Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account data: email, display name, password hash, OAuth identifiers (GitHub, Google), and profile settings.
• Content you upload: audio files, reference voices, lyrics, prompts, and training datasets.
• Generated content: outputs produced by our models, task metadata, and quality ratings.
• Billing data: subscription tier, plan history, and transaction identifiers (full card details are handled by our payment processor, not by us).
• Usage & device data: IP address, browser/OS, timestamps, request logs, and API performance metrics (sampled at ~10%).
• Cookies: session cookies for authentication and preference cookies for UI state (e.g. collapsed sidebar).

2. How We Use Your Information

• To operate the Service, run inference on GPU workers, and deliver outputs;
• To authenticate users, manage sessions, and prevent fraud or abuse;
• To process subscriptions and comply with tax/accounting obligations;
• To monitor reliability, measure performance, and troubleshoot errors;
• To communicate about your account, billing, and important Service changes;
• To comply with legal obligations and enforce our Terms.

3. Model Training & Data Sharing

HanoLab uses your Inputs, Outputs, and prompts to train and improve our AI models only in accordance with the data-sharing preference set on your account.

• Free accounts have data sharing enabled by default as part of the free service. This is disclosed at signup, and you may turn it off at any time from Account Settings.
• Paid accounts (Starter, Creator, Pro) have data sharing disabled by default. You may opt in from Account Settings to unlock personalized recommendations and bonus credits — it is entirely optional and the decision has no effect on your subscription or feature access.
• Upgrading from free to paid preserves your existing data-sharing preference rather than silently flipping it off. You can turn it off at any time from Account Settings after upgrading.

When data sharing is enabled, contributed records are stored under a hashed pseudonym rather than your account identity. We do not sell personal data or share your prompts with third parties, regardless of your preference.

You can request deletion of your training-data contributions at any time by emailing support@hanolab.com. Usage logs used for performance monitoring are aggregated and never contain raw audio.

4. Sharing & Third-Party Processors

We share personal information only with trusted service providers acting on our behalf, under confidentiality and data-protection obligations, and only as needed to run the Service. These providers fall into the following categories:

• Cloud hosting & content delivery — to serve the website and deliver files to users;
• Database & authentication — to store account records and manage sign-in sessions;
• Object storage — to store your uploaded inputs and generated outputs;
• GPU compute — to run AI inference and training jobs;
• Analytics & error monitoring — to measure performance and diagnose issues;
• Payment processing — we use Creem as our Merchant of Record for subscription billing, tax compliance, refunds, and related financial operations. Creem handles all payment card data; HanoLab does not store full card numbers.
• Optional AI enhancement services — to power opt-in features such as prompt rewriting.

We do not sell or rent personal information. We may disclose data if required by law, subpoena, or valid legal process, or where we believe disclosure is necessary to protect the rights, safety, or property of HanoLab, our users, or the public.

5. International Transfers

HanoLab is operated from outside the European Economic Area and our infrastructure is primarily in the United States. By using the Service you acknowledge that your data may be transferred to and processed in countries whose data protection laws may differ from those in your jurisdiction. We implement appropriate safeguards for such transfers.

6. Data Retention

• Account data is retained while your account is active and for up to 90 days after deletion;
• Free-tier outputs are auto-expired after 7 days; paid tiers retain outputs per the plan;
• Billing records are retained for up to 7 years for tax compliance;
• Aggregated analytics may be retained indefinitely but cannot identify individuals.

7. Security

We use TLS in transit, encryption at rest (Supabase + R2), Row Level Security on all database tables, and principle-of-least-privilege access controls. No system is 100% secure, but we respond promptly to any confirmed breach and will notify affected users as required by applicable law.

8. Your Rights

Depending on your jurisdiction (including the EEA, UK, and California), you may have the right to:

• Access, correct, export, or delete your personal data;
• Withdraw consent for optional processing (e.g. model improvement);
• Object to or restrict certain processing;
• Lodge a complaint with a supervisory authority.

To exercise these rights, email support@hanolab.com. We respond within 30 days.

9. Children

HanoLab is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has provided us personal information, contact us and we will delete it.

10. Voice Cloning Consent

If you upload a voice reference or train a voice model, you must have explicit permission from the voice owner or be the voice owner yourself. You are responsible for obtaining and retaining proof of consent. HanoLab may take down voice models upon a verified takedown request.

11. Changes

We may update this Policy. Material changes will be announced via email or in-app notice at least 14 days before they take effect.

12. Contact

For privacy questions or any other inquiries, email support@hanolab.com.