Privacy Policy.

Last updated: 1 October 2026 · Version 2

AfriBeats ("we", "us", "our") provides an AI music generation service on the web at afribeats.co.za. This policy explains what personal information we collect, why we collect it, how it's used and protected, and the rights you have over it. We process personal information in line with South Africa's Protection of Personal Information Act (POPIA).

1. What we collect

• Account details: name, email address, password (stored as a salted hash — we never see or store your plain-text password), and your country (if provided).
• Generation content: the prompts, lyrics, genre choices, and other parameters you submit to generate a track, plus the resulting audio file and its metadata.
• Usage data: credit balance, render history, referral codes, timestamps of account activity, and basic audit logs of account changes (e.g. password resets, role changes).
• Payment data (once enabled): AfriBeats does not and will not store your card or banking details. Payments are handled by a third-party payment processor (e.g. Paystack or PayFast); we only store the resulting credit balance and transaction reference.

2. Why we collect it

• To create and manage your account, and authenticate you (email and password).
• To generate the music you request and deliver it back to you in the web app.
• To track your credit balance and render history so you can see what you've made.
• To send you account-related messages: password reset codes, render completion notifications, and important service updates.
• To detect abuse, prevent fraud, and keep the service secure.

3. Who we share it with

We share the minimum data necessary with the following service providers, solely to operate AfriBeats:

• Graydient AI — receives your generation prompt and parameters to produce the audio file.
• Resend — used to deliver transactional emails (e.g. password resets).
• Railway and Vercel — host our backend and website respectively.
• Payment processors (once enabled) — to process credit purchases.

We do not sell your personal information to anyone, and we do not share it with third parties for their own marketing purposes.

4. How long we keep it

We keep your account data for as long as your account is active. If you delete your account, your profile, linked identities, and authentication tokens are permanently removed. Some records (such as audit logs and transaction references) may be retained for a limited period afterwards where we have a legal or accounting obligation to do so.

5. Your rights

You can, at any time:

• Access your account details and render history from the Account tab in the app.
• Correct your name or country from the Account tab.
• Delete your account entirely — this is permanent and removes your profile, render history, and linked identities.
• Request a copy of your data, or ask us a question about how it's processed, by emailing us (see Contact below).

6. Security

Passwords are hashed using industry-standard algorithms (bcrypt) and are never stored or transmitted in plain text. Access to the database and admin tools is restricted to authorized AfriBeats staff. All traffic between your device and our servers is encrypted (HTTPS).

7. Cookies & local storage

The AfriBeats web app stores your login session token in your browser's local storage so you stay signed in. We do not use third-party advertising or tracking cookies.

8. Children's privacy

AfriBeats is not intended for children under the age of 18. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you by email.

10. Contact us

For any privacy questions, data access requests, or to report a concern, contact us at privacy@afribeats.co.za.