Privacy Policy

Information you give us

• Waitlist: your name and email address.
• Account: your name, email address, phone number, and a password, or, if you choose to sign in with Google, the basic profile information Google shares with us, typically your name, email address, and profile picture. We never receive your Google password. You can also add a profile picture yourself.
• Your path: the steps you mark as done on Your path, when you marked them, and when you first downloaded a master. We keep these with your account so your progress follows you to any device.
• Audio you upload to Rumi on the web: the beat, vocal, and other audio files you upload to be mixed and mastered, the names of those files, your project names, and any note you type with them. See "Your audio and your projects" below.
• Chat messages: what you type to Kombat, the chat assistant, on the website or in your dashboard, and Kombat's replies. See Section 4A.
• Purchases: your billing name, email address, and payment details, collected and processed by a third-party payment processor. We receive confirmation of the payment, the last four digits of your card, and your billing country. We never receive or store your full card number.
• Support and feedback: whatever you choose to send us, including any files you attach.

Information collected automatically from the website

• Your IP address, browser and device type, referring page, pages viewed, and the link or campaign that brought you to the site.
• For waitlist sign-ups we record the date and time you signed up.
• If you are signed in, small cookies and an entry in your browser's local storage keep you signed in. These are necessary for the site to work and are not used for advertising.
• Your browser's local storage also keeps a few small settings on your own device, such as your light or dark theme and whether you already joined the waitlist, so we don't ask you twice. They are not used for advertising.
• When you join the waitlist, we also save which link brought you to our website during that visit (for example, a link on one of our social media profiles), the website that sent you, the page you first opened, which form you used (and, for the Mac download window, which button opened it), and which version of the note under the form was shown to you. We use this only to learn which links bring people to Plaq and to keep a record of how you signed up. While you browse, it is held only in the open page, never in cookies or your browser's storage.

Information collected automatically from the Plaq desktop app

Plainly, because this is the part people ask about: the app reports how the software is used, not what you make.

We collect product-usage events, associated with the email address you use with Plaq, including:

• that you signed up and downloaded the app
• when you open the app and start a session
• when you complete a recording
• when you run a mix or a master
• when you export a file
• when you come back to the app on a later day
• technical context: app version, macOS version, device type, and the approximate region derived from your IP address

We also collect crash and error reports, which describe what the software was doing when it failed: app version, operating system version, and a technical stack trace.

These events contain timestamps, the name of the action, and technical context. They do not contain your audio, your project files, track or file names, or lyrics. None of the music you make is included in them.

Your audio and your projects

In the Plaq desktop app, your recordings, sessions, stems, and exports are created and stored locally on your own computer, and the app processes them locally. The desktop app does not upload, listen to, or store your audio, except where you deliberately send us a file, such as attaching one to a support request, or where you switch on one of the optional settings described in Section 4 and we tell you so at the time.

Audio you upload to Rumi. We store your stems and the versions Rumi makes on our own servers so you can play, compare and download them. We use them only to make your mix and master. People at Plaq don't listen to them, except to fix a problem you report or to keep the service secure. They're never used for training unless you switch that on, and other users can't see them.

• When you delete a song in the Studio, we remove it, its stems and every version from our servers right away. The temporary copy Rumi uses while it works is deleted automatically within an hour.
• To save room, older versions of a song keep only their MP3, and a song's files are removed 90 days after you last used it. The song's settings stay, so you can master it again.
• To delete your account and all its data, email hello@plaqai.com.

We use the information described above to:

• provide the app, your account, and any purchase you make
• send you early-access, release, and product news, which you can unsubscribe from at any time
• understand how Plaq is actually used so we can fix and improve it: which features get used, where people get stuck, and what breaks
• diagnose crashes and errors
• measure how the product and the business are performing, including sharing aggregate, de-identified metrics with current and prospective investors and partners. We do not share your identity, your contact details, or your audio with investors.
• prevent spam, fraud, abuse, and automated sign-ups
• meet our legal, tax, and accounting obligations

Two commitments, because they're the ones that matter most to people who make music for a living.

We never sell your data

We do not sell your personal information, your email address, or your audio. Not to advertisers, not to data brokers, not to other companies, not in any form, at any price. We do not rent or license it either. There is no version of Plaq where you or your information is the product.

We never use your music to make music

Your recordings are never used to generate beats, lyrics, melodies, songs, sample packs, or voice models. We do not clone voices. We do not train generative music models on your audio, and we are not planning to. If that ever changed it would require a new, separate, clearly labeled opt-in, and silence would never count as agreement.

The only thing your audio is ever used to improve is how well Plaq mixes, masters, and applies effects. Nothing else. See Section 4.

