demorphus
This notice is incomplete: publisher details are missing. They will be added.
Privacy
Last updated : 2026-10-28
This page describes the data Demorphus handles, why, for how long, and what you can require. It describes what the service actually does.
The data controller is —. Contact: [email protected].
What we handle
| Data | Why | Legal basis |
|---|---|---|
| Email address | Create your account, sign you in, contact you about it | Performance of the contract |
| Uploaded audio and produced files | Run the processing you ask for and return the result | Performance of the contract |
| IP address | Enforce free allowances and limit abuse | Legitimate interest |
| Usage — track counts, dates | Enforce your plan’s allowance | Performance of the contract |
| Billing data | Take payment and issue invoices | Legal obligation |
We do not ask for your name, your date of birth, or any data the service does not use. We never see your card number.
Your music is used for you alone. It is not resold, published, or used to train any model.
How long
- Free checker files: the audio copy is deleted after the analysis, and the result expires after 24 hours.
- Studio tracks: the audio — both your original file and the export — is kept for 7 days after processing, then deleted. The report, the scores and the history stay in your dashboard while your account exists.
- An email tells you as soon as a track is ready, with a download link valid for the same period.
- Account and usage: kept while the account is active.
- Invoices: kept for ten years, as accounting law requires.
Where, and by whom
Accounts and the library are hosted in the European Union. The following providers act on our behalf:
| Provider | Role |
|---|---|
| Railway | Application hosting |
| Supabase | Database and authentication, EU region |
| Stripe | Payment and invoicing |
| Resend | Sending sign-in and delivery emails |
| Cloudflare | Network, protection and cookieless analytics |
| Audio analysis provider | Automated analysis of a file, at your request |
Some of these providers are established outside the European Union. Those transfers are covered by the European Commission’s standard contractual clauses.
Your rights
You can request access to your data, its correction, its erasure, a restriction of processing, and its portability. You can also object to processing based on our legitimate interest.
Write to [email protected]. We answer within a month. Deleting your account deletes your tracks and files; invoices are kept, as the law requires.
If our answer does not satisfy you, you can refer the matter to the CNIL, cnil.fr.
Security
Traffic is HTTPS. Sign-in uses a password, a single-use code sent by email, or Google; passwords are kept hashed by our authentication provider, never in plain text. Audio links handed out for analysis are signed, limited in use and expire after ten minutes.
Cookies
One cookie, strictly necessary. The detail is on the cookies page.
A question about this page? [email protected]