Effective date: 13 September 2026. This notice covers Audio Paradise at flatentry.com.
1. Who is responsible
The controller is AI Druid Cat, al. Bolesława Krzywoustego 4/1, 40-870 Katowice, Poland, tax identification number (NIP) 6342640817. Contact: aimusicpaws@gmail.com.
2. Information we process
We process your account email, username, password hash, account preferences and impulse balance and access status. When you use the studio, we process your prompts, lyrics, scores, uploaded recordings, generated music, cover art, task identifiers and processing results. We record redeemed-code identifiers, administrator balance adjustments and operation counts to enforce access. The site holds only a public code-verification key; the signing key remains on the operator’s local computer.
Our hosting and service providers may also process IP addresses, timestamps, browser information and security logs. Do not upload private recordings of another person or confidential information unless you have an appropriate basis and permission to do so.
3. Why we use it and our legal bases
Account management, generation, downloads and impulse administration are necessary to provide the service you request (GDPR Article 6(1)(b)). Invoicing and legally required records are processed to meet legal obligations (Article 6(1)(c)). Abuse prevention, service security, quota enforcement and establishing or defending claims rely on our legitimate interests (Article 6(1)(f)), subject to your rights and interests. Optional marketing and nonessential cookies require separate consent (Article 6(1)(a)); accepting the terms does not subscribe you to marketing.
4. Private library and automatic deletion
Your studio library belongs to your account. Other ordinary users cannot list or retrieve your tasks through the application. Private storage files are accessible through short-lived signed links. Anyone to whom you give a working download link may access that file until the link expires, so do not share it if you want the file to remain private.
Recordings, generated audio, artwork, scores, prompts and lyrics have a 72-hour retention period. The application hides expired results; scheduled cleanup removes our copies in the next cleanup cycle. Storage lifecycle expiry is an additional safeguard and may run according to the storage provider’s schedule. Download anything you want to keep before this period ends. Input files uploaded but not used are also subject to expiry.
Deleting creative files does not erase your account or restore spent impulses. We retain minimal account, impulse grants, spent balances and redemption records for as long as needed to operate your account and prevent duplicate redemption and allowance abuse. We retain billing documentation for applicable statutory periods, including Polish tax requirements, and information necessary for unresolved disputes for the relevant claims period. Operational backup copies, if created by a hosting provider, follow that provider’s backup cycle and are not used as an active user library.
5. Providers and AI assistance
Hostinger hosts the WordPress website. RunPod processes music and image tasks on GPU workers. A private S3-compatible storage provider stores temporary input and output files. Subscriptions and payment collection are disabled for the current invitation-only service. DeepSeek processes text submitted to the AI assistant and text used to develop automatic cover-art prompts; this may include lyrics, style directions and ABC scores. The assistant is an AI system. Review its suggestions before using them.
Authorized administrators and contracted providers may access information when needed for operation, support, security or legal compliance. We do not publish your private library as a public gallery and do not operate a training pipeline using your submissions. Provider-side processing and retention are governed by their applicable contracts and policies; our 72-hour application deletion does not promise deletion of every provider security or billing record.
6. International processing
Providers may process information outside the European Economic Area, including in the United States and, for DeepSeek, China. Where GDPR requires safeguards for transfers, the applicable mechanism must be an adequacy decision, standard contractual clauses or another lawful mechanism appropriate to the transfer. Contact us for details of the arrangements that apply to your data. Do not submit sensitive personal data, identity documents or confidential third-party material to the AI assistant.
7. Cookies
WordPress uses necessary cookies for sign-in and account security. Payment and security features may use cookies needed to complete the feature you request. We do not enable optional analytics or advertising in the initial theme. If optional tools are added, a consent manager will let you accept, refuse or change nonessential cookie choices before those tools run. You can also clear cookies through your browser; doing so may sign you out.
8. Your rights
Subject to applicable conditions, you can request access, correction, erasure, restriction and portability of your personal data, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. Contact us from your account email; we may need reasonable verification. We normally respond within one month, with extensions only where permitted by law.
You may complain to the President of the Polish Personal Data Protection Office (UODO) or your local supervisory authority in the EEA. You do not have to contact us first.
9. Automated decisions, age and changes
Quota checks and impulse balance and access status are applied automatically. We do not use the studio to make decisions producing legal or similarly significant effects about you. The service is intended for adults aged 18 or over. Contact us if a child’s personal data has been submitted. Material changes to this notice will be communicated through the website and, where appropriate, your account contact details.