Privacy Policy

1. Who we are and how to contact us

The controller of your personal data is inVideoFX - Łukasz Klimkiewicz, based in Olsztyn, Poland, NIP 7393828193, REGON 381990912.

Acetate is available at acetate.studio and app.acetate.studio.

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at support@acetate.studio or see the Contact page.

2. What data we collect

Depending on how you use Acetate, we may process the following categories of data:

• Account data — such as your email address and authentication identifiers associated with your account.
• Feedback and preference data — such as text feedback you provide about albums, artists, tracks, recommendations, and similar taste-related inputs.
• Recommendation and usage data — such as recommendation history, service interactions, selected preferences, and app usage events.
• Subscription and transaction-related data — such as subscription status, renewal state, order identifiers, or billing-related metadata required to operate access to the service. We do not store your full payment card details ourselves.
• Support communications — such as messages you send when contacting us.
• Technical and security data — such as IP-related logs, browser data, device-related information, and security events.
• Analytics data — where enabled and permitted, information collected through analytics technologies such as Google Analytics.

3. How we use your data

We use your personal data to:

• create and manage your account;
• provide the Acetate service and generate or refine recommendations;
• remember your preferences and improve the user experience;
• manage subscriptions, entitlement, and access to paid features;
• send service-related or support-related communications;
• protect the service, detect abuse, and maintain security;
• analyze usage and improve Acetate, where analytics is enabled with the required consent;
• comply with legal, accounting, tax, and dispute-resolution obligations.

4. How AI is used in Acetate

Acetate uses AI systems, including Google Gemini, to generate and refine music recommendations.

When AI features are used, we aim not to send direct personal identifiers such as your email address. The information shared may include your feedback, recommendation context, and other generated or analytical data needed to operate the recommendation flow.

Please avoid including other people’s personal data or sensitive information in free-text feedback fields.

5. Service providers and recipients

We use selected third-party providers to operate Acetate. Depending on how you use the service, your data may be processed by providers supporting authentication, analytics, payments, email delivery, and AI functionality.

6. Legal bases for processing

Depending on the context and applicable law, we process personal data on one or more of the following legal bases:

• Performance of a contract — when processing is necessary to create and operate your account, provide the Acetate service, manage subscriptions, and deliver requested functionality.
• Legitimate interests — when processing is necessary for service security, fraud prevention, support, product improvement, and operational reliability, provided such interests are not overridden by your rights and freedoms.
• Legal obligation — when processing is necessary to comply with tax, accounting, legal, or regulatory obligations.
• Consent — where required, for example for optional analytics cookies or similar technologies.

7. Data retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

• Account and recommendation data may be retained while your account remains active and for a limited period afterwards where needed for support, security, or dispute handling.
• Subscription and billing-related records may be retained for longer where required for tax, accounting, legal, or fraud-prevention purposes.
• Support communications may be retained as long as reasonably needed to handle requests, complaints, follow-up, or related legal matters.
• Technical and security logs may be retained for a limited period appropriate for security, troubleshooting, and abuse prevention.
• Analytics data may be retained according to the settings and retention controls applied to the relevant analytics tools.

8. Your rights

Depending on the law that applies to you, you may have the right to:

• access your personal data;
• rectify inaccurate or incomplete personal data;
• erase your personal data;
• restrict certain processing;
• object to certain processing;
• data portability, where applicable;
• withdraw consent at any time, where consent is the legal basis;
• lodge a complaint with a competent supervisory authority, including in Poland with the President of the Personal Data Protection Office, where applicable.

To exercise your rights, contact us at support@acetate.studio.

9. International transfers

Some of our service providers may process data outside your country or outside the European Economic Area.

Where required by applicable law, we rely on appropriate transfer mechanisms and safeguards for such international transfers.

10. Security

We take reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If you believe there is a security issue affecting Acetate, contact us at support@acetate.studio.

11. Children

Acetate is not intended for children. If you believe that a child has created an account or provided personal data through the service, please contact us and we will review the request.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the service, legal requirements, or our data practices.

If changes are material, we may provide notice by appropriate means, such as on the website, in the app, or by email where appropriate.