Plaq mixes and masters your records in full without ever learning from your audio. Everything in this section is optional, switched off unless you turn it on, and never a condition of buying or using Plaq.

There are two separate settings, with their own checkboxes, and you can turn either one on without the other.

Your sound profile: personalization

With this on, Plaq learns how your records should sound: your genre, your vocal tone, how you like your low end, how much air you want on top, how hard you push a master. It applies what it learns to your future sessions.

The effect is the one every artist wants from an engineer. At first you tell it what you want. After a while it stops needing to be told, the way working with the same engineer for years means they already know your sound before you open your mouth.

• Your profile is yours. It's used to improve your mixes, not anyone else's.
• Turn it off at any time, and ask us to delete it, and we will.
• If you leave it off, nothing breaks. You get the full mixing and mastering engine, just the general version of it, rather than one tuned to how you work.

Helping improve Plaq for everyone: model training

With this on, you allow your audio to be used to improve the mixing, mastering, and effects models that every Plaq user benefits from, including you.

• Strictly limited to mix, master, and effects processing. Never used to generate music, lyrics, beats, or voices. See Section 3.
• Turn it off at any time and we stop using your audio for any future training.
• We should be straight with you about one limit: once audio has already contributed to a model we have trained, that contribution cannot be pulled back out of it. Switching off stops all further use, and you can still ask us to delete the underlying audio and your account data.
• We will never make this a condition of using Plaq, of buying it, or of getting support, and we won't keep asking after you've said no.

Neither setting sends us anything until you check its box. The product-usage events described in Section 1 are not audio, and are not used to train any model.

The website and your dashboard include Kombat, an AI chat assistant. You need a free Plaq account to use it, and it is only for people 18 and older. When you use Kombat:

• Your messages and Kombat's replies are sent to Google, through its paid Gemini API service, to generate the replies. Under Google's terms for that service, Google does not use them to improve its products. Google may keep them for a limited time to detect abuse and to meet legal requirements. Google's terms are at ai.google.dev/gemini-api/terms.
• We never send your name or email address to Google with your messages, and we automatically remove email addresses, phone numbers, and card or account numbers we spot in a message before it is sent. So Kombat can answer questions about your account, it sees your plan and how many songs and chats you have left.
• Kombat never receives your audio or your files. Your songs only go to Rumi, which runs on our own servers.
• In the Studio, Kombat also sees a short note about the song you're working on: the step you're on, how many files carry each tag, your picks (the vibe, the sliders and the vocal level) and the master's loudness numbers. It never receives your audio, your files or their names.
• We store your conversations with your account, together with an anonymous visitor ID kept in your browser. People on the Plaq team can read stored conversations, to answer questions Kombat could not, to follow up with you, and to improve the product.
• Before your first chat, we ask for your birth month and year to confirm you are 18 or older. We keep only the result and the date, not your birth month or year. If the result is under 18, Kombat stays closed on that account for 12 months.

Please do not put passwords, account or ID numbers, or other private information in the chat. You can ask us to delete your conversations at any time.

Today the website uses only the necessary sign-in cookies and local storage described in Section 1. It does not use analytics or advertising cookies.

If we add optional analytics or advertising cookies later, such as Google Analytics 4 or the Meta (Facebook) Pixel, a banner will ask first. Until you actively accept, those cookies stay switched off, and we hold advertising and analytics signals in a denied state by default. You will be able to change your answer at any time by clearing this site's data in your browser, which brings the banner back.

We don't currently detect "Do Not Track" or Global Privacy Control browser signals as a distinct technical feature. The practical result is the same either way: website analytics and advertising cookies are off for every visitor, signal or not, until you accept them.

The Plaq desktop app does not use cookies. Its product-usage reporting is described in Section 1 and your choices about it are in Section 6.

• Marketing email: use the unsubscribe link in any email we send, or email us and we'll take you off the list.
• Website tracking: none beyond the necessary sign-in cookies and the small settings described in Section 1, and the record of which link and website brought you, which we save only if you join the waitlist, also described in Section 1. If we add optional cookies, you can decline the banner, or clear this site's data to change a previous answer.
• Your sound profile: off unless you turn it on, and you can switch it off or have it deleted at any time. See Section 4.
• Helping improve Plaq's models: off unless you turn it on, and you can switch it off at any time. See Section 4.
• Audio you uploaded to Rumi on the web, and your chat conversations: email us and we will delete them.
• App product-usage events: email us and we will stop associating product-usage events with you and delete the events we hold for you. Where an in-app setting for this exists, it will be in the app's preferences.
• Access, correction, copies, and deletion: email us and we will handle it as described in Section 9.

