⚠️ Not Legal Advice: SunoGuard is not a law firm. This Privacy Policy describes our data practices — it does not constitute legal advice to you. For privacy questions about your own website, consult a qualified attorney.
SunoGuard ("we," "us," "our") provides AI-assisted compliance analysis tools for creators who use Suno and other AI music platforms. We respect your privacy and are committed to protecting your personal information in compliance with the California Consumer Privacy Act (CCPA/CPRA), CalOPPA, and all applicable federal and state privacy laws.
This Privacy Policy explains what information we collect, how we use it, how we share it, your rights under California law, and how to contact us. By using SunoGuard, you agree to this Privacy Policy.
1Information We Collect
A. Information You Provide Directly
| Data Type | When Collected | Purpose |
|---|
| Suno prompts & lyrics | When you run an analysis | To generate your compliance report |
| Track metadata (title, genre, BPM) | When you run an analysis | To generate your compliance report |
| Email address | Account creation / contact form | Account management, support responses |
| Name (optional) | Account creation | Personalization of reports |
| Payment information | Token purchase | Processed by Stripe — we do not store card numbers or CVVs |
B. Automatically Collected Information
Automatically collected data is only processed after you provide explicit consent through our cookie consent banner, in compliance with CCPA/CPRA and CIPA (California Invasion of Privacy Act).
| Data Type | Source | Purpose |
|---|
| IP address | Server logs | Security, fraud prevention |
| Browser type & version | HTTP headers | Compatibility, troubleshooting |
| Device type & operating system | HTTP headers | Responsive design optimization |
| Pages visited & time on site | Analytics (consent required) | Understanding usage patterns |
| Referring URL | HTTP headers | Understanding traffic sources |
C. Sensitive Personal Information
We do not intentionally collect sensitive personal information as defined under California CPRA (health data, biometric data, precise geolocation, government IDs, financial account numbers, or race/ethnicity). If you believe we have inadvertently collected such information, contact us immediately at [email protected].
D. Children's Information
SunoGuard is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are under 13, do not use this service. If we learn we have collected data from a child under 13, we will delete it promptly. Under California CPRA (2026), personal information of users under 16 is classified as sensitive personal information.
2How We Use Your Information
✅ We DO Use Your Data For:
- Generating your compliance analysis report
- Managing your account and token balance
- Processing payments (via Stripe)
- Responding to customer support requests
- Improving our analysis accuracy over time
- Maintaining security and preventing abuse
- Complying with legal obligations
- Sending transactional emails (purchase confirmations, support replies)
❌ We Do NOT:
- Sell your personal information to third parties
- Share your track data, prompts, or lyrics with third parties
- Use your content to train AI models
- Send unsolicited marketing emails without consent
- Use your data for targeted advertising
- Share your data with data brokers
- Retain uploaded content after analysis is complete
3Data Retention
| Data Type | Retention Period | Reason |
|---|
| Analysis inputs (prompt, lyrics, metadata) | Session only — deleted after report generation | Not stored on our servers; processed via API using your own Anthropic key |
| Account information (email, name) | Until account deletion | Account management |
| Payment records | 7 years | Legal and tax compliance |
| Server logs (IP, browser) | 90 days | Security and fraud prevention |
| Analytics data | Per analytics provider policy (consent required) | Usage improvement |
| Support correspondence | 2 years | Customer service quality |
4How We Share Information
We share information only with the following categories of service providers, solely to operate our service:
| Recipient | Purpose | Data Shared |
|---|
| Stripe (payment processor) | Processing token purchases securely | Payment information — we never see or store your full card number |
| Anthropic (AI provider) | Running the compliance analysis via the API using your own key | Track metadata and analysis inputs — transmitted directly from your browser |
| Hosting provider | Serving the website | Server logs (IP, browser type) — anonymized where possible |
| Analytics provider | Understanding usage patterns | Anonymized usage data — only after consent |
| Law enforcement / legal authorities | When required by valid legal process | Minimum necessary to comply with the legal obligation |
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not allow third parties to collect personal information through our service except as described above.
5Cookies & Tracking Technologies
We use cookies and similar tracking technologies. In compliance with California law (CCPA/CPRA, CIPA), non-essential cookies do not fire until you explicitly accept through our consent banner.
| Cookie Type | Purpose | Consent Required? |
|---|
| Strictly Necessary | Site functionality, security, session management | No — required to operate the site |
| Analytics | Understanding how users navigate the site (page views, time on site) | Yes — only loads after Accept |
| Functional | Remembering your preferences (e.g., cookie choice, token balance) | Stored in localStorage — no third-party tracking |
You may change your cookie preferences at any time using the Cookie Preferences link in our footer. We honor Global Privacy Control (GPC) browser signals as a valid opt-out request automatically.
6Your Rights Under California Law (CCPA/CPRA)
California residents have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
📋
Right to Know
Request information about the categories and specific pieces of personal data we have collected about you in the past 12 months.
📥
Right to Access
Receive a copy of all personal information we hold about you, in a portable, usable format.
🗑️
Right to Delete
Request deletion of your personal information, subject to certain legal exceptions (e.g., legal compliance, fraud prevention).
✏️
Right to Correct
Request correction of inaccurate personal information we hold about you.
🚫
Right to Opt-Out
Opt out of the "sale" or "sharing" of your personal information. We do not sell data, but you may still submit this request.
🔒
Right to Limit Sensitive Data
Restrict our use of sensitive personal information to what is necessary to provide the service.
⚖️
Right to Non-Discrimination
We will not deny service, charge you more, or retaliate against you for exercising any of these rights.
🤝
Authorized Agent
You may designate an authorized agent to make requests on your behalf. We will verify the agent's authorization.
To exercise any of these rights: Email us at
[email protected] with subject line "California Privacy Rights Request." We will respond within
45 days as required by California law. We may need to verify your identity before processing your request.
7Global Privacy Control (GPC)
SunoGuard honors Global Privacy Control (GPC) browser signals as a valid "Do Not Sell or Share" opt-out request, as required by California law since 2021. When a user visits our site with GPC enabled in their browser, we automatically process it as an opt-out — no additional action is required from you.
GPC is available through the Brave browser natively, and via extensions including Privacy Badger (EFF) for Chrome/Firefox.
8Do Not Sell or Share My Personal Information
SunoGuard does not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising. California law still requires us to make this opt-out available:
→ Do Not Sell or Share My Personal Information
You may also exercise this right by emailing [email protected] or enabling Global Privacy Control in your browser.
9Children's Privacy (COPPA)
SunoGuard is not intended for and does not target children under 13. We do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA), as updated by the 2026 COPPA rule amendments (effective compliance deadline: April 22, 2026). If you are a parent or guardian and believe your child has provided us with personal information, contact us immediately at [email protected].
10Security
We implement commercially reasonable security measures to protect your personal information, including HTTPS encryption on all pages, secure payment processing via Stripe (PCI-DSS compliant), and access controls on our systems. However, no internet transmission is 100% secure. We cannot guarantee absolute security of your data.
In the event of a data breach affecting your personal information, we will notify you and applicable state attorneys general as required by applicable breach notification laws (all 50 U.S. states have such laws).
11Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We will notify registered users of material changes via email. Your continued use of SunoGuard after changes constitutes acceptance of the updated policy.
