Privacy policy
1. Data controller
SongKara controls and processes your personal data when you use SongKara and https://songkara.com. Data protection contact: the Account page at https://songkara.com.
2. Data we collect
| Category | Details |
|---|---|
| Account | Phone number or email used to sign in; display name (if provided); account creation date; one-time codes stored only as hashes and expiring after 5 minutes. |
| Device | A device identifier generated by the Software, the computer name and last-seen time — to enforce plan device limits and issue licence tickets. |
| Orders and payments | Product, amount, order code, time; transaction details sent by the bank or payment notification service (SePay): amount, transfer note, transaction ID. We never collect card numbers, banking passwords or banking OTPs. |
| AI credits | Credit additions/deductions; task type, token counts, cost. For the cloud AI assistant: the text you submit (e.g. lyrics) and the result, which may be cached to answer identical requests faster. |
| Technical | IP addresses one-way hashed with a secret key (raw IPs are not stored), browser type, referring page when an affiliate link is clicked; server error logs. |
| Affiliates | Referral code, click/sale statistics, payout bank account and information needed for personal income tax withholding. |
| Launch notifications | The email or phone number you leave on the Download page so we can tell you when the installer is available. |
We do not collect sensitive personal data, and we do not collect the contents of your music, video, recordings, camera images or stream keys.
3. Purposes
- Creating and authenticating accounts, sending sign-in codes.
- Issuing and checking licences and plan device limits.
- Processing orders, reconciling payments, refunds, accounting and tax obligations.
- Providing the AI assistant and metering AI credits.
- Running the affiliate program: tracking referrals, calculating and paying commissions, fraud prevention.
- Customer support, important service notices, and launch notifications for people who signed up.
- Security, abuse prevention and troubleshooting.
We do not use your data for third-party advertising and we never sell personal data.
4. Legal bases
Your consent (when you register, sign in, leave your contact details or use the AI assistant); performance of the contract with you; compliance with legal obligations (accounting, tax, lawful requests from authorities).
5. Processing on your own computer
Vocal separation, lyric sync, music analysis, arranging, effects, camera recording, background removal and video export all run on your computer. Those files stay on your disk and we cannot access them. Only when you choose to use the cloud AI assistant is the text to be processed (e.g. lyrics) sent — without your phone number or email.
6. Sharing
- OTP delivery providers (email, SMS, Zalo ZNS): receive your phone/email and the message containing the code.
- Banks and payment notification services (SePay): process transfer information.
- AI model providers: receive the text you submit to the AI assistant. Providers may host servers outside Vietnam; such transfers are made on the basis of your consent when you use the feature and following the procedures required by law.
- Infrastructure providers (hosting, backups) store data on our behalf under confidentiality obligations.
- The affiliate who referred you only sees masked information (e.g. a partially hidden phone number) and commission status.
- Competent authorities when legally required.
7. Retention
- Account, device and AI credit data: while your account is active; deleted or anonymised within the statutory time limit after you request account deletion.
- Orders, payments and commissions: kept for the accounting retention period (up to 10 years under the Law on Accounting).
- One-time codes: expire after 5 minutes. Affiliate click logs (hashed IPs): up to 24 months.
- Launch-notification contacts: until we send the launch notice and up to 12 months afterwards, or until you ask us to delete them.
8. Your rights
You have the right to be informed; to give or refuse consent; to access and receive a copy of your data; to correct it; to delete it; to withdraw consent; to restrict or object to processing; and to complain, report, sue and claim compensation as provided by law.
To exercise your rights, contact the Account page at https://songkara.com from the phone number or email linked to your account. We respond within the time limits set by law. Withdrawing consent or deleting data may mean you can no longer use features that require an account; data we are legally required to keep (accounting records) is retained until the mandatory period ends.
9. Security
HTTPS encryption; one-time codes and long-lived session tokens stored as hashes; one-way hashed IP addresses; digitally signed licence tickets; restricted admin access with an audit log; regular backups. If a personal data breach occurs we will notify the competent authority and affected people as required by law.
10. Cookies and browser storage
The website uses a few strictly necessary cookies and browser storage: km_lang (language), km_ref, km_sub (referral code, 30 days) and sign-in tokens on the Account/Affiliate pages. We do not use third-party advertising or tracking cookies. Fonts are loaded from Google Fonts, so Google may receive your browser’s IP address.
11. Children
The Service is not directed at children under 16. If you are under 16, a parent or guardian must consent before you provide data. If we learn that a child’s data was provided without proper consent, we will delete it.
12. Changes
We may update this policy; the new version is posted here with its effective date, and material changes are announced in advance in the Software or by email/phone.