We share personal information with the following categories of recipients, each of which is bound by its own confidentiality and security obligations and may only use the information to provide services to us:

• Hosting, database, and infrastructure providers: for the website, the account backend, storage of the audio you upload to Rumi on the web, and app distribution
• AI model provider for Kombat, the chat assistant: currently Google (Gemini API, paid service), which receives the chat messages described in Section 4A. It does not receive your audio.
• Sign-in provider: Google, if you choose to sign in with Google
• Product analytics provider: receives the product-usage events described in Section 1
• Error and crash reporting provider: receives the crash reports described in Section 1
• Payment processor: if you buy Plaq or a subscription
• Email service provider: to send account emails, like password resets, and the emails you've signed up for
• Website analytics and advertising platforms: Google and Meta, only if we add them in the future, and only once you've accepted cookies
• Professional advisors: such as our accountants and lawyers, where they need it to advise us
• Legal and corporate: where we are required by law, or in connection with a financing, merger, or acquisition. In a financing we share aggregate, de-identified metrics rather than your identity or your audio.

As stated in Section 3, we do not sell your personal information or your audio. We do not share it for cross-context behavioral advertising other than through the website advertising cookies you have accepted, which you can decline at any time.

• Waitlist sign-ups: your name and email, and the details saved with them that are described in Section 1, until you unsubscribe or ask us to delete them. After that we keep a minimal suppression record so that we don't email you again by mistake.
• Account information: for as long as your account is open, and for up to 90 days afterwards while it clears our backups.
• Audio you upload to Rumi on the web, and the versions Rumi makes from it: when you delete a song in the Studio, we remove it, its stems and every version from our servers right away. The temporary copy Rumi uses while it works is deleted automatically within an hour. To save room, older versions of a song keep only their MP3, and a song's files are removed 90 days after you last used it. The song's settings stay, so you can master it again.
• Chat conversations: up to 24 months, or until you ask us to delete them.
• Product-usage events: up to 24 months, after which they are deleted or aggregated so that they no longer identify you.
• Crash and error reports: up to 12 months.
• Your sound profile: for as long as the setting is on, and deleted when you switch it off or ask us to remove it.
• Audio you allowed us to use for model training: only as long as needed for that purpose, and deleted on request.
• Purchase and billing records: as long as tax and accounting law requires us to keep them, which is generally seven years.

Wherever you live, you can ask us to give you a copy of the personal information we hold about you, correct it, delete it, or stop using it for marketing. Email us and we'll do it. We won't treat you differently for asking.

California

Under the CCPA and CPRA you have the right to know what we collect and why, to request correction or deletion, to request a copy of your information, to opt out of the sale or sharing of your personal information, and not to be discriminated against for exercising those rights. We do not sell personal information. The only "sharing" we do for advertising happens through the website cookies you've accepted, and declining the banner opts you out.

Other U.S. states

If you live in a state with a comprehensive privacy law, including Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and Utah, you have the same core rights described above. If we deny your request, you may appeal by replying to our decision, and we will reconsider it. If we deny your appeal, you may contact your state Attorney General.

Europe and the United Kingdom

If you are in the EU, EEA, or UK, you have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent at any time. You may also complain to your local data protection authority. Our legal bases are: your consent, for marketing email, any optional website cookies, your sound profile, and model training; performance of a contract, for providing the app, Rumi on the web, the chat assistant, and any purchase; our legitimate interests, for product analytics, security, fraud prevention, and business reporting; and legal obligation, for tax and accounting records.

Making a request

Email us at the address in Section 12. We may need to verify who you are before we act, and an authorized agent may submit a request on your behalf with proof that they're allowed to. We respond within 45 days, and will tell you if we need up to 45 more. For requests under European law we respond within one month, and will tell you if we need up to two more.

Plaq is not directed at children, and we do not knowingly collect personal information from anyone under 13, or under 16 in the EEA and UK. Kombat, the chat assistant, is only for people 18 and older. If you believe a child has given us their information, contact us and we'll delete it.

We use reasonable technical and organizational safeguards to protect your information, including encrypted connections, limiting access to the people who need it, and working with established service providers. No method of transmission or storage is completely secure, and we can't guarantee absolute security. If a breach affects your personal information, we'll notify you and the relevant authorities as the law requires.

International transfers. We are based in the United States, and your information may be processed or stored in the United States or in other countries where our service providers operate. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses where they apply.

Changes to this policy. We may update this policy from time to time, and changes will be posted here with a new "last updated" date. If a change materially affects how we use information we've already collected, we'll tell you by email or in the app before it takes effect.

Contact us. Questions about this policy, or want to exercise any of the rights above? Email hello@plaqai.com.