AiHud Music — Privacy notice (DRAFT)

Draft of 2026-10-21 for legal review. Not in force.

What we collect. The chart you upload; the title, composer, ensemble, style and hints you enter; your email address; your mobile number if you give one; your IP address; payment records from PayPal (order and capture IDs, amount, payer email — we never see your card or PayPal password); and the files we produce for you.

Why. To read your chart and produce the arrangement; to email (and, if you gave a number, text) you when your plan, preview or arrangement is ready; to take payment and handle refunds; to stop abuse (one free preview per person — we compare normalised email addresses and phone numbers across orders); and to keep financial records.

Who processes it. Anthropic (the AI model that reads the chart and writes the arrangement — your chart and request are sent to it for processing); PayPal (payment); Twilio (email and text delivery); Amazon Web Services (hosting and storage); Google (ad measurement only, see Cookies below). We do not sell your data and do not use your uploads to advertise.

How long. Uploaded charts and produced files: deleted 90 days after delivery (or after the job is abandoned). Order, payment and free-preview records: kept as long as needed for accounting and abuse prevention (up to 7 years for payment records).

Your choices. You can ask us to delete your data or send you a copy of it: [privacy contact — e.g. privacy@aihud.net]. Texts: reply STOP to stop messages. We send only service messages about your orders.

Security. Uploads are processed in isolated containers with no network access; download links are private and expire. No system is perfectly secure; tell us at once if you think a link was exposed.

Cookies and ad measurement. Our pages load the Google tag (Google Ads) so we can tell which of our ads bring visitors and orders. It sets Google advertising cookies and, if you arrived from a Google ad, we keep the ad click ID (gclid / gbraid / wbraid) with your order for up to 90 days. When you reach a milestone (upload, email confirmed, plan, preview, payment) we tell Google Ads that a conversion happened, with the order value for payments, and a one-way hashed (SHA-256) copy of your email address so Google can match the conversion to an ad click ("enhanced conversions"). We never send Google your chart, files, name or the private link to your order. In the EEA, UK and Switzerland these cookies stay off until you click OK on the cookie notice; anywhere, you can click "No thanks" (or clear the music_consent cookie to choose again). Google's use of the data: policies.google.com/technologies/partner-sites.

Children. The service is not directed at children under 13.