Privacy policy

This Privacy Policy explains how Sonara Music (ABN 33 852 675 013) ("Sonara", "we", "us", "our") collects, uses, discloses and protects your personal information when you use Sonara, our AI music service available at app.playsonara.com, and our website at playsonara.com (together, the "Service").

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where they apply, we also handle personal information consistently with other privacy laws such as the EU/UK General Data Protection Regulation (GDPR).

By using the Service, you consent to the handling of your personal information as described in this Policy.

1. Who we are

Sonara is operated by Sonara Music, based in Victoria, Australia. You can contact us about this Policy or your personal information at hello@playsonara.com.

2. Personal information we collect

Account information. When you create an account we collect your name, email address and authentication details. If you sign in with a third-party provider such as Google or Apple, we receive your name, email address and profile identifier from that provider. Authentication is managed by our provider Clerk; we do not store your password.

Billing information. If you subscribe to a paid plan, payment is processed by Stripe. We do not receive or store your full card number. We receive and store billing records such as your subscription tier, transaction history, billing country and the last four digits and brand of your card.

Content you create. We collect the text prompts, style and instrument selections, and other inputs you provide to generate music, along with the resulting audio tracks, separated stems, artwork and any AI artist profiles ("Personas") you create. If you converse with our AI composer, we collect those conversation inputs.

Usage and technical information. We collect information about how you use the Service, including tracks generated and played, features used, token balance and consumption, device and browser type, IP address, and approximate location derived from your IP address. We use Cloudflare Turnstile to protect sign-up and sign-in from automated abuse; Turnstile processes limited device and interaction signals for this purpose.

Support communications. If you contact us, we collect the contents of your message and your contact details.

We do not knowingly collect sensitive information (such as health, biometric or racial information) and ask that you do not include it in prompts or support messages.

3. How we collect it

We collect personal information directly from you when you create an account, generate content, subscribe, or contact us; automatically through your use of the Service; and from third parties such as your chosen sign-in provider and our payment processor.

4. Why we collect and use it

We collect, hold and use personal information to:

• provide and operate the Service, including generating music, separating stems, and delivering downloads;

• create and manage your account and authenticate you;

• process subscriptions and payments, manage token allocations, and detect billing fraud;

• provide customer support and respond to enquiries;

• monitor, secure and improve the Service, including debugging and abuse prevention;

• send you service communications such as billing notices, security alerts and material changes to the Service or our terms; and

• comply with our legal obligations.

Where the GDPR applies, our lawful bases are: performance of our contract with you (providing the Service and billing), our legitimate interests (security, service improvement, fraud prevention), consent where required (for example, any non-essential cookies or marketing emails), and compliance with legal obligations.

We do not sell your personal information, and we do not use your personal content to train our own AI models.

5. Who we disclose it to

We disclose personal information to service providers who help us operate the Service. Each provider only receives the information needed to perform its function:

We may also disclose personal information where required or authorised by law, to enforce our Terms of Service, or in connection with a business sale, merger or restructure (in which case this Policy will continue to apply to your information).

6. Overseas disclosure

The providers above store or process information outside Australia, principally in the United States and Singapore. By using the Service you consent to these overseas disclosures. Where the GDPR applies, transfers outside the EU/UK are made under appropriate safeguards such as standard contractual clauses maintained by the relevant provider.

7. Cookies

We use cookies and similar technologies that are strictly necessary to operate the Service — for authentication and session management (Clerk), payment security and fraud prevention (Stripe), and bot protection (Cloudflare Turnstile). Because these are essential, the Service cannot function without them. If we introduce analytics or other non-essential cookies in future, we will update this Policy and, where required, seek your consent first.

8. Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include encryption in transit, access controls, authenticated download links for your audio files, and reliance on the certified security programs of our infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Retention

We keep personal information for as long as your account is active and as needed to provide the Service, comply with legal obligations (such as tax and financial record-keeping), resolve disputes and enforce our agreements. Generated audio and stems remain available in your library while your account is active. Our music generation provider retains submitted and generated audio on its systems for a limited period (approximately 14 days) as part of its processing pipeline. If you close your account, we will delete or de-identify your personal information within a reasonable period, except where we are required to retain it by law.

10. Access, correction and your rights

Under the Privacy Act, you may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date or incomplete. You can update most account details directly in the Service; for anything else, contact us at hello@playsonara.com. We will respond within a reasonable period and will not charge you for making a request.

If the GDPR applies to you, you also have the rights to erasure, restriction of processing, data portability, and to object to processing based on legitimate interests, as well as the right to withdraw consent at any time and to lodge a complaint with your local supervisory authority.

11. Data breaches

We comply with the Notifiable Data Breaches scheme under the Privacy Act. If a data breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by law.

12. Children

The Service is not directed at children under 13 Years of Age. We do not knowingly collect personal information from children under this age. If you believe a child has provided us personal information, contact us and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. We will post the updated version on our website with a revised "Last updated" date, and will notify you of material changes by email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

14. Complaints

If you have a concern about how we have handled your personal information, contact us first at hello@playsonara.com and we will respond within a reasonable period. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at www.oaic.gov.au or 1300 363 992.

15. Contact us

Sonara Music
33 852 675 013
hello@playsonara.com