Privacy Policy

1. Who is responsible for your data

The data controller is ARCANA TERRA HOLDING SRL, Corso Europa 63, 80127 Napoli, Italy — VAT 11102961213. For anything concerning your personal data: contact address not published yet

2. Data we collect

• Account data — your email address, name, and password (stored as a hash, never in plain text).
• Content you upload or generate — audio files, images, lyrics, and the briefs you enter.
• Model usage logs — calls to the language models we use, including token counts and their cost in credits.
• Credits ledger — every credit movement on your account (grants, spends, refunds).
• Billing data — the plan or pack you bought and the reference Stripe gives us. Card numbers never reach our servers.

3. Cookies and local storage

We use no analytics, no advertising, and no tracking of any kind — the site loads nothing from third-party servers. The few things we do store are needed to run what you asked for, so no consent banner is required:

• hb_sessione — session cookie, keeps you signed in. Deleted when you sign out.
• hb_piano — 24 hours. Remembers which plan you clicked, so the sign-in page can take you to the right checkout.
• hb_promo — 30 days. Remembers a promotional code you arrived with.
• hb-theme — stored in your browser, not sent to us. Remembers whether you chose the light or the dark theme.

4. Why we use it

We use this data to run the service you asked for: generate and refine lyrics, run Studio jobs, bill your plan and credits accurately, keep your account secure, and improve the product's reliability and cost model.

5. How long we keep it

We keep account data and your credits ledger for as long as your account is open, plus the period we need for accounting and abuse-prevention records. Uploaded content and generated files are kept until you delete them or close your account, after which they are removed within a reasonable time.

6. Who else processes your data (sub-processors)

• Language-model providers — specialist AI companies in the European Union and the United States, to generate and evaluate lyrics and other text. The briefs you write and the lyrics produced are sent to them for processing. We will name the current providers on request, at the address above.
• Payments — Stripe Payments Europe, Ltd., for plans and credit packs.
• Email delivery — Postmark (ActiveCampaign, LLC), to send account confirmation and password reset messages.
• Hosting — the provider of the servers on which Hits Builder runs.

Transfers outside the EU. Some of these providers are established outside the European Union, or may process data outside it. Where that happens, the transfer relies on the European Commission's standard contractual clauses or on an adequacy decision.

7. Your rights

Under the GDPR you can ask for access to your personal data, its correction or deletion, a copy in portable form, or the restriction of its processing; you can also object to processing and lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali. Export and account deletion are available directly in Settings inside the app; for anything else, write to the address above.