ACE Music Privacy Policy

1. Who we are and what this Policy covers

TimeDomain Inc. (“ACE Music,” “we,” “us,” or “our”) provides ACE Music. This Policy explains how we collect, use, disclose, and retain personal information when you visit our website, create an account, use our music tools, share content, purchase a subscription, or contact us.

It also explains the account and entitlement information used to provide ACE Studio Desktop App access where included in your plan. Other services you visit through links have their own privacy notices.

For privacy questions or requests, contact support@acemusic.ai. Where applicable, TimeDomain Inc. is the controller responsible for the processing described in this Policy.

2. Information we collect

Account information

When you register or sign in, we receive information needed to create and authenticate your account. For email-and-password registration and sign-in, we process your email address, password, verification codes, and related authentication information to create your account, verify your email, sign you in, and reset your password. During registration, your password may be temporarily stored in encrypted form while email verification is completed. For Google sign-in, this may include an account identifier, email address, name, and profile image, depending on the information Google provides and the permissions granted. We do not receive your Google password through Google sign-in.

We also maintain an internal account identifier and information about your plan, entitlements, credit usage, and account status.

Content and creation activity

We process the material you submit to the features you use. This may include prompts, lyrics, MIDI, keyboard performances, audio recordings, humming, images, videos, and sheet music. We also process generated music, scores or other generated results, associated metadata, generation settings, task status, and your interactions with creation and editing tools.

Content may contain personal information, such as a recorded voice, a person’s image, or information included in lyrics or prompts. Only submit information about other people when you have the necessary permission or other lawful authority. Avoid including sensitive personal information that is unnecessary for your use of the Service.

Subscription and payment information

Stripe processes payments. We receive information needed to manage purchases and subscriptions, such as payment and subscription identifiers, selected plans, amounts, currencies, payment status, and billing-related information made available by the payment provider. Payment details entered in Stripe’s checkout are also subject to Stripe’s privacy notice.

Support communications

When you contact support, we process your message, contact information, attachments, and information needed to investigate the issue. If you use our support messenger, Intercom and its Fin service may process your questions and conversation context to provide automated assistance and support human follow-up. Where available, we pass your account identifier and account email to associate support conversations with your account.

Technical and usage information

We and service providers may process information about your device, browser, IP address, approximate location derived from IP address, language, referring page, campaign information, pages viewed, interactions, errors, and session or cookie identifiers. Usage events can include actions such as starting creation, generation status, downloads, and subscription-related interactions, where the corresponding measurement is enabled.

Shared-song links may also generate records of views and sharing activity, including the song or share identifier, sharing channel, referral information, and an account or anonymous browser identifier.

3. How we use information

We use personal information for the following purposes, subject to applicable law:

• Authenticating users and maintaining accounts.
• Processing Inputs, generating Outputs, and providing editing, storage, playback, download, and sharing features.
• Managing subscriptions, credits, payments, and applicable Desktop access.
• Providing support, investigating reports, and communicating about accounts and service changes.
• Detecting fraud, abuse, security incidents, and violations of our Terms.
• Understanding service performance and usage, diagnosing problems, and evaluating product improvements and experiments.
• Complying with legal obligations and establishing, exercising, or defending legal claims.
• Improving and training models as explained in Section 4, where permitted.
• Measuring marketing effectiveness or sending optional promotional communications where permitted and, when required, with consent.

A shared account or credit balance may be used across ACE Music and supported Desktop features so that your access and remaining entitlements are consistent. This does not mean that all of your content is publicly shared across those services.

4. Model improvement and training

We may use submitted content, generated results, and related feedback to evaluate, improve, and train music generation models, including through authorized service providers. Where content contains personal information, we process it for these purposes only on an applicable lawful basis and with any notice or consent required by law.

The model-training permission applies only to content newly submitted or generated on or after the common effective date of the revised Terms and Privacy Policy, and only once any required acceptance or consent has been obtained. We will not use content uploaded before that date for model training. Merely retaining, accessing, playing, or sharing older content after that date does not bring it within this permission.

Where applicable law gives you a right to object, withdraw consent, or request deletion, you may contact support@acemusic.ai. We will assess requests under applicable law, including any relevant exceptions or limitations.

5. Links and content you share

ACE Music provides song sharing through direct links, rather than a public publishing feature. Anyone who obtains a shareable link may access and listen to the song, including without signing in. The shared page may display the song, title, artwork, creator information, and other content shown on the page.

Recipients may forward the link, and others may retain content they have accessed. Link sharing is not confidential or owner-only storage. Restricting access or deleting content cannot retrieve copies held by others or guarantee immediate removal from third-party platforms or caches.

6. When we disclose information

We disclose personal information when reasonably necessary for the purposes described in this Policy, including to:

• Service providers: providers of hosting, storage, generation infrastructure, authentication, payments, support, analytics, experimentation, and security, under appropriate arrangements for the processing they perform.
• Recipients of shared content: people who access content you make available through the Service, as described above.
• Legal and safety recipients: authorities or other parties where required by law, or where necessary and permitted to address fraud, security threats, violations, or legal claims.
• Business transaction participants: relevant parties in a merger, acquisition, restructuring, or asset transfer, subject to applicable safeguards and notice requirements.
• Other recipients you authorize: when you direct us to disclose information or give valid consent.

