Privacy Notice

Last Updated/Effective Date: April 1, 2026

Introduction

Soundry AI, Inc. ("Groove," "Company," "we," "us," or "our") respects your privacy. This Privacy Notice explains how information about you is collected, used, shared, stored and secured when you use our websites, mobile applications, products, services and related tools or technology (collectively, the "Services") or when you otherwise interact with us. This Privacy Notice also explains your choices regarding your information.

The Services allow you to generate remixes of songs using artificial intelligence and machine learning technology. You may provide audio content as input by uploading files or by providing links to audio on supported third-party platforms (such as YouTube or SoundCloud), in which case the Service downloads the audio in the background for processing. You do not have direct access to any audio file downloaded from a third-party platform. This Privacy Notice describes how we handle the information associated with these activities.

Our Services contain links to other websites and platforms operated by third parties, including YouTube and SoundCloud. Information collected by such third parties is governed by their own privacy policies. We are not responsible for the privacy or security of, or information found on, these third-party sites or platforms.

This Privacy Notice does not apply to data we process on behalf of enterprise customers of our business offerings. Our use of that data is governed by our customer agreements.

International Availability

The Service is currently available only to users located in the United States. We do not currently offer the Service to individuals located in the European Economic Area, the United Kingdom, or Switzerland, and we do not knowingly collect or process personal data from individuals in those regions. By creating an account, you confirm that you are not located in those regions. If we expand availability to additional regions, we will update this Privacy Notice to reflect the applicable data protection requirements.

1. Information We Collect

We collect information about you when you provide it to us, when you use the Services, and when other sources provide it to us. The specific types of information we collect are described below.

1.1 Information You Provide to Us

Contact Information. When you register for an account, submit an inquiry, request information, or otherwise communicate with us, we may collect your name, email address, physical address, phone number, and any other information you choose to provide.

Account Information. If we establish an account for you, we collect your username, password, subscription tier, and transaction history.

Content. If you use our Services to upload audio files, provide links to audio on third-party platforms, submit text prompts, or provide other inputs ("Submissions"), or to generate audio outputs ("Outputs"), we collect the data contained in and associated with such Content. This includes both the Original and Style Target audio you provide (whether uploaded directly or sourced via third-party link), as well as the remix Outputs generated by the Service. When you provide a link to a third-party platform, the Service downloads the audio in the background for processing; you do not have direct access to the downloaded file. Content may constitute or contain personal information, depending on the substance and how it is associated with you and your account.

Payment Information. Our third-party payment processor collects payment information (such as credit card details) when you subscribe to paid features of the Service. This payment information is collected and processed directly by the payment processor and is not collected or stored by us. See Section 8 (Payment Processing) below for more information.

Communications. We may collect the contents of your communications with us, whether via email, social media, chat, telephone, or otherwise, and inferences we may make from other information we collect.

1.2 Information We Collect Automatically

Usage Information. When you use the Services, our servers may automatically record information, including your Internet Protocol address (IP address), browser type, device type, operating system, referring URLs, domain names associated with your internet service provider, access times, pages viewed, features used, and other information regarding your interaction with the Services.

Activity Information. We log information related to your creation, upload, processing, access, playback, download, and sharing of Content through the Services, including the generation of remix Outputs, sharing of streaming links, and other actions taken within the Service.

Cookies and Similar Technologies. We use cookies, pixels, web beacons, and similar technologies to collect information about your browsing activities and preferences. See Section 4 (Cookies and Similar Technologies) below for more information.

1.3 Information We Collect from Other Sources

We may collect information about you from third-party sources, including login integration partners when you access the Services through a third-party account (such as Google or Apple), business partners who market or promote our Services, and publicly and commercially available sources, as permitted by law.

2. How We Use Your Information

To the extent permitted by applicable law, we use your information for the following purposes:

2.1 To Provide and Operate the Services

We use your information, including Contact Information, Account Information, Activity Information, and Content, in order to perform our contract with you, such as to authenticate you when you log in; process your Submissions through our AI and ML models to generate remix Outputs; host and make available your Content, including streaming links to your Outputs; enable download of Outputs for paid subscribers; configure features of the Services and personalize your experience; process your transactions and manage your subscription; and provide customer support and respond to your requests.

2.2 To Improve and Develop Our Products and Services

We use your Submissions, Outputs, Usage Information, Activity Information, and related data to improve our Services, product offerings, and business, including to train, develop, fine-tune, and otherwise enhance the artificial intelligence and machine learning models that power our Services. This may include using audio content you upload and remix Outputs you generate as training data for our models. This use continues during and after the term of your use of the Services, as described in our Terms of Service.

