Privacy Policy

AI BOOMBOX MUSIC operates an online marketplace for AI-generated music. We are the "responsible party" / data controller for personal information collected through the platform.

• Account details: name, email, password (hashed), language and country
• Artist onboarding: identity verification documents, bank/payout details, social links
• Buyer details: purchase history, selected licence tier, licence-agreement timestamp
• Payment metadata from Paystack (reference, status, amount) — we never store full card numbers
• Technical data: IP address, device, browser, log and usage data
• Cookies and similar technologies (see section 7)

• Provide and operate the marketplace, including uploads, purchases, and downloads
• Verify artist identity and process payouts
• Issue and prove licences purchased by buyers
• Prevent fraud, abuse and copyright infringement
• Send transactional emails (receipts, verification, payout notifications)
• Comply with legal, tax and regulatory obligations

We process personal information to perform our contract with you, to comply with legal obligations, on the basis of your consent (e.g. marketing emails, optional cookies) and for our legitimate interests in operating and securing the platform.

• Paystack — payment processing
• Our backend / hosting provider — storage of accounts, tracks and metadata
• Identity-verification providers — for artist KYC
• Email delivery providers — for transactional email
• Authorities — where required by law or to respond to lawful requests

We do not sell personal information.

Some of our service providers may process data outside South Africa. Where this happens we rely on the safeguards set out in POPIA section 72 and similar laws (e.g. contractual protections or adequate jurisdictions).

We use strictly necessary cookies to keep you signed in and to remember language preference, and optional analytics cookies to understand usage. You can control cookies through your browser settings.

• Account data: while your account is active and for a reasonable period afterwards
• Purchase, payout and tax records: as long as required by law
• Verification documents: as long as required to evidence KYC compliance
• Webhook and audit logs: 24 months unless a longer period is required for investigation

• Access the personal information we hold about you
• Request correction or deletion
• Object to processing or withdraw consent (where consent is the basis)
• Request a copy of your data in a portable format
• Lodge a complaint with the Information Regulator of South Africa or your local data-protection authority

We use industry-standard technical and organisational measures — including encryption in transit, hashed credentials, row-level security, signed webhooks and access controls — to protect personal information. No system is perfectly secure, so we cannot guarantee absolute security.

The platform is not intended for children under 18 without parental or guardian permission. We do not knowingly collect personal information from children otherwise.

We may update this Privacy Policy from time to time. Material changes will be notified through the platform. Continued use after changes are published constitutes acceptance of the updated policy.

Privacy questions and POPIA / data-subject requests: privacy@aiboomboxmusic.com.