Loading…
Last updated: May 5, 2026
Your privacy matters to us. This Privacy Policy explains what personal data MAI collects, how we use and protect it, and what rights you have over your information. By using the Service you agree to the practices described here.
MAI ("we," "us," or "our") operates the MAI music AI platform accessible at mai.music and its sub-domains. MAI is the data controller responsible for your personal information collected through the Service.
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us at:
privacy@mai.music
MAI — Music AI
United States
We will respond to privacy requests within 30 days, or sooner where required by applicable law.
Information you provide directly:
Information collected automatically:
Information we do not collect: We do not collect your physical location beyond IP-based country estimation. We do not collect audio from your microphone. We do not use third-party advertising trackers or sell your data to advertisers.
We use the personal data we collect for the following purposes:
We do not use your personal data to train external AI models, build advertising profiles, or sell data to third parties under any circumstances.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:
Storage. Your data is stored on secure servers located in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States, a jurisdiction that may not have the same data protection laws as your country.
Security. We implement industry-standard technical and organizational measures to protect your personal data, including:
Despite these measures, no security system is impenetrable. We cannot guarantee absolute security, and you use the Service at your own risk. If you believe your account has been compromised, contact us immediately at privacy@mai.music.
Retention. We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:
We do not sell, rent, or trade your personal information. We share your data only in the following limited circumstances:
The Service integrates with or depends on certain third-party services. The key integrations are:
We encourage you to review the privacy policies of these third-party services.
We use browser localStorage (not cookies) to store your authentication token, which keeps you signed in between sessions. This token is signed and expires after 30 days. You can clear it at any time by signing out or clearing your browser storage.
We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies. We may use essential first-party session data to maintain your preferences during a browsing session.
If we introduce cookies in the future, we will update this Policy and, where required by law, seek your consent before setting non-essential cookies.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@mai.music. We will respond within 30 days (or sooner as required by law). We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
To submit a CCPA request, contact us at privacy@mai.music or use your account settings. We will verify your request and respond within 45 days, extendable by an additional 45 days with notice.
Categories of personal information collected in the past 12 months: identifiers (email address, IP address); commercial information (subscription plan, transaction history); internet activity (pages visited, features used); inferences drawn to create a profile about your musical preferences.
Categories of sources: directly from you; automatically through your use of the Service.
Business or commercial purpose for collection: to provide and improve the Service, as described in Section 3.
Categories shared with third parties: identifiers shared with email delivery providers and Stripe (payment); internet activity shared in aggregate with analytics tools. No categories are sold.
MAI operates from the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. We take steps to ensure that such transfers comply with applicable data protection laws, including implementing standard contractual clauses where required for transfers from the EEA or UK.
By using the Service, you consent to the transfer of your personal information to the United States and acknowledge that data protection laws may differ from those in your home country.
The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Users between 13 and 17 must have parental or guardian consent before using the Service.
If we become aware that we have collected personal data from a child under 13 without verifiable parental consent, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at privacy@mai.music.
In the event of a security breach that affects your personal data and is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and, where required by law, within 72 hours of becoming aware of the breach. Notification will be provided via the email address associated with your account and/or a prominent notice on the Service.
Notifications will include: a description of the nature of the breach; the categories and approximate number of users affected; the likely consequences of the breach; and the measures taken or proposed to address the breach and mitigate its effects.
Some browsers include a "Do Not Track" (DNT) feature that signals websites not to track user activity. Because there is no universally accepted standard for how to respond to DNT signals, we do not currently alter our data practices in response to DNT signals. However, we do not engage in cross-site behavioral tracking regardless of DNT status.
You may request deletion of your account and personal data at any time by contacting privacy@mai.music. Upon receiving a verified deletion request, we will:
Please note that content you have posted to the community may remain visible in anonymized form or may have been saved by other users before deletion. We cannot guarantee recovery of any data after a deletion request has been processed.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated policy, you must stop using the Service and may request account deletion.
For any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact:
privacy@mai.music
MAI — Music AI
United States
EEA/UK users may also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have processed your personal data in violation of applicable law.