Privacy policy

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPDGDD), Platform users are informed in detail that personal data collected will be incorporated and processed in systems under the responsibility of:

• Controller Identity: Francesc Murcia Mila
• NIF: 77835505D
• Postal Address: Carrer Àngel Guimerà 22, 43480 Vila-seca (Tarragona, Spain).
• Legal Contact Email: hola@dedicamusica.com

Dedica only collects and processes data strictly necessary for proper software operation and provision of personalized music generation services requested by the user. The categories of data processed are divided into:

• Registration and Authentication Data: Email address and encrypted password (via secure hash) provided to create the user profile.
• Service Personalization Data: Name or pseudonym of the song recipient, selected festive event type, and stories or biographical anecdotes entered in the creation form text fields.
• Technical Configuration Data: Preferences regarding musical genres, chosen tempos, and specifications about the selected voice type.
• Advanced Multimedia Data: Audio files with analog recordings of the user's voice, provided only if they voluntarily activate advanced vocal personalization tools.

Personal data provided to Dedica is processed for the following legitimate business purposes:

• Manage user profile registration, enable secure login, and maintain operational integrity of the application control panel.
• Technically process song lyrics and execute vocal and musical synthesis algorithms through Artificial Intelligence.
• Generate vertical video tracks with synchronized subtitles if the additional service is contracted.
• Provide and maintain the permanent "My Library" storage space to allow deferred listening and recurring download of songs purchased by the user.
• Manage accounting billing, issue tax receipts, and process payment, hold, or cancellation flows delegated to the Stripe gateway.
• Resolve technical incidents, respond to support inquiries through customer service email, and comply with tax obligations dictated by Spanish law.

Processing of user data is fully supported under the following legal bases regulated in Article 6 of the GDPR:

• Contractual Performance (Art. 6.1.b GDPR): Processing profile data, anecdote texts, and audio is an essential requirement to execute the music generation service contract that the user accepts and formally requests when placing an order.
• Legal Obligation (Art. 6.1.c GDPR): Storage and retention of tax data, purchase records, and financial transaction logs is carried out in compliance with current Spanish accounting and tax regulations.

To transform texts into songs and videos through Artificial Intelligence, Dedica relies on advanced external technological infrastructure. Data transmission to these providers is carried out under strict encryption and confidentiality protocols, all acting as Data Processors:

• OpenAI L.L.C. (USA): Texts with stories entered by the user are securely transmitted to their language models exclusively to draft song verses. OpenAI processes this data under privacy regulations and does not use inputs for public model training.
• Suno API / apisuno.org (USA): Structured prompts and resulting lyrics are securely sent to their audio synthesis servers for instrumental and vocal composition. In strict compliance with this technical provider's privacy guidelines, all biographical data records and floating multimedia files are permanently deleted from their servers within a maximum and non-extendable period of fourteen (14) days for multimedia files and two (2) months for data logs, minimizing user data retention on external platforms.
• Supabase Inc. (EU/USA): Used as the main secure hosting infrastructure and relational database for our application. Final audio (.mp3/.wav) and video files contracted by the user are downloaded and persistently stored in its encrypted buckets to prevent loss due to Suno's 14-day deletion.
• Stripe Payments Europe Ltd. (Ireland/USA): Manages payment flows in an isolated and encrypted manner. Dedica never receives or stores bank card information.

In compliance with the storage limitation principle, user access data and multimedia files of purchased songs and videos will be retained on our Supabase servers indefinitely while the user maintains an active Dedica account, solely to fulfill the contractual commitment of allowing access, playback, and download of purchased digital memories at any time. If the user requests data deletion or account closure, all multimedia and identifying information will be permanently deleted from production databases within the legal period. Tax data associated with paid invoices will be retained in blocked form for 6 years to comply with Spanish tax legislation.

The user has sovereign control over their personal data and may exercise the following rights recognized by the European regulatory framework before the Data Controller, completely free of charge:

• Right of Access: Know whether their data is being processed and learn the specific details of processing.
• Right of Rectification: Modify or correct personal data that is inaccurate, erroneous, or incomplete.
• Right of Erasure (Right to be Forgotten): Demand total and definitive deletion of their personal data from our servers when, among other reasons, the data is no longer necessary for the original contractual purposes.
• Right to Restriction of Processing: Request temporary blocking of data processing under specific legal accuracy dispute circumstances.
• Right to Data Portability: Receive their personal data in a structured, commonly used, machine-readable electronic format, or request direct transfer to another service provider.
• Right to Object: Object at any time to their contact data being used for commercial prospecting campaigns or promotional communications.

To effectively exercise any of these rights, the user must send a written request to the official email: hola@dedicamusica.com, stating in the subject line the right they wish to exercise and including, as an essential security measure to verify the applicant's identity and prevent impersonation, a scanned copy of their valid identity document (Spanish DNI, NIE, or passport).

Users are also informed that they have the right to file a formal complaint with the competent state supervisory authority, the Spanish Data Protection Agency (AEPD — www.aepd.es), if they believe that processing of their personal data by Dedica has violated any provision of the GDPR or applicable national legislation.