This page summarises Soundpiece’s data practices in plain language. For additional information, contact business@soundpiece.co.uk.
What data we process
When you use the Soundpiece API, we process:
We store lyrics, prompts, source audio, and generated outputs against your account so you can query past operations, download outputs, and audit your usage. Data is retained until you close your account or request its deletion — see Audio retention and deletion.
Data storage and infrastructure
All data is stored and processed within the United Kingdom and European Economic Area (EEA). We do not transfer audio data to servers outside the UK/EEA at any point during processing. Our infrastructure is contractually bound by Standard Contractual Clauses (SCCs) and is GDPR-compliant.Audio retention and deletion
We retain your operations and their outputs against your account so you can query past work and re-download outputs over time. Re-fetch a signed URL each time by polling theGET endpoint — it regenerates the URL with a fresh expiry.
Data is retained until you close your account or request its deletion. To delete a specific operation (for example, when processing a data subject erasure request) contact business@soundpiece.co.uk with the operation id. Deletion is immediate and permanent — the audio content is irrecoverably removed.
Model training
Soundpiece does not use your uploaded audio, generated outputs, or prompts to train or fine-tune AI models. This is the default for all plans and does not require an opt-out action. Enterprise customers can request written confirmation of this position as part of a DPA.Third-party subprocessors
Soundpiece uses a limited set of subprocessors to operate the service. Key categories:
Enterprise customers are notified of any changes to the subprocessor list in advance and may raise objections under the terms of their DPA.
Your rights
Under UK and EU GDPR, you (and your end users where applicable) have the right to:- Access — request a copy of personal data we hold
- Rectification — correct inaccurate data
- Erasure — request deletion of personal data
- Restriction — ask us to stop processing in certain circumstances
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
