Privacy Policy

• Account details — email address, display name, password (stored hashed), and, if you sign in with Google, the basic profile Google returns.
• Artist profile — store name, handle, bio, avatar, social links, and payout details you enter.
• Order details — items purchased, licence tier, amounts, and for physical orders your shipping address and phone number.
• Content you upload — audio masters, previews, artwork, photos submitted for personalised songs, and messages or support tickets you send.
• Usage data — pages and listings viewed, favourites, and basic technical logs such as IP address, browser type and timestamps.

We do not collect your full payment card number — Stripe handles that directly.

• To create and secure your account and authenticate you.
• To process orders, issue licences and certificates, and deliver files or physical goods.
• To calculate commission, balances and withdrawals for artists.
• To generate personalised songs and artwork you commission, using the brief and any photo you upload.
• To provide support, handle disputes, and detect fraud or abuse.
• To send transactional email (order updates, password resets, support replies) and platform announcements.
• To meet tax, accounting and other legal obligations.

We share only what is needed, with service providers acting on our instructions:

• Stripe — payments, tax calculation and artist payouts.
• Supabase (via Lovable Cloud) — database, authentication and file storage.
• Cloudflare R2 — storage of master files and uploaded media.
• AI generation providers — the brief, prompt and any photo needed to produce a commissioned song or image.
• AI music generation (Create studio) — Artiswap is an AI music generation aggregator and does not run its own model. The description, style, lyrics and a reference ID you submit are sent via our partner auAImusic (Ozbeat AI) to Kie.ai for Personal licence songs, and to Mureka or Soundverse (distribution tier) for Commercial licence songs. We do not send your name, email or payment details to these providers. Generated audio, covers and lyrics are stored in our own storage (Cloudflare R2 and our database).
• AI lyric writing — when you use “Write lyrics”, your song description is sent to an AI language model provider to draft the lyrics.
• AI cover art — when a provider returns no cover, the song title, style, description and lyrics are sent to an AI image model to create one; the image is stored in Cloudflare R2.
• AI music registry (auAImusic) — when you request an AI Music Identification Code for a Commercial song, we send the title, artist name, AI declaration (including whether you wrote the lyrics), audio fingerprint and related metadata to the registry.
• Free Library — if you share a song in the Free Library, its title, style, cover, code and your display or store name are shown publicly. When you download a Free Library song we record your account, the song and the time, and the song's creator can see download counts.
• Marketplace listing — if you list a generated song, its audio, cover, title, code, style and lyrics are copied into your public listing and shown to visitors.
• Email delivery provider — sending transactional and account email.

When you buy a physical product, the seller receives the shipping and contact details required to fulfil your order. When you buy a licence, the seller sees the sale but not your payment details.

We may also disclose information where required by law, or as part of a business sale or restructure. We do not sell your personal information.

Artist store pages, listings, reviews you post, and public story pages for commissioned songs are visible to anyone. Story pages show the artwork, track and attribution associated with that code — avoid including anything in a brief, photo or review that you would not want to be public.

We use cookies and local storage that are necessary for the site to work: keeping you signed in, remembering your cart, and basic security. We use limited analytics to understand aggregate usage. We do not run third-party advertising trackers.

Data is stored with our cloud providers and may be processed outside Australia, including in the United States and the European Union. We use encryption in transit, access controls and row-level security so that accounts can only reach their own records. No system is perfectly secure, but we take reasonable steps to protect your information and will notify you and the regulator where required if a notifiable data breach occurs.

• Account and profile data — while your account is open.
• Order, licence and financial records — at least seven years, as required for tax and record-keeping.
• Uploaded media that is never used in a final order — removed automatically once it is no longer referenced.
• Generated songs (audio, cover, lyrics and prompts) — until you delete them. Songs that have received an AI Music Identification Code cannot be deleted, because the code forms part of a public registry record.
• Credit purchases and credit usage records — at least seven years, as financial records.
• Royalty-Free Catalog (Free Library) download logs — for as long as the licence may need to be evidenced, including after a song is removed from the catalog.
• Support tickets and dispute records — for as long as needed to resolve and evidence the matter.

• Access or correct most of your details directly in your dashboard.
• Request a copy of your personal information, or ask us to delete it.
• Opt out of non-essential announcements; transactional email tied to orders cannot be switched off while you have active orders.

Deletion requests are honoured except where we must keep records for legal, tax or dispute reasons, and except for licences already issued to buyers.

Artiswap is not intended for people under 18. If we learn we have collected details from a child, we will delete them.

We will update this page when our practices change; the “last updated” date reflects the current version. To exercise a privacy right or make a complaint, raise a ticket on our support page. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

See also our Terms of Service.