AiHud Music — Privacy notice

In force from 2026-10-23.

What we collect. The chart you upload; the title, composer, ensemble, style and hints you enter; your email address; your mobile number if you give one; your IP address; payment records from PayPal (order and capture IDs, amount, payer email — we never see your card or PayPal password); and the files we produce for you.

Why. To read your chart and produce the arrangement; to email (and, if you gave a number, text) you when your plan, preview or arrangement is ready; to take payment and handle refunds; to stop abuse (one free preview per person — we compare normalised email addresses and phone numbers across orders); and to keep financial records.

Who processes it. Anthropic (the AI model that reads the chart and writes the arrangement — your chart and request are sent to it for processing); PayPal (payment); Twilio (email and text delivery); Amazon Web Services (hosting and storage); ipwho.is (approximate location of the IP address of visitors and orders — city, country and network — shown only to us for abuse review and traffic statistics); Google (ad measurement only, see Cookies below). We do not sell your data and do not use your uploads to advertise.

How long. Uploaded charts, working files and the files we produce for you: deleted 90 days after delivery (or after the job is abandoned); a nightly job removes expired files. Intermediate working files (audio stems, renders) are deleted as soon as your preview or arrangement is published. Visit logs and IP location lookups: 90 days. Order, payment and free-preview records: kept as long as needed for accounting and abuse prevention (up to 7 years for payment records).

Your choices. You can ask us to delete your data or send you a copy of it: hi@aihud.net. Texts: reply STOP to stop messages. We send only service messages about your orders.

Security. Uploads are processed in isolated containers with no network access; download links are private and expire. No system is perfectly secure; tell us at once if you think a link was exposed.

Cookies and ad measurement. Our pages load the Google tag (Google Ads) so we can tell which of our ads bring visitors and orders. It sets Google advertising cookies and, if you arrived from a Google ad, we keep the ad click ID (gclid / gbraid / wbraid) with your order for up to 90 days. When you reach a milestone (upload, email confirmed, plan, preview, payment) we tell Google Ads that a conversion happened, with the order value for payments, and a one-way hashed (SHA-256) copy of your email address so Google can match the conversion to an ad click ("enhanced conversions"). We never send Google your chart, files, name or the private link to your order. In the EEA, UK and Switzerland these cookies stay off until you click OK on the cookie notice; anywhere, you can click "No thanks" (or clear the music_consent cookie to choose again). Google's use of the data: policies.google.com/technologies/partner-sites.

Children. The service is not directed at children under 13.