Legal

Privacy Policy

What we collect, why, and who else sees it. Written to be read rather than to be defensible.

Last updated 8 September 2026

This policy covers Satham, an AI music generation and streaming service. It explains what happens to your information when you sign in, make music, publish it and listen.

The short version: we collect what the service needs to work, and nothing for advertising. We do not sell your information. The part most worth reading is where your prompts go, because they leave our hands.

What we collect

Your account

Signing in goes through Auth0, so your password never reaches us. What we keep is your email address, your display name, and your profile picture if you have one. You can change your name, handle and biography whenever you like.

What you make

For every track you generate we keep the prompt, tags and lyrics you wrote, which model you used and the settings behind it, the audio itself, and any artwork you upload. We also keep whether it worked, so we can refund you when it does not.

Tracks stay private until you publish them. Publishing makes the track, its title, its artwork and your artist profile visible to anyone, signed in or not.

What you listen to

When you play something we record what it was, how long you listened, and roughly where in the world you were. That is what builds the popular and trending rows, your recently played list, and the listener counts artists see. Your IP address is not kept, and none of it is used to profile you for advertising.

Credits and payments

Generating costs credits, and we keep a record of every movement — the credits you were given at signup, each track charged, each refund — so that we can answer you if you ask where your credits went.

If you buy credits, the payment is handled entirely by Dodo Payments. Your card details go to them and never to us. What we receive back is the fact that you paid, how much, and your email address.

Reports

If you report something, we keep the report, what it was about, and who filed it. Reports are kept after they are dealt with, because a pattern of bad-faith reporting is itself something worth being able to see.

Where your prompts go

Generating music sends your prompt, tags and lyrics to whichever company runs that model. We do not run these models ourselves. Depending on which one you pick, your words go to Runware, to fal.ai, or to OpenRouter, which passes them on to Google. What those companies do with the text is governed by their terms, not ours.

Which models are on offer changes over time, so this list may too. The point holds whatever is on it: if you would not want a stranger to read a prompt, do not write it.

Analytics

We use PostHog to see how the site is actually used — which pages people open, when someone runs out of credits, when a generation fails. It is how we find out something is broken without waiting to be told.

Nothing you type is sent to it. Recording your screen, capturing every click, and logging the contents of forms are all switched off deliberately, and error reports carry the fact that something failed rather than the text of your prompt. PostHog is based in the United States.

Cookies

Two cookies, and neither is for advertising:

  • one that keeps you signed in, which the site cannot work without;
  • one from PostHog, which tells repeat visits apart.

Your browser also remembers a few things on its own — your volume, and how you have arranged the panels. Those never leave your device.

Who else sees your information

Only the services that make Satham work:

  • Auth0 signs you in, and holds your email and login history.
  • Runware, fal.ai and OpenRouter run the models, and receive your prompts, tags and lyrics.
  • Dodo Payments takes payments, and receives your email and what you paid.
  • PostHog receives how you use the site, as described above.
  • Amazon Web Services hosts the site and stores the music and pictures.

We do not sell your information and we do not share it for advertising. We would hand something over if the law required it, or if we had to look into a breach of the Terms of Service.

How long we keep things

  • Your account and your music — until you delete them, or ask us to close your account.
  • What you listened to — kept while it is still counting towards the charts and your own history.
  • Your credit record — kept for the life of the account. It explains your balance, and a balance nobody can explain is worse than one nobody can delete.
  • Reports and moderation decisions — kept after an account closes, because a record that disappears with the account is not a record.

Your rights

At any time you can:

  • change your profile and remove your pictures;
  • unpublish a track, which takes it out of the public catalogue;
  • delete tracks and albums you have made;
  • see your credit balance and everything behind it.

Depending on where you live you may also have the right to a copy of your information, to have it corrected or deleted, or to object to how it is used. Email privacy@satham.ai and we will get back to you within 30 days.

Deleting your account removes your profile, your unpublished work and your published tracks. The credit record and any moderation decisions stay, as above.

Security

Your password is handled by Auth0 and never reaches us. Your card details are handled by Dodo and never reach us either. Music you have not published is stored privately and only you can fetch it; music you have published is public, because that is what publishing means. Nothing is ever completely secure, and if something happens that affects you we will tell you.

Children

Satham is not for children. You need to be at least 13 to use it, or older where the law where you live says so — 16 in much of Europe. We do not knowingly collect anything from a child, and if you think one has an account, email privacy@satham.ai and we will remove it.

Where your information goes

The services above are spread across several countries, so your information is processed outside the one you live in, including the United States. Where the law requires a formal basis for that, we rely on the standard contractual clauses in our agreements with them.

Changes

If we change this in a way that actually affects you, we will say so on the site before it takes effect. The date at the top is always the current version.

Contact

Questions about any of this go to privacy@satham.ai.