Privacy Policy
Last updated: March 15, 2026
Table of Contents
1. Introduction
VampJam ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered backing track generation service.
2. Information We Collect
Account Information
When you create an account, we collect your email address and authentication credentials. If you sign in with Google, we receive your name and email from your Google account.
Usage Data
We collect information about how you use VampJam, including the tracks you generate, your musical preferences (key, tempo, genre), practice session data, and feature usage patterns.
Audio Content
We store AI-generated tracks, tracks you upload, and practice recordings you create using the recording feature. All audio content is private by default.
Payment Information
Payment processing is handled by Stripe. We do not store your full credit card details on our servers. We receive limited transaction information from Stripe to manage your subscription and purchase history.
3. How We Use Your Information
- To provide and maintain our service
- To process your transactions and manage your subscription
- To save and organize your generated tracks and recordings
- To improve our AI generation quality based on aggregated, anonymized usage patterns
- To send you service-related communications (billing confirmations, security alerts)
- To respond to your support requests
- To enforce our Terms of Service and prevent abuse
We do not sell your personal information to third parties. We do not use your data for third-party advertising.
4. Data Storage and Security
Your data is stored securely using industry-standard encryption. We use Supabase for data storage with row-level security policies ensuring you can only access your own data. Audio files are stored on Cloudflare R2 with access controls and are only accessible to you unless you explicitly share them via share links or community submissions.
5. Third-Party Services
We use the following third-party services:
- Supabase — Authentication and database (PostgreSQL)
- Stripe — Payment processing (PCI DSS compliant)
- Cloudflare R2 — Audio file storage and CDN delivery
- Google OAuth — Optional sign-in method
- Google Analytics — Anonymized usage analytics
- Cloudflare Turnstile — Bot protection (no tracking cookies)
- Resend — Transactional email delivery
- Upstash Redis — Rate limiting (stores only anonymized request counts)
- AI Music Generation Service — For creating backing tracks (see below)
Each third-party service processes only the minimum data necessary to perform its function. We do not share your personal data beyond what is required for service operation.
6. AI Music Generation
When you generate a backing track, we send your prompt and musical parameters (genre, key, tempo, mood) to a third-party AI music generation service. This data is used solely to generate your requested audio.
According to our provider's terms, your prompts and generated audio are treated as confidential and are not shared with third parties or used to train AI models without your opt-in consent.
Generated audio files are stored in our secure CDN and are associated with your account. Only you (and anyone you explicitly share with) can access your tracks.
7. Recording Feature & Microphone Access
When you use the practice recording feature, VampJam requests microphone access through your browser. We only access your microphone when you explicitly initiate a recording session.
Your recorded audio is stored on Cloudflare R2 and is not transmitted to third-party AI providers. Recordings are private by default — only you can access them unless you explicitly share them.
You can delete any recording at any time. Deleted recordings are permanently removed from our storage.
8. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your data in a portable format
- Opt out of marketing communications
- Object to processing of your data on legitimate interest grounds
Account Deletion
To request deletion of your account and all associated data, please email support@vampjam.com with the subject line "Account Deletion Request" from the email address associated with your account. We will process your request within 30 days and confirm once your data has been deleted.
9. GDPR Rights (EU Residents)
If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation:
- Right of access — Request a copy of your personal data
- Right to rectification — Correct inaccurate personal data
- Right to erasure — Request deletion of your personal data
- Right to data portability — Export data in a machine-readable format
- Right to object — Object to processing based on legitimate interests
- Right to restrict processing — Limit how we use your data
- Right to lodge a complaint — Contact your local supervisory authority
To exercise these rights, email privacy@vampjam.com with "GDPR Rights Request" in the subject line. We will respond within 30 days.
10. CCPA Rights (California Residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
- Right to know — What personal information is collected and how it is used
- Right to delete — Request deletion of your personal information
- Right to opt-out — Opt out of the "sale" or "sharing" of personal information
- Right to non-discrimination — Equal service regardless of exercising CCPA rights
VampJam does not "sell" personal information as defined by the CCPA. We do not share your data with third parties for advertising purposes. To submit a request, email privacy@vampjam.com with "CCPA Request" in the subject line.
11. Data Retention
We retain different types of data for different periods:
- Account data (email, auth) — Retained for account lifetime; deleted within 30 days of account deletion
- Generated tracks & recordings — Retained until you delete them or your account is deleted
- Usage analytics (anonymized) — Retained for 14 months in Google Analytics
- Payment records — Retained for 7 years per tax and financial record-keeping laws
- Support communications — Retained for 2 years
If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.
13. Children's Privacy
VampJam is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover that an account belongs to someone under 13, we will delete all associated data immediately.
If you are a parent or guardian and believe your child under 13 has created an account, please contact privacy@vampjam.com immediately to request account deletion. Payment features require users to be 18 or older, or to have parental consent.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will also notify you via email.
15. Contact Us
If you have questions about this Privacy Policy, please contact us at privacy@vampjam.com