Providers used for relevant features include Google for sign-in and, through Gemini and related Google Cloud services, content analysis and creation assistance; Stripe for payments; Intercom/Fin for support; PostHog and Google Analytics for analytics; Statsig for experimentation; and Cookiebot for cookie-consent management. We also use cloud storage services, including Cloudflare R2 and, where configured, Google Cloud Storage, to store or transfer files needed for the Service. Depending on the feature and configuration, submitted content may be transmitted to these providers for processing, including through temporary file uploads. The information each receives depends on the feature you use and its configuration.

7. Cookies, analytics, and advertising

We use cookies and similar technologies where needed for sign-in, session continuity, security, preferences, and other service functions. Depending on the features enabled and your choices, additional technologies may support analytics, experiments, attribution, or advertising measurement.

Where our cookie-consent controls are available, you can review or change your choices through Cookie settings in the footer of public pages or in Account when signed in. These controls are provided through Cookiebot. We use Google Analytics and, where enabled, advertising-measurement technologies to understand website usage and campaign effectiveness, subject to applicable consent requirements and your choices. You can also manage cookies through your browser settings. Blocking necessary cookies may prevent sign-in or other features from working. Where required by law, we obtain consent before using nonessential technologies and provide a way to withdraw that consent. Marketing emails, if sent, include an unsubscribe option; essential account and transaction messages may still be sent.

8. Legal bases where required

Where applicable data protection law requires a legal basis, we identify that basis for each processing purpose. Depending on the circumstances, this may include:

• Contract: processing necessary to provide the service you request and manage your subscription.
• Legal obligations: processing needed to meet applicable legal requirements.
• Legitimate interests: necessary and proportionate processing for purposes such as service security, fraud prevention, and service improvement, where those interests are not overridden by your rights.
• Consent: processing for which consent is required, including relevant optional tracking or communications.

You may withdraw consent where processing is based on it, without affecting the lawfulness of processing before withdrawal. Where processing relies on legitimate interests, you may have a right to object.

9. Retention and deletion

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, taking account of the nature of the data, your use of the Service, legal obligations, security needs, and applicable limitation periods.

Different categories may have different retention periods. Account and content records support ongoing service access; payment records may need to be retained for accounting or legal requirements; security and support records may be retained as needed to investigate issues and maintain the Service. Information in backups may remain for a limited backup cycle subject to restricted use.

To request account or personal-information deletion, contact support@acemusic.ai. We may need to verify your identity. Deleting an item from your library or moving it to trash is not necessarily immediate deletion from all systems. We may retain information when required or permitted by law and explain applicable limitations when responding to a request.

10. International processing and security

Your information may be processed in countries other than your own, depending on where we and our service providers operate. Those countries may have different data protection rules. Where required, we use an applicable transfer mechanism and safeguards for international transfers, and you may contact us for information about them.

We use technical and organizational measures appropriate to the nature and risks of the information we process. No internet transmission or storage system can be guaranteed completely secure. Please protect your sign-in credentials and contact us if you suspect unauthorized access.

11. Your privacy rights

Depending on your location and applicable law, you may have rights to access, correct, delete, or receive a portable copy of your personal information; restrict or object to certain processing; withdraw consent; and complain to a relevant supervisory authority. Some rights are subject to exceptions.

Residents of certain US states may also have rights to opt out of the sale of personal information, targeted advertising or statutory “sharing,” and certain profiling, where applicable, as well as rights concerning sensitive personal information. An authorized agent may submit a request where permitted, subject to verification. Where the law provides an appeal right, you may contact us to appeal a decision on your request.

Send requests to support@acemusic.ai, preferably from the email associated with your account. We may request proportionate information to verify your identity or an agent’s authority. We respond within the deadlines required by applicable law and do not unlawfully discriminate against you for exercising your rights.

12. Children and younger users

The Service is not intended for children under 13. Users under 18 must have the prior express permission of a parent or legal guardian, and higher local age or consent requirements may apply. If we learn that personal information was collected in violation of applicable age or consent requirements, we will take appropriate steps, which may include restricting the account and deleting the information.

If you believe a child has provided information without the required permission, contact support@acemusic.ai.

13. Changes and contact

We may update this Policy to reflect changes in our Service, processing, or legal requirements. We will update the effective date and give additional notice of material changes where required. Where a new use requires consent, we will obtain that consent before proceeding; publication of a revised policy does not itself supply it.

The English version is the primary version. Translations may be provided for convenience; mandatory local requirements and your applicable legal rights remain unaffected.

For questions or privacy requests, email support@acemusic.ai.

TimeDomain Inc.
Registered office address: 1207 DELAWARE AVE STE 990, WILMINGTON, DE 19806, United States