Privacy Policy

1. Who We Are

PresetLab.ai ("we," "us," "our") is an AI-powered synthesizer preset generation service accessible at presetlab.ai. For privacy enquiries, contact us at contact@presetlab.ai.

2. Data We Collect

2.1 Account Data

When you create an account, we collect your email address and, if provided, your name. Account creation and authentication is handled by Clerk (Clerk Privacy Policy). We store a reference to your Clerk user ID in our system to manage your token balance and usage.

2.2 Payment Data

Payments are processed by Stripe. We do not store your credit card number, CVV, or full payment details. Stripe provides us with a payment record (transaction ID, amount, and subscription status) which we use to manage your account entitlements. See Stripe's Privacy Policy for details on how they handle payment data.

2.3 Prompt Data

When you submit a text prompt to generate a preset, that prompt is sent to a third-party AI language model provider's API to generate the preset parameters. Prompts are transmitted securely and are not stored on our servers after the generation request completes. Our AI language model provider may retain API inputs per their own data retention policies.

2.4 Generated Preset Files

Generated preset files (.h2p) are ephemeral. They are compiled server-side and returned directly to your browser for download. We do not store generated preset files after they are delivered to you.

2.5 Usage Data and Analytics

We use PostHog to collect anonymised product analytics (for example, which features are used and how often). This data helps us improve the product. PostHog is configured to use our own proxy, limiting direct third-party exposure. No personal identifiers are intentionally included in analytics events. See PostHog's Privacy Policy.

3. How We Use Your Data

• To provide the Service: authenticate your account, manage your token balance, process payments, and deliver generated presets.
• To improve the Service: analyse anonymised usage patterns to understand what features are most useful and where to invest development effort.
• To communicate with you: send transactional emails such as receipts and account notifications. We do not currently send marketing emails.
• To prevent abuse: detect and enforce rate limits, prevent fraud, and enforce our Terms of Service.

4. Data Sharing

We do not sell your personal data. We share data only with the third-party processors necessary to operate the Service:

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g. Stripe transaction records). Generated preset files are not retained after delivery. Analytics events are retained for up to 12 months.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your personal data ("right to be forgotten")
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at contact@presetlab.ai. We will respond within 30 days. California residents may have additional rights under the CCPA/CPRA, including the right to opt-out of the sale of personal information (we do not sell personal information).

7. Cookies

We use essential cookies and similar technologies to maintain your authenticated session (via Clerk) and support basic site functionality. We do not use advertising or tracking cookies. Our analytics provider (PostHog) uses cookies to distinguish unique sessions. You can disable cookies in your browser settings, though this may prevent you from logging in to the Service.

8. Data Security

We use HTTPS for all data in transit. Authentication tokens and payment processing are handled by industry-standard providers (Clerk and Stripe). We do not store payment card data. While we implement reasonable security measures, no system is entirely secure, and we cannot guarantee absolute data security.

9. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

10. International Transfers

Our service providers (Clerk, Stripe, our AI language model provider, PostHog) may process data in the United States or other countries. By using the Service, you acknowledge that your data may be transferred to and processed in countries outside your own. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms for transfers from the EEA or UK.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact Us

For privacy questions, data requests, or complaints, contact us at: contact@presetlab.ai. We aim to respond to all requests within 30 days.