Privacy Policy

What we collect

• Account details: your name, email address and, if you sign in with Google, your Google profile name and picture.
• What you create and upload: artists, lyrics, songs, voice recordings, images, videos, notes and chat messages.
• WhatsApp: your phone number and the messages and media you send to the Iconyx number.
• Connected social accounts: if you connect TikTok, Instagram, YouTube or X to post, the account details needed to publish for you.
• Payments: handled by Stripe. We keep a record of purchases and credits, never your full card number.
• Technical data: log and error information such as IP address, browser and device, used to run and secure the service.

How we use it

• To provide Iconyx: create and store your artists and their work, run the AI tools you ask for, and post where you tell us to.
• To keep your account secure, prevent abuse and fix problems.
• To bill you for credits and plans.
• To email you about your account and work you started. We do not sell your data or use it for third-party advertising.
• We review how our AI agents handled requests (what they read, chose and spent, and how the result turned out) to find and fix mistakes. Only Iconyx staff see these reviews; we report on them only in aggregate, without naming you, and some become internal test cases that help us check the agents.

Our legal bases are performing our contract with you, our legitimate interest in running and securing the service, and your consent where we ask for it.

AI providers and other services we use

To generate music, images, video, voice and text, the content you give Iconyx is sent to AI providers that process it on our behalf. We also use providers for hosting, storage, email and payments. They include: Anthropic, OpenAI, Google (Gemini), fal, Kie, ElevenLabs, Modal, Supabase, Vercel, Railway, Stripe, Resend, Zernio (social posting and WhatsApp), Sentry and Braintrust. Some of these process data outside the UK; where they do, we rely on appropriate safeguards such as standard contractual clauses.

Google sign-in

If you sign in with Google we receive your name, email address and profile picture. We use them only to create and identify your Iconyx account, and we do not request access to any other Google data.

What is public

Work you choose to post or publish (for example to social platforms, an artist bio page or a streaming service) is public by your choice. Everything else stays private to your account.

How long we keep it

We keep your account and work for as long as your account is open. When you delete work or your account, we remove it from our systems within 30 days, except where we must keep records for legal or accounting reasons.

Detailed agent working records are deleted after 30 days, and the text in a run's summary is removed then too. A short summary of each run (what was used, what it cost, how it went) is kept while your account exists.

Your rights

Under UK data protection law you can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent at any time. Email sachin@iconyx.me and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

Children

Iconyx is not intended for anyone under 16, and we do not knowingly collect their data.

Changes

If we change this policy we will update this page and the date above, and tell you about significant changes.