Privacy policy

• Email address — your account identity; used for sign-in codes, receipts, and service messages (a welcome email, payment problems). No marketing lists.
• Station configuration — settings, DJ personas, schedules, jingles, the listener password, and the Navidrome URL and credentials you provide, used solely so your station can reach your music. Backed up nightly; backups are kept 7 days, plus one final archive kept up to 30 days after a station is deleted.
• Uploaded music — only if you turn on managed music: the files you upload are stored on our servers, reachable solely by your station and your account. They are not included in backups, and are deleted with the station after the same 30-day window.
• DJ prompts — to write and voice the DJ, your station sends track and library details (title, artist, album, year, genres, and lyrics where your library has them), your station name, persona, show, time, weather and broad location, the DJ's script, and any listener request with the name typed on it. Music, listener IP addresses and listener countries are never sent.
• Usage metering — counts of AI tokens and speech characters per station, used to enforce the monthly allowance and understand costs. No listening history of individual listeners is collected by the hosted service.
• Billing records — handled by Stripe; we store only Stripe's identifiers and subscription status, never card numbers.
• Waitlist — if you join it, just your email, used once to tell you a slot opened; removed after that.

• Stripe — payments and invoices.
• Resend — transactional email delivery.
• Cloudflare — DNS and TLS in front of the service.
• Vercel AI Gateway — carries DJ prompts to the language-model and embedding providers we use, which can change as we choose models.
• OpenAI — speaks the DJ's script on stations with cloud voice.
• PostHog — product analytics and error reports (see section 4).

The portal and your account data run on a server we operate ourselves, not with a hosting provider. The AI providers can process DJ prompts outside the UK and EU.

Delete a station and its configuration is removed after a 30-day grace window (kept in case you return). Delete your account (Account → Delete account) and your email, sessions, and sign-in history are erased immediately; anonymised usage totals and invoices are retained as legally required for accounting. You can also exercise access, rectification, and portability rights by emailing [email protected].

The portal uses PostHog (EU-hosted) for product analytics and error reports: which pages are visited, where sign-up is abandoned, and what broke, tied to a random identifier stored in your browser — not to your email unless you are signed in. No advertising cookies, no data sold or shared with anyone else. The brain also reports its own errors to the same PostHog project. Your sign-in session is stored in your own browser.

You may complain to the UK Information Commissioner's Office (ico.org.uk), but we would appreciate the chance to fix things first: [email protected].