Legal
Privacy Policy
Last updated: 27 September 2026
This Privacy Policy explains what personal data Zefmatic collects, how we use it, and the choices you have. The Service is operated by Ermaz LLC, a Wyoming limited liability company (“Zefmatic”, “we”, “us”), which is the controller of the personal data described in this Policy. It applies to the Zefmatic website and application. By using the Service you agree to this Policy.
1. Data we collect
- Account data: your email address, which we use for passwordless sign-in and account communications.
- Content you provide: audio files, cover images, song concepts, lyrics, and settings you submit to create videos.
- Usage & job data: the videos you create, their status, style, and timestamps, along with basic technical logs (such as IP address and browser type) needed to run and secure the Service.
- Payment data: when you buy credits, your payment is processed by Lemon Squeezy. We receive confirmation of your purchase and credit balance, but we do not receive or store your full card details.
2. How we use it
- To provide the Service: authenticate you, generate lyrics and audio, render and store your videos, and let you download or publish them.
- To operate credits and process purchases and refunds.
- To secure, maintain, and improve the Service and prevent abuse.
- To send you essential account and transactional messages (such as sign-in links and receipts).
We do not sell your personal data, and we do not use your uploaded content to train our own models.
3. Service providers we share data with
We share the minimum data necessary with the following processors to run the Service:
| Provider | Purpose | Data involved |
|---|---|---|
| Railway | Application hosting, database and the render volume | Account, job and content data |
| Cloudflare (R2) | Object storage for finished videos, artwork and uploaded audio | Your uploaded audio, cover art, generated artwork and rendered videos |
| RunPod | GPU rendering of 3D visual styles | The song audio, cover image, lyrics and caption settings for the video being rendered |
| OpenAI | Writing lyrics and narration, planning the visual world, and generating cover artwork and thumbnails | Your song concept or prompt, your lyrics, and the title and artist name used on artwork |
| Suno API provider (sunoapi.org) | Generating audio in generate mode | Lyrics and style text |
| Google (YouTube Data API) | Publishing a finished video to your own channel, and setting its thumbnail, when you connect YouTube | Your video file, its title, description and tags, your artwork, and the access token for your channel |
| Google (Sign in with Google) | Optional sign-in | Your email address and whether Google has verified it |
| Resend | Sending sign-in links and account emails | Email address |
| Lemon Squeezy | Payments and Merchant of Record, when paid credit packs are offered | Email, billing details, transaction data |
Each provider processes data under its own terms and only as needed to deliver its part of the Service. Several of them are located outside your country, which means running the Service involves international transfers of data.
Your audio, lyrics and artwork are sent to the providers above only to produce the video you asked for. They are not sent anywhere else, they are not used for advertising, and we do not use them to train our own models.
4. Retention
We keep your account data for as long as your account is active. Uploaded audio, generated files, and rendered videos are retained so you can access them from your dashboard, and may be deleted after a period of inactivity or on your request. You can ask us to delete your account and associated data at any time.
5. Connecting YouTube
Connecting a YouTube channel is optional, and nothing is published unless you connect one and ask for it. When you connect, Google gives us a token that lets the Service upload videos to that channel and set their thumbnails. We request only the upload permission, so the Service cannot read your existing videos, your comments, your subscribers or your analytics, and it cannot delete anything.
The token is stored encrypted and is used only to publish the videos you create here. You can disconnect at any time from Account, which deletes the token from our database and withdraws the permission at Google. You can also remove the Service from your Google account at any time from your Google security settings.
6. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email support@zefmatic.com and we will respond within a reasonable time.
7. Cookies
We use essential cookies only: one to keep you signed in, and a short-lived one during a Google or YouTube sign-in to confirm that the request coming back is the one you started. We do not use advertising or third-party tracking cookies. A payment provider may set its own cookies during checkout, governed by that provider’s privacy notice.
8. Security
We use industry-standard measures, including encrypted connections (HTTPS) and access controls, to protect your data. Access tokens for connected accounts, such as a YouTube channel, are encrypted in our database rather than stored as readable text. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to it.
9. Children
The Service is not directed to children under 18, and we do not knowingly collect their personal data.
10. Changes & contact
We may update this Policy from time to time; the “last updated” date shows the latest version. For any privacy question or request, contact Ermaz LLC at support@zefmatic.com.