a credit pack. When you buy a credit pack we collect your email address, the order reference and purchase record created by our payment processor, and your credit balance and usage records. We use them to grant and track credits, to let you sign in, to handle refunds and billing questions, and to prevent fraud. We keep them while your account exists, and afterwards only as long as needed for accounting, fraud prevention, and dispute handling.
• Privacy-friendly analytics. We use Google Analytics 4 to measure aggregate traffic — page views, which tools are used, and rough geographic region. This helps us understand which tools are popular and improve them. GA4 is configured with enhanced measurement (page changes, scroll depth, outbound clicks). Google may use a cookie to distinguish users; IP addresses are truncated before storage per Google’s IP-anonymization. No personal data, audio files, or tool results are ever sent to GA4. You can block this with browser privacy extensions or Google’s opt-out browser add-on.
• Error reports. If the site crashes, a report may be sent to Sentry, our error-monitoring provider. These reports contain technical diagnostics only — browser version, error stack traces, and the page URL. They never contain your audio files or file contents.
• Standard server logs. Our hosting (Vercel) and CDN (Cloudflare) keep short-lived request logs that include your IP address and user agent, as is standard for any website. These are used for security and abuse prevention, and are not used to profile you.

We do not sell, share, or rent personal data. We don’t use advertising trackers.

Who we share data with

We do not sell your data and we do not share it for advertising. We do use a small number of service providers who process data on our behalf so the site can work — each one is listed below with what it receives.

• Payments. Checkout and card processing are handled by Creem, our payment processor. Card numbers and other payment card details never reach our servers — they are entered on Creem’s checkout page and are covered by Creem’s privacy policy. We receive only the order result (email, pack, amount, status). Refunds and billing disputes are handled by us at hello@lovemusic.ai and executed through Creem.
• Generation. For AI music generation we send your prompt to kie.ai; for stem separation we send your file to Replicate. Both act as processors on our behalf, as described in the tool sections above.
• Infrastructure. Hosting and CDN (Vercel, Cloudflare), error monitoring (Sentry), and analytics (Google Analytics 4) each receive only what their function needs.

Cookies

The site sets no advertising cookies. Four kinds of cookies exist:

• Sign-in cookies. If you sign in, we store a short-lived access token and a longer-lived refresh token in your browser (HttpOnly, so scripts cannot read them) so you stay signed in. They identify your session and nothing else. Signing out or clearing your cookies ends the session.
• Daily-limit cookies. When you use the AI music generator or an AI stem tool, our server gives your browser a random anon_id (one year, HttpOnly, so scripts cannot read it) and writes a short-lived gen_quota or stem_quota cookie holding today’s date and a usage count (for example 2026-08-31|2). Neither contains your name, your email, your prompt or your audio. The authoritative count is kept on our servers, not in the cookie — the cookie only lets the page show you the right number without asking again. Clearing it issues a new anon_id rather than a new allowance, because the same daily limit is also applied per network address. We store that address only as a one-way value we cannot convert back into an IP address.
• Google Analytics cookies. GA4 may set a _ga cookie (and related _ga_* cookie) to distinguish unique visitors. It holds a random ID with no personal information and typically lasts up to two years. Clearing cookies or using a privacy extension removes it.
• Regional consent cookies. A short-lived lm-region cookie (6 months) notes whether you are in a region that requires prior consent, and a lm-consent cookie (12 months) remembers your analytics choice so we don’t re-ask. They contain no personal data.

Your cookie choice

In the EEA, UK, and Switzerland, a small banner asks before any analytics cookie is written — analytics stay off until you choose Accept analytics, and nothing is blocked if you decline (every tool works exactly the same). Everywhere else, analytics load without a prompt because no prior-consent law applies; you can still block them with any browser privacy extension. To change your mind later, clear this site’s cookies and the banner reappears on your next visit.

Your rights

We hold accounts. An account is identified by your email address and protected by a 6-digit sign-in code. For your account we hold your email address, your purchase records, your credit balance and usage, and a list of your generations (time, status and how many tracks each one produced — never your prompts or your lyrics). You can view your balance and purchase history any time in your account.

To get a copy of your data, correct it, or delete your account (including your email address and purchase records), write to hello@lovemusic.ai and we will respond within 30 days. Where we must keep purchase records for accounting, fraud prevention, or dispute handling, we will tell you what we keep and why. Users in the EEA, UK, and California have statutory rights of access, deletion, and portability, which we honor for the data we hold.

Two things we cannot do for you: we cannot retrieve audio you generated but did not download, because the finished tracks are delivered from the provider’s servers and we do not keep a copy; and we cannot delete a song that still exists on the provider’s side, because we never hosted it. Both are explained in the tool sections above.

Changes to this policy

When we add tools that change how data flows, we update this page before the feature launches, and revise the date above. Significant changes are also announced on our blog.