This Privacy Policy explains what personal information MusoCover collects, why, and how it's handled. MusoCover is operated by Dawid van den Berg, trading as Akreative ("MusoCover," "we," "us," or "our"), a sole proprietor based in South Africa. This policy is written to comply with South Africa's Protection of Personal Information Act (POPIA), the EU/UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA), reflecting MusoCover's international user base.
Dawid van den Berg, trading as Akreative, is the "responsible party" under POPIA and the "data controller" under GDPR for personal information collected through MusoCover. As a sole proprietor, there is currently no separate corporate entity behind MusoCover — see Section 13 for how to reach us.
| Category | Examples |
|---|---|
| Account information | Email address, password (hashed), account creation date |
| Usage & generation data | Genre/mood/style selections, prompts entered, credit balance and history, generated cover images, uploaded logos or text you add to a cover |
| Payment information | Handled entirely by Paddle (our Merchant of Record) — we do not receive or store your card details. We receive confirmation of purchase, amount, and credit allocation |
| Technical data | IP address, browser type, device type, basic analytics events |
| Communications | Emails you send us (e.g. support@musocover.com), your responses to any feedback forms |
For anonymous (not-signed-in) use, we track a limited number of free generations per IP address, to prevent free-tier abuse. This is the only use of IP address beyond standard technical logging.
We do not sell your personal information, and we do not use your data to train AI models beyond what's necessary to generate your own requested covers.
For users in the EU/UK, we rely on the following legal bases: contract (processing needed to provide the Service you've signed up for, e.g. generating covers, managing credits); consent (e.g. optional marketing emails, where applicable); and legitimate interest (e.g. fraud/abuse prevention, basic product analytics), balanced against your rights and freedoms.
We share the minimum data necessary with the following service providers (sub-processors), each of whom processes it under their own privacy/security terms:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication, account & credits database | Email, hashed password, account/credit records (hosted EU-West/Ireland region) |
| Pollinations AI | AI image generation (Flux model) | Genre/mood/style selections and generated prompts |
| Paddle | Payment processing, Merchant of Record | Payment details, purchase amount (Paddle collects this directly — we don't see full card data) |
| Cloudflare | Hosting, DNS, image storage (R2), email routing | Technical/traffic data, stored generated images, routed emails |
| Resend | Transactional email delivery | Email address, email content (welcome/confirmation emails) |
We may also disclose information if required by law, to protect our legal rights, or in connection with a business transfer (e.g. if MusoCover is sold or restructured — see Section 13 for how you'd be notified).
Because our providers operate internationally (e.g. Supabase's EU hosting, Cloudflare's global network), your data may be processed outside your home country, including outside South Africa or the EU/UK. Where this happens, we rely on our providers' own compliance mechanisms (such as standard contractual clauses or equivalent safeguards) for cross-border transfer.
We keep account and generation history data for as long as your account is active. If you delete your account, we'll delete or anonymize your personal data within a reasonable period, except where we're required to retain records (e.g. transaction records for tax/accounting purposes, typically 5 years under South African law). Anonymous IP-based free-generation counters are retained only as long as needed to enforce free-tier limits.
Depending on where you live, you may have rights including:
To exercise any of these rights, contact us at support@musocover.com. We'll respond within a reasonable time and in line with applicable law.
We use essential cookies/local storage to keep you logged in and remember basic preferences. We don't currently use third-party advertising trackers. If this changes, we'll update this policy and request consent where required.
MusoCover is not directed at children under 16. We don't knowingly collect personal information from children under 16 without parental consent. If you believe a child has provided us data without appropriate consent, contact us and we'll remove it.
We rely on our providers' security measures (encryption in transit, access controls, hosting security) to protect your data. No system is 100% secure, and we can't guarantee absolute security, but we take reasonable steps appropriate to a service of this size to protect your information.
We may update this policy from time to time. Material changes will be communicated to active users by email or in-app notice before they take effect.
For any privacy questions, requests, or complaints, contact us at support@musocover.com. Under POPIA, Dawid van den Berg acts as the Information Officer for data processed by MusoCover.