Privacy Policy

Effective Date: June 15, 2025

Compunect GmbH ("we," "us," or "our") operates Demodokos Foundry, a desktop application for AI-powered music creation. This Privacy Policy explains how we handle your information when you use our website and software.

1. Our Privacy Commitment

Demodokos Foundry is designed with privacy at its core. Your creative work (prompts, lyrics, and generated music) is processed entirely on your local device. We have no access to your creative content unless you explicitly choose to share it with us.

2. Information We Collect

2.1 Account Information

• Registration Data: Email address, display name, password (cryptographically hashed)
• Billing Details: Name, address, company name, VAT ID where applicable
• Payment Information: Processed securely by PayPal; we never store payment card details

2.2 Automatically Collected Data

• Usage Analytics: Feature utilization, session duration, error reports (anonymized)
• Technical Data: IP address (for licensing validation), browser type, operating system
• Cookies: Essential session cookies only. No tracking or advertising cookies

2.3 What We Do NOT Collect

We do not collect, transmit, or store:

• Your music prompts or creative inputs
• AI-generated audio files
• Lyrics, captions, or text content you create
• Local project files or creative assets

3. How We Use Your Information

• Service Delivery: Provision and maintenance of your account and license
• Transaction Processing: Payment handling and subscription management
• Communications: Service updates, security alerts, license notifications
• Support: Responding to inquiries and technical assistance
• Security: Fraud prevention, abuse detection, license enforcement
• Legal Compliance: Tax records, regulatory requirements, law enforcement requests

4. Legal Basis for Processing (GDPR)

For European Union residents, we process personal data under these legal bases:

• Contractual Necessity: Account management, license fulfillment, support services
• Legitimate Interest: Security measures, service improvements, fraud prevention
• Legal Obligation: Tax documentation, regulatory compliance
• Consent: Optional marketing communications (explicit opt-in required)

5. Data Sharing

We do not sell, rent, or trade your personal information. Data may be shared with:

• PayPal: Payment processing under their privacy policy
• Infrastructure Providers: Hosting services bound by confidentiality agreements
• Legal Authorities: When required by law or to protect rights and safety
• Corporate Transactions: In connection with merger, acquisition, or sale of assets

6. International Data Transfers

We are headquartered in the European Union. Where data transfers occur outside the EU, we implement appropriate safeguards including EU Standard Contractual Clauses and adequacy decisions by the European Commission.

7. Data Retention

• Account Data: Duration of active account plus 30 days following deletion request
• Financial Records: 7 years pursuant to EU tax law requirements
• Server Logs: 90 days for security monitoring and incident response

8. Your Privacy Rights

Depending on your jurisdiction, you may exercise the following rights:

• Access: Obtain a copy of personal data we hold about you
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit processing for specific purposes
• Objection: Object to processing based on legitimate interest
• Consent Withdrawal: Revoke consent where processing is consent-based

To exercise these rights, contact privacy@demodokos.com. We respond within 30 days.

8.1 California Residents (CCPA/CPRA)

California residents have additional rights including the right to know, delete, opt-out of sale (we do not sell data), and non-discrimination for exercising privacy rights.

8.2 Canadian Residents (PIPEDA)

Canadian residents may access, correct, or request deletion of personal information by contacting us.

9. Cookies and Tracking

We use only essential cookies required for service functionality:

• Authentication: Session management and login persistence
• Security: CSRF protection tokens

We do not use analytics, advertising, or third-party tracking cookies. No cookie consent banner is required as we only use strictly necessary cookies.

10. Children's Privacy

Demodokos Foundry is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will promptly delete it.

11. Security Measures

• TLS/HTTPS encryption for all data transmission
• Cryptographic password hashing (bcrypt)
• Regular security assessments and updates
• Principle of least privilege for data access
• Secure development practices

While we implement robust security measures, no electronic transmission or storage system is entirely secure.

12. Policy Updates

We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent notice on our website. Your continued use of our services after such changes constitutes acceptance of the updated policy.

13. Contact Information

14. Supervisory Authority

EU residents have the right to lodge complaints with their local data protection supervisory authority.