1. Scope and controller
Ksumiyo is a global AI music service. This Privacy Policy explains how Ksumiyo handles personal data when you use the website, studio, blog, account features, and music generation tools from any country.
The controller for this website is: Umang Bhardwaj, trading as RAM AI Technology, Meta-Gadesmann-Straße 22, Frankfurt, Germany. Contact: dev@ksumiyo.com.
2. What data Ksumiyo processes
Ksumiyo may process the following categories of data:
- Account data, such as email, display name, and profile image.
- Consent choices for privacy, marketing, and analytics.
- Referral data, such as referral codes, referral claim records, credited bonus song counts, and related account IDs.
- Music generation inputs, including prompts, lyrics, selected vibe, Designer settings, BPM, duration, language, and related technical job IDs.
- Generated track metadata, including prompt ID, request ID, browser session ID, Track DNA, generation status, generated audio filename, and browser-saved library data.
- Sharing-related events, such as copying a share caption, opening a share dialog, downloading audio for sharing, or opening third-party platform links, if analytics is enabled.
- Technical data, such as IP address, device/browser data, timestamps, security logs, and backend request logs.
- Analytics events if you allow analytics cookies.
3. Why Ksumiyo processes data
- To provide AI music generation and track playback/downloads.
- To save your account, profile, and consent choices.
- To operate referral links, referral claim checks, and promotional song credits.
- To protect the service from abuse, spam, excessive usage, and security threats.
- To keep generation records that help debug failures, respond to rights or platform questions, enforce Music Rules, and improve reliability.
- To understand product usage and improve Ksumiyo, where analytics consent is granted.
- To help users share generated music through browser sharing, downloads, caption copy tools, and third-party platform links.
- To comply with legal obligations and respond to lawful requests.
4. Legal bases and regional rights
Depending on your location and the feature used, processing may be based on contract necessity, consent, legitimate interests in operating and securing the service, or legal obligations. Analytics and marketing communications are based on consent where required. Additional local privacy rights may apply under laws such as the GDPR, UK GDPR, CCPA/CPRA, or similar privacy laws.
5. Services and recipients
Ksumiyo uses service providers for hosting, authentication, analytics, database/storage, and backend music generation. These may include Cloudflare, Firebase/Google services, Google Analytics, Sanity, and the private Ksumiyo backend. Ksumiyo may use private and third-party AI generation infrastructure as part of the generation stack. Data is shared only as needed to operate, secure, and improve the service.
If you choose to open or share to a third-party platform such as YouTube, Instagram, WhatsApp, or another service, that platform's own privacy terms apply to what you do there.
Advertising and advertising privacy choices
Ksumiyo is preparing to offer Google AdSense advertising. During review, ad requests are paused. Google scripts may load to display our published consent message; loading a consent service still involves network requests and technical information such as your IP address and browser details.
When advertising is enabled, Google and the advertising partners listed in the consent message may process device identifiers, cookies, IP addresses, browsing interactions and consent records to deliver, personalize and measure advertising and prevent fraud. Cookies or device storage and personalized advertising require consent where applicable. Partner-specific purposes and legal bases are shown in the message; eligible legitimate-interest processing includes options to object. Rejecting advertising consent does not prevent you from generating a song.
Use Advertising privacy settings at the bottom of each page to reopen Google's applicable message and change or withdraw your choices. If the message is unavailable, contact dev@ksumiyo.com. Analytics privacy settings are separate, as is permission to feature your songs publicly. Withdrawing consent does not invalidate processing already lawfully performed.
See how Google uses information from partner sites, Google's Privacy Policy andcookie informationfor provider processing, retention and available controls. Other partners' policies are linked from the consent message. Do not treat a consent choice as permission to reuse your prompts or lyrics for unrelated marketing.
6. Marketing emails
Marketing and product emails are optional. Ksumiyo does not require marketing consent to create music, save a profile, or use the studio. If Ksumiyo sends marketing emails, each message must identify Ksumiyo, include a working unsubscribe method, and include the business contact details listed in this policy. Service, security, legal, account, and transactional messages may still be sent where needed to operate the service.
7. Analytics and logging limits
Ksumiyo limits analytics events to product usage and technical signals. Analytics events should not include full prompts, lyrics, audio URLs, filenames, raw user identifiers, email addresses, browser session IDs, or detailed error messages. Security and backend logs may still be used to operate, debug, protect, and enforce the service, but should be kept only as long as reasonably needed.
8. International transfers
Some providers may process data outside your country. Where required, Ksumiyo relies on appropriate safeguards such as adequacy decisions, standard contractual clauses, or provider data-processing terms.
9. Retention
Account and consent data is kept while your account is active. Security and backend logs are kept only as long as reasonably needed. Browser library data may remain on your device until you clear it. Generation data may be retained to provide the service, debug failures, prevent misuse, respond to rights or platform questions, and improve reliability. Ksumiyo may retain prompt IDs, prompts, Track DNA, generated audio filenames, timestamps, and status records for these purposes.
10. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, request portability, withdraw consent, opt out of certain processing, and complain to a regulator or data protection authority.
11. Children and age limits
Ksumiyo is intended for users who are at least 16 years old or old enough to consent to online services in their country, whichever standard is stricter for their situation. Users who are not old enough must not use Ksumiyo without a parent or guardian where local law allows guardian consent. Ksumiyo may block, limit, or delete accounts where age requirements are not met.
12. Contact
Privacy requests, copyright/takedown requests, and legal notices should be sent to dev@ksumiyo.com. Postal contact: Umang Bhardwaj / RAM AI Technology, Meta-Gadesmann-Straße 22, Frankfurt, Germany.