How we handle your data.

This Privacy Policy explains how Soro Technologies, Inc. ("Soro," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use Afrobits. We care about your privacy and we want you to understand what we do with your data before you give it to us.

1. Who we are

Afrobits is operated by Soro Technologies, Inc., a company registered in the State of Delaware, United States. For privacy-related matters, you can reach us at hello@afrobits.ai.

For users in the European Economic Area and United Kingdom, Soro is the data controller of your personal information. For users in India, we act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023. For users in Nigeria, we act as a Data Controller under the Nigeria Data Protection Act, 2023.

2. What we collect

Information you give us directly

• Phone number or messaging platform ID: when you message Afrobits on WhatsApp or another supported platform, we receive your phone number or platform identifier;
• Name or display name: as provided on your messaging platform profile;
• Prompts and messages: the text you send when requesting a song;
• Payment information: we do not store your full payment card details. When you pay, you are redirected to a regulated payment processor that securely processes your payment and shares with us only a transaction reference, the amount, the currency, and confirmation of success or failure;
• Communications: any emails or messages you send us.

Information we collect automatically

• Usage data: songs generated, credits used, time of interaction, language of the prompt, style of music requested;
• Device information: approximate location (derived from your phone number country code), messaging client type;
• Web analytics: when you visit afrobits.ai, we may collect your IP address, browser type, pages visited, and referring URL through privacy-respecting analytics tools.

Information from third parties

• Payment processors: confirmation of payment success or failure, and limited billing information as described above;
• Distribution partners: if you request streaming distribution, we exchange limited data with our distribution partner and the streaming platforms you choose, to enable your song to be released under your artist profile.

3. How we use your information

We use your information to:

• Provide and operate the Afrobits service;
• Generate songs based on your prompts using AI systems;
• Process your payments and manage your credits;
• Distribute your songs to streaming platforms when you request it;
• Communicate with you about your account, songs, and service updates;
• Improve the quality, safety, and performance of the service;
• Detect and prevent fraud, abuse, and violations of our Terms of Service;
• Comply with legal obligations and respond to lawful requests from authorities.

4. Legal basis for processing

Where applicable data protection laws require a legal basis for processing your personal data, we rely on the following:

• Performance of a contract: to provide the service you requested;
• Legitimate interests: to operate, secure, and improve the service, to prevent fraud, and to communicate with you about service matters;
• Consent: for any optional marketing communications, or where specifically required by law;
• Legal obligation: to comply with applicable laws and respond to legal requests.

5. Who we share your data with

We do not sell your personal information. We share it only with the following categories of recipients and only to the extent necessary:

• Service providers who operate the service on our behalf:
  • Payment processors — to process your payments;
  • Messaging infrastructure providers — to deliver messages to and from you on the supported chat platforms;
  • AI model providers — to generate the music, lyrics, and audio you request. Your prompts are sent to these systems for the sole purpose of fulfilling your request;
  • Cloud hosting & storage providers — to store songs and run our infrastructure securely;
• Distribution partners — when you request distribution of your songs to streaming platforms;
• Professional advisors (lawyers, accountants, auditors) where necessary and only to the extent necessary;
• Authorities when required by law, or to enforce our Terms, protect our rights, or protect the safety of any person;
• Successors in interest in connection with a merger, acquisition, or sale of all or substantially all of our assets, subject to standard confidentiality and privacy safeguards.

All service providers are contractually required to protect your data and use it only for the purposes we specify.

6. International transfers

Afrobits is a global service. Your personal information may be transferred to, stored in, and processed in the United States and other countries that may have different data protection laws than your home country.

Where we transfer personal data from the European Economic Area, United Kingdom, or other regions with cross-border transfer restrictions, we use appropriate safeguards, which may include Standard Contractual Clauses approved by the relevant data protection authorities.

7. Data retention

We keep your personal information for as long as needed to provide the service and comply with our legal obligations:

• Account data (phone number, account identifier, usage records): for the duration of your account, plus a reasonable period afterward for fraud prevention and legal compliance, typically up to 7 years;
• Generated songs: retained indefinitely while distribution is active. If you request account deletion and have not distributed your songs, they will be deleted within 30 days;
• Payment records: retained for 7 years or as required by applicable tax and financial regulations;
• Support communications: retained for 3 years.

8. How we protect your data

We take data security seriously. Measures we use include:

• Encryption in transit using TLS;
• Encryption at rest for sensitive data stored in our cloud infrastructure;
• Access controls and authentication for all internal systems;
• Regular security reviews and monitoring;
• Contractual security obligations with all service providers.

No system is 100% secure. If we become aware of a security incident affecting your personal data, we will notify you and the relevant authorities as required by applicable law.

9. Your rights

Depending on where you are, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you;
• Correction: ask us to correct inaccurate or incomplete information;
• Deletion: request deletion of your personal information, subject to legal retention requirements;
• Portability: receive your personal information in a structured, commonly used format;
• Objection: object to processing based on legitimate interests;
• Restriction: ask us to limit processing of your information in certain circumstances;
• Withdraw consent: where we process your data based on consent, you may withdraw that consent at any time;
• Complain to a supervisory authority in your jurisdiction if you believe we have processed your data unlawfully.

To exercise any of these rights, email us at hello@afrobits.ai. We will respond within 30 days, or within any shorter period required by applicable law. We may ask you to verify your identity before we act on your request.

10. Cookies & tracking

Our website uses a minimal set of functional cookies and, where permitted, privacy-respecting analytics to understand how the site is used. We do not use advertising cookies or third-party tracking for behavioral advertising.

You can control cookies through your browser settings. Blocking cookies may affect some features of the site.

11. Children's privacy

Afrobits is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.

If we become aware that a user is under 18 and has not provided verifiable parental consent, we will terminate the account and delete the associated personal information.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us at hello@afrobits.ai.

12. Use of your data in AI systems

We do not use your personal information (such as your phone number or identity) to train our own AI models. Prompts and generated songs may be retained in aggregated and anonymized form to improve service quality, detect abuse, and evaluate model performance.

Our AI partners have their own data handling practices, which are governed by their respective agreements with Soro. We have negotiated terms intended to ensure that your data is not used to train their foundation models beyond what is required to process your request, but you should be aware that the AI industry's data practices are evolving.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you through the service or by email.

14. Contact us

Soro Technologies, Inc.
Registered in the State of Delaware, United States
Privacy inquiries: hello@afrobits.ai

If you are in the EEA or UK and we have not resolved your concern to your satisfaction, you have the right to lodge a complaint with your local data protection authority.