Legal

Privacy Policy

Last updated October 14, 2026. All legal documents

Privacy Policy

LAST UPDATED OCTOBER 14, 2026

This policy explains what Code Crafted Nexus LLC collects when you use Tolvane and why. We collect only what the Service needs.

What we collect

  • Account data: your email address and sign-in details, handled by our authentication provider.
  • Credit and billing records: your credit balance, purchases and usage history. Payment card details are collected by Paddle, not by us.
  • Content you send for generation: prompts, chat messages with the producer, lyrics, and any reference audio or images you choose to use. This is sent to our service and providers when you request a chat reply or render.
  • Generated files: audio produced by a render may be stored temporarily on our servers so you can download it and so features such as redo, reference and stem splitting can work.
  • Technical data: app version, basic diagnostics and update checks. Your IP address is visible to our servers and providers when the app connects.
  • Website data: messages you send us by email, and the technical data any web server receives.

What stays on your computer

Your library of songs, projects and covers is stored locally on your device. We do not receive it unless you send it to a feature that needs it.

How we use it

To provide and secure the Service, process payments and credits, give support, prevent abuse and fraud, meet legal obligations, and improve the product. We do not sell your personal information and we do not use your content to advertise to you.

Who we share it with

  • Paddle (payments, taxes, invoices; merchant of record).
  • Supabase (account, database and file storage hosting).
  • ElevenLabs (music generation, stem separation and related audio processing).
  • Anthropic (language model that powers the producer chat).
  • Image generation provider (cover art, only when you use that feature).
  • Email delivery provider (account and support emails).
  • Authorities or advisers where the law requires it, or to protect rights and safety.

Supabase, ElevenLabs and Anthropic process data on our behalf under data processing agreements that form part of their terms. Paddle acts as the merchant of record under its own terms and privacy policy. Content you send for generation is subject to their handling as well as ours.

Retention

We keep account and billing records while your account is active and as long as the law requires. Generated audio, stems and render files stored on our servers are deleted automatically 90 days after they are created. Download anything you want to keep before then. You can ask us to delete your account and associated server data at any time by emailing support@tolvane.ai. We will process a verified request without undue delay and within 30 days, except for records we must keep for legal, tax or fraud-prevention reasons. Songs and projects stored on your own computer stay under your control.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to complain to a data protection authority. Email support@tolvane.ai to make a request. We may need to verify your identity first.

Security

We use encryption in transit and access controls. No system is perfectly secure, and we cannot guarantee absolute security.

Additional information for users in the EEA and UK

Our legal bases for processing your data are: performing our contract with you (providing the Service), our legitimate interests in securing, maintaining and improving the Service, and complying with legal obligations. Where personal data is transferred outside the EEA or UK to a country without an adequacy decision, we rely on safeguards such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum, as provided through our providers' data protection terms.

California and other US state privacy rights

We do not sell personal information, and we do not share it for cross-context behavioral advertising. You can ask us to access, correct or delete your information by emailing support@tolvane.ai.

International transfers

We and our providers operate in the United States and other countries. Your data may be processed outside your country of residence.

Children

Tolvane is for people who are at least 18 years old (or the age of majority where they live), as stated in our Terms. We do not knowingly collect personal information from anyone younger. If you believe a minor has given us information, email support@tolvane.ai and we will delete it.

Changes

We will post updates here and change the date above. For material changes we will notify you in the app or by email.