Privacy policy
Updated October 22, 2026
AI text creations
Name and diss-lyric tools send your creative brief, style and chosen language to Cloudflare Workers AI. Each new generation costs 1 credit. Original inputs and results are private to your account and available for 30 days from creation; scheduled cleanup removes their contents while necessary billing records remain. Editing drafts stays in the current browser tab. Text creations do not have public sharing links.
Free tools and lyrics
Free media tools, voice-recording mixes, and enabled local AI tools process your files on your device. Local models may be downloaded from model hosts; selected audio and text are not uploaded by these tools. Model and engine files may be downloaded, but the media you select is not uploaded to ToAudio. Template lyrics are produced in your browser; drafts may be saved in this tab to survive sign-in.
Accounts and payments
Google sign-in requests your name, email and profile image. Email registration and password recovery send your email address and a verification or reset link through Resend. Ordinary password sign-in sends no email. Passwords are stored as hashes, never as plain text. Secure session cookies keep you signed in. We store account, order and credit records in Cloudflare D1. Creem processes payments; we do not receive your card number.
Paid music generation
AI lyrics send your topic or structured birthday details to Cloudflare Workers AI. Song generation sends your edited lyrics, name, style and language to fal.ai. Provider processing and retention follow their policies. Do not include sensitive personal information. We store generated audio in private Cloudflare R2. Turnstile verifies protected requests; hashed client IPs limit signup gifts and requests.
Storage and sharing
Generated audio is available for 30 days from completion. Gift pages can include sender and recipient names, a message and one photo. Photos are processed in your browser before upload to private R2 storage; an active sharing link reveals the gift and photo to anyone with the link. Closing the link blocks future shared audio and photo access. Expiry cleanup removes the gift photo and personal gift fields. At expiry, access and sharing stop; scheduled cleanup deletes the audio and clears the stored lyrics and recipient name. Songs are private by default. An enabled sharing link reveals the recipient name and audio to anyone with the link for an owner-selected 1–30 days, or until the audio expires if sooner. Closing it stops future access, but cannot remove copies already downloaded.
AI dance video processing
Dance video generation sends your selected photo and motion reference to fal and its model processing services. ToAudio stores user source files and completed videos in private Cloudflare R2. User media is not automatically published. Source files become eligible for scheduled cleanup 24 hours after upload or, for a submitted task, 24 hours after completion or failure. Unresolved tasks retain their necessary inputs. Videos expire 30 days after completion. External processors have their own retention practices. Your browser saves a photo and template draft in IndexedDB to restore it after sign-in or payment; drafts expire on the next read after 24 hours. Clear site data to remove a local draft sooner. Publishing a user demonstration requires separate permission. Operator-selected motion templates have separate public preview clips.
Optional analytics
GA4 loads only after you accept analytics. We measure page visits, tool use, public sample plays, login, checkout, confirmed purchases and generation outcomes. Recognized utm_source values and referring domains are reduced to fixed platform categories. Page URLs exclude query parameters and fragments. We do not send names, emails, lyrics, file names, media files, share tokens or generation task IDs to GA4. After consent, this tab stores the source category and local task keys to prevent duplicate generation counts. Withdrawing consent clears this analytics state. Use Analytics preferences in the footer to change your choice.
Records and requests
Credits do not expire. Account and billing records are retained to operate your balance, reconcile payments and meet applicable obligations. Contact support to request access, correction or account deletion. Financial records may need to be retained; we will explain any exceptions. Essential authentication cookies are separate from optional analytics.
Questions or support requests: support@toaudio.lol