The specific categories of data used for AI model training include: audio files you upload as Submissions (both Originals and Style Targets); remix Outputs generated by the Service; metadata associated with your Content (such as duration, format, and creation date); and user prompts and interaction data associated with Content creation. We do not use your Contact Information or Account Information (such as your name, email, or payment details) for AI model training.

You may opt out of having your Content used for AI model training by contacting us at privacy@groove.fm. If you opt out, we will cease using your future Submissions and Outputs for training purposes within a commercially reasonable time period. Content that has already been used to train our models prior to your opt-out cannot be removed or "un-trained," as described in Section 6 below.

We may also analyze, aggregate, or anonymize data relating to the Services, your Content, or your use of the Services ("De-Identified Data") for analytical purposes. De-Identified Data and learnings derived from AI and ML model training ("AI Learnings") are the Company's sole and exclusive property and may be used for any lawful purpose during and after the term of your use of the Services.

2.3 To Communicate with You

We use your Contact Information and Account Information to send you technical notices, updates, service notifications, security alerts, and administrative messages; respond to your comments, questions, and requests; and communicate with you about products, services, offers, promotions, and events that we think may be of interest to you. You can opt out from receiving marketing communications at any time, as described in Section 7.1 below.

2.4 To Maintain, Monitor, and Secure the Services

We use certain Account Information, Activity Information, and Content to monitor and analyze trends, usage, and activities in connection with the Services; monitor, detect, investigate and/or prevent suspicious, fraudulent, unauthorized, or illegal activity; employ content identification or audio fingerprinting technologies to identify copyrighted content (where applicable); enforce our Terms of Service, including our acceptable use policies; and protect the security and integrity of the Services.

2.5 For Legal and Compliance Purposes

We use your information as reasonably necessary to comply with applicable law, regulation, legal process, or governmental request; enforce our agreements, policies, and terms of service; exercise or defend legal claims; and protect the Company, our users, or the public from harm or illegal activity.

3. How We Share Your Information

We do not sell your personal information to third parties. We do not "sell" or "share" your personal information as those terms are defined under the California Consumer Privacy Act (CCPA) and similar U.S. state privacy laws, nor have we done so in the preceding 12 months. We do not have actual knowledge that we sell or share personal information of residents under 16 years of age. We may share your information in the following circumstances:

3.1 With Other Users

When you share streaming links to your Outputs, certain information associated with that Output (such as your username and the Output itself) will be accessible to recipients. If you are a free-tier user, your Outputs may include attribution to Groove that is visible to recipients. The Company may also identify to the public that Output was generated via the Service, as described in our Terms of Service.

3.2 With Service Providers

We share your information with third-party service providers who perform services on our behalf, including cloud hosting and infrastructure providers, payment processors, analytics providers, customer support providers, and AI/ML service providers that support certain features of the Services. Our contracts with these service providers require protection of your information consistent with this Privacy Notice, and require that they retain, use and disclose your information only as necessary to provide the services in accordance with such contracts.

3.3 For Legal and Compliance Purposes

We may share information about you with a third party if we believe that sharing such information is reasonably necessary to (a) comply with any applicable law, regulation, legal process, or governmental request; (b) enforce our agreements, policies, and terms of service; (c) protect the security or integrity of our products and services; or (d) protect the Company, our customers, employees or other persons from harm or illegal activities.

3.4 In Connection with a Business Transaction

We may share your information in connection with, or during negotiations of, any merger, sale of all or a portion of our business or assets, bankruptcy, or similar business transaction, as permitted by applicable law.

3.5 With Your Consent

We may share information about you with third parties when you give us consent or direct us to do so, such as when you use login integrations provided by third parties like Google or Apple.

4. Cookies and Similar Technologies

We use cookies and similar technologies such as pixels, web beacons, and software development kits to collect usage and activity information, including your browsing activities and preferences, to improve and customize your experience. We or third parties use cookies and similar technologies for the following purposes:

Necessary Purposes. Cookies required for the operation of the Services, such as cookies that enable you to log in to secure areas.

Functionality. Cookies that remember choices you make and recognize you when you return, enabling us to personalize the Services for you.

Analytics. Cookies that collect information about how you use the Services, allowing us to recognize and count visitors and see how visitors navigate within the Services. We may use third-party analytics services, including Google Analytics, to assist with analyzing website traffic.

Targeting or Advertising. Cookies that collect information about your browsing activities for the purpose of serving you with relevant advertisements regarding our products and services. These may be placed by us or by third-party advertising partners.

