Privacy Policy

Controller and contact

Individual Entrepreneur Komarov Andrey Viktorovich (Индивидуальный предприниматель Комаров Андрей Викторович), Republic of Kazakhstan, Karaganda, 41 Yerzhanov Street, apartment 58, operates oscivara.com and determines how product data is used. Contact andkzlive@gmail.com or support for privacy requests. Updated 6 September 2026.

Information we process

We process account identifiers, email, login and verification information, acceptance of terms, profile details you provide, project and library data, uploaded audio and MIDI, AI prompts and results, task history, credit balances and usage, order and refund identifiers, and support messages. Published community profiles and materials are visible according to your publication choices. Technical data can include IP address, browser, request time, security events and error diagnostics. Payment and country information is used to calculate prices and prevent fraud. We do not receive your full card number or security code through our checkout integration.

Purpose and legal grounds

We use information to provide the requested studio, cloud, AI and payment services and to answer support requests; this is necessary to perform our agreement with you. We keep necessary financial and legal records to meet legal obligations. We process limited technical data to secure the service, prevent abuse and diagnose failures based on legitimate interests, subject to your applicable rights. Optional public profile information and optional communications follow your choices; where consent is legally required, you can withdraw it without affecting earlier lawful processing.

Service providers and international processing

Hosting is provided through PS Internet Company (ps.kz). Cloudflare provides network/security and R2 object storage where configured. AI requests are sent to the provider of the selected feature, including OpenAI, Google Gemini and GPU services on Modal. Requests may include the prompt, relevant musical context and files needed for the task. Each provider may process data in countries other than Kazakhstan or your country under its applicable service and data terms. We use contractual and technical safeguards where required; selecting a model does not guarantee storage in your country.

When you use Paddle checkout, Paddle processes payment, billing address, tax and fraud information as an independent controller for its sale. See Paddle privacy policy. Your card or wallet details are entered into Paddle's payment interface. We receive the transaction information required for credits, support and accounting. Email and authentication services may process information needed to deliver account messages or a sign-in you request. We may disclose necessary information where legally required or to protect users and service security. We do not sell your personal information.

Cookies and browser storage

Oscivara uses necessary session/security cookies and browser storage for login, language, preferences, local projects and recovery. Clearing browser storage may erase local work. Paddle may use necessary payment and fraud-prevention storage when you open checkout; its policy applies to that interface. This policy does not authorise optional advertising tracking. If we introduce non-essential tracking requiring consent, we will provide a choice before it runs. You can manage storage through your browser, but blocking essential storage may prevent features from working.

Retention and deletion

Local work remains in your browser until you or the browser remove it. Cloud projects, uploads, AI history and account data are retained while needed for the features you use; deleting a project or clearing AI history triggers the applicable cleanup process. Copies may persist temporarily in backups and queued cleanup, and records required for fraud prevention, disputes, accounting or legal obligations may be retained for the applicable period. Account closure or a request to delete remaining personal data is available through support. We do not promise that browser deletion removes data held independently by a payment processor or AI provider.

Your rights

Depending on applicable law, you can request access, correction, export, deletion, restriction or objection to processing, withdraw consent, and complain to the relevant supervisory authority. Contact us using your account email and describe the request. We may need proportionate verification to prevent disclosure to another person. Deletion rights are subject to mandatory retention and other lawful exceptions. We do not knowingly offer purchases to children; contact us if you believe a child's data was submitted improperly.

Security and changes

We use access controls, authenticated requests and encrypted transport where provided by the service. No storage or transmission is risk-free; protect your login and keep backups. We will post policy changes here and provide additional notice of material changes when required. The current document is available from the website and application.