4.1 Disabling Cookies

Most browsers allow you to block, delete, or disable cookies. Your mobile device may also allow you to disable transmission of unique identifiers and location data. If you choose to disable cookies, some features of the Services may not be available or some functionality may be limited.

4.2 Opt-Out Preference Signals

We honor Global Privacy Control (GPC) and other recognized opt-out preference signals. When we detect a GPC signal or similar opt-out preference signal from your browser, we will treat it as a valid request to opt out of the sale or sharing of personal information associated with that browser. You do not need to take any additional action beyond enabling GPC in your browser. For more information about GPC, visit https://globalprivacycontrol.org.

5. How We Store and Secure Your Information

The Company is based in the United States, and we generally store your information on servers located in the United States. We may also conduct business in other countries and may transfer your information to and/or store it in such other locations as reasonably necessary to provide the Services, in accordance with this Privacy Notice.

We use commercially reasonable efforts to protect the confidentiality and security of the information we collect and process. However, we cannot guarantee the security of information during its transmission to or from us, its storage on our systems, or that our security measures will prevent third parties from accessing or acquiring information we collect. No method of transmission over the Internet, or method of electronic storage, is fully secure. You are solely responsible for protecting your password, limiting access to your devices, and signing out of websites after your sessions.

6. How Long We Retain Your Information

We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Notice. When determining the length of time to retain information, we consider various criteria, including whether we need the information to continue to administer your account, provide the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security and integrity, or protect ourselves and our rights.

AI Training Data. Content that has been used to train or improve our AI and ML models cannot be removed or "un-trained" following account deletion or termination. The perpetual license rights granted under our Terms of Service with respect to AI training survive termination of your account. De-Identified Data and AI Learnings derived from your Content may be retained and used indefinitely.

Content Retention. If you delete your account, we will take reasonable steps to remove your Content from the Service within a commercially reasonable time period. However, we may retain server copies of Content as reasonably necessary for backup, legal compliance, or other legitimate business purposes, and Content that has been shared with or incorporated by other users may remain available on the Service.

Data Retention Policy. We maintain a written data retention policy that specifies the purposes for which each category of personal information is collected, the specific business need for its retention, and the timeline for its deletion. A summary of our retention periods is as follows: Contact Information and Account Information are retained for the duration of your account plus two (2) years following account deletion; Activity Information and Usage Information are retained for three (3) years; Content used for AI model training is retained as described above; and payment-related information is retained in accordance with our payment processor's policies and applicable law.

7. Your Rights and Choices

7.1 Opt Out from Communications

If you do not wish to receive marketing communications from us, you can opt out at any time by using the unsubscribe link in our electronic communications, or by contacting us at privacy@groove.fm. We will still need to send you certain notifications that relate directly to your use of the Services, such as technical notices, updates, service notifications, security alerts, and billing and administrative messages.

7.2 Change Your Information

You can change or update your account information at any time through the account settings page of the Service, or by contacting us at support@groove.fm.

7.3 Delete Your Information

You can request that we delete your information by contacting us at privacy@groove.fm. We will comply with your request within a reasonable period of time; however, in certain circumstances, we may not be able to delete all of your information. For example, we must retain certain information to maintain your account if you intend to continue using the Service, and we retain certain information if required by law, relevant to a legal proceeding, or for compliance or auditing purposes. As noted in Section 6, data that has been used for AI model training cannot be removed or "un-trained." If we have de-identified, anonymized, or aggregated data such that it no longer identifies or relates to you, we may retain and use that information for any lawful purpose.

7.4 Opt Out of AI Model Training

You may opt out of having your future Submissions and Outputs used for AI model training by contacting us at privacy@groove.fm or, where available, through your account settings. We will process your opt-out request within a commercially reasonable time period. Content that has already been incorporated into our trained models prior to your opt-out request cannot be removed or "un-trained."

7.5 Rights of U.S. Residents

This section applies if you are a resident of California, Colorado, Connecticut, Virginia, Texas, Oregon, Montana, Delaware, New Jersey, Minnesota, Maryland, or another U.S. state that has enacted a comprehensive consumer privacy law. Depending on where you live, you may have the following rights with respect to your personal information (in addition to those discussed elsewhere in this Privacy Notice):

Notice of Information Collected and Used. We collect, use and disclose, and over the past 12 months have collected, used and disclosed the following categories of personal information as described further in this Privacy Notice: identifiers (such as name, email address, IP address); personal information listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)); commercial information (such as subscription and transaction history); Internet and similar network activity information (such as browsing history, usage data, and interaction data); audio information that you upload to or generate through the Services; geolocation information (inferred from IP address); and inferences drawn from any of the above categories to create a profile reflecting your preferences, characteristics, or tendencies. We only use and disclose sensitive personal information for the purposes specified in the CCPA or otherwise in line with your consent.

Right to Know. You may have the right to request the categories and specific pieces of personal information we have collected about you, the categories of sources from which such information was collected, the business or commercial purposes for collecting it, and the categories of third parties with which it has been shared.

Right to Delete. You may have the right to request that we delete personal information we maintain about you, subject to certain exceptions.

Right to Correct. You may have the right to request that we correct inaccurate personal information we maintain about you.

Right to Data Portability. You may have the right to receive a copy of your information in a portable and readily usable format.

Right to Opt Out. You may have the right to opt out of the processing of your information for purposes of (a) targeted advertising, (b) the sale of your personal information, or (c) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. As stated above, we do not sell or share your personal information as those terms are defined under applicable law.

Right to Request Deletion of Visible Content. If you are a California resident under the age of 18 who has registered to use the Services and who posted Content visible to other users, you can request that such Content be removed. We will make reasonable good faith efforts to remove the Content from prospective public view or anonymize it. This removal process cannot ensure complete or comprehensive removal, as third parties may have republished or cached the Content.

To exercise any of these rights, please contact us at privacy@groove.fm. We will not discriminate against you for exercising these rights. We will need to verify your identity by asking you to provide at least two pieces of personal information before we can process your request. You may also designate an authorized agent to make requests on your behalf. If we deny your request, you may appeal our decision by contacting us at privacy@groove.fm.

8. Payment Processing

We utilize third-party payment processors to process fees payable for subscriptions and other paid features of the Service. In order to purchase paid Services, you will be required to provide credit/debit card and/or financial institution account information directly to the payment processor. Such payment information is not collected or stored by us. The payment processor's collection and use of your information is governed by its own privacy policy and terms of service.

9. Children's Privacy

Our Services are not intended to be used by individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If you are between 13 and 17 years old, you may use the Services only with the express consent of your parent or guardian as described in our Terms of Service.

If we become aware that a child under 13 has provided us with personal information without verifiable parental consent, we will take steps to delete such information and terminate the associated account. We do not knowingly use personal information from users under 13 for AI model training under any circumstances. If you become aware that a child has provided us with personal information, please contact us at privacy@groove.fm.

10. Third-Party Websites and Services

The Services may contain links to, or enable integration with, websites and services operated by third parties, including YouTube, SoundCloud, and social media platforms. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites or services that you visit or interact with through our Services. Information you provide to third parties is subject to their privacy policies, not ours.

11. AI Training Data Transparency

In compliance with California AB 2013 (Generative AI Training Data Transparency Act), we provide the following information about the data used to train our generative AI models:

Data Types. Our models are trained on audio data, including music files, sound recordings, and associated metadata.

Data Sources. Training data is sourced from publicly available audio content, licensed datasets, and user-submitted Content (subject to opt-out as described in Section 7.4).

Copyrighted Material. Training datasets may include copyrighted material. We employ content identification measures and are pursuing licensing agreements with rights holders.

Personal Information. Training datasets may include personal information as defined under the CCPA to the extent that user-submitted audio Content contains identifiable elements. Users may opt out of having their Content used for training as described in Section 7.4.

Data Processing. Training data undergoes preprocessing including format standardization, quality filtering, and segmentation. We apply de-identification measures where feasible.

For additional information about our AI training data practices, please contact us at privacy@groove.fm. This disclosure will be updated as our training practices evolve.

12. Changes to This Privacy Notice

We may change this Privacy Notice from time to time. We will post any changes on this page with a revised date at the top. If the changes are material, we will provide a more prominent notice, such as by adding a notice on the homepage of the Service or by sending you an email notification. We encourage you to review the Privacy Notice whenever you access the Services to stay informed about our data privacy practices.

If you disagree with this Privacy Notice and/or any changes hereto, you will need to stop using the Services.

13. Your Privacy Choices

We are committed to providing you with meaningful control over your personal information. A summary of your key choices:

Marketing communications: Opt out at any time via the unsubscribe link or by contacting privacy@groove.fm.
AI model training: Opt out by contacting privacy@groove.fm or through your account settings.
Cookies: Manage through your browser settings.
Opt-out preference signals: We honor GPC and similar signals automatically.
Data rights requests: Submit requests to privacy@groove.fm.

For more information about your privacy choices, visit https://groove.fm/privacy-choices.

14. Contact Us

If you have any questions or concerns regarding this Privacy Notice or our data practices, please contact us at: privacy@groove.fm