Privacy Policy
Version from 26.05.2026
This Privacy Policy (the “Policy”) is primarily governed by the laws of the Russian Federation and applies to all information that the Suno Pro service (the “Service”) may receive about the user when using the website, PWA version, Android application, related API endpoints, payment modules, and technical components of the Service.
Important: by using the Service, registering, signing in, paying, topping up the balance, submitting prompts or files, or using cookies/local storage, PWA, or the Android application, the user agrees to this Policy to the extent permitted by applicable law.
1. General Provisions
1.1. By using the Service, the user confirms consent to this Policy and to the processing of personal data to the extent necessary for registration, provision of digital services, payment processing, security, customer support, and compliance with applicable law.
1.2. This Policy applies to all access channels, including the website, PWA, and Android application.
2. Data We May Collect
2.1. Depending on the usage scenario, the Service may process:
- email address, account identifiers, and information provided during registration or authentication;
- technical data such as IP address, user-agent, browser type, device information, operating system, application version, language, timezone, diagnostics, and logged events;
- locally stored data including cookies, localStorage, sessionStorage, service worker cache, UI preferences, and PWA technical storage;
- generation history, prompts, lyrics, metadata, task statuses, generated results, files, links, and usage history;
- payment-related information such as amount, date, transaction status, transaction identifier, and payment provider, without storing full bank card credentials on the Service side;
- notification-related technical identifiers, including push tokens where such functionality is available;
- support requests, correspondence, and information necessary to review claims and user requests.
3. Android App and PWA Data
3.1. When using the Android application or PWA, the Service may additionally process technical information about the device and application required for interface rendering, authorization, caching, history access, notifications, and diagnostics.
3.2. If the application requests device permissions, such permissions are used solely for the corresponding function (for example, file upload, notifications, media access, or another user-initiated action) and not beyond the declared purposes.
3.3. The user may restrict or revoke permissions at the operating system level, understanding that this may limit availability of some Service functions.
4. Purposes of Processing
4.1. Personal and technical data are processed only for the following purposes:
- registration, authentication, and account management;
- provision of digital content generation services, task history, and result access;
- payment processing, balance top-ups, accounting, and financial compliance;
- security, fraud prevention, abuse detection, and enforcement of usage rules;
- technical and customer support;
- analytics, service stability, interface improvement, and algorithm quality enhancement;
- compliance with applicable legal obligations.
5. Transfer to Third Parties
5.1. The Service does not sell users’ personal data.
5.2. Data may be transferred to third parties only to the extent necessary for Service operation, including:
- payment providers and aggregators (including YooKassa and other payment services in use) for payment processing and confirmation;
- generation technology providers and APIs to fulfill user requests;
- analytics, advertising, and metric systems in relation to anonymized or technical data;
- hosting providers, CDNs, notification delivery systems, and technical contractors;
- state authorities when legally required;
- artificial intelligence providers (including Groq API) — to ensure the functionality of the Suno Pro AI chatbot assistant, strictly within the scope of user-submitted text messages. No sensitive profile or payment data is shared.
5.3. If certain technology contractors, AI providers, or APIs are located outside the user’s jurisdiction, the user grants their explicit consent to cross-border transfer of relevant anonymized data to the extent necessary for service provision and chatbot operation.
6. Analytics, Metrics, and Cookies
6.1. The Service may use cookies, browser local storage, analytics, advertising, and metric tools in order to:
- maintain authenticated sessions and user preferences;
- analyze user behavior and improve the interface;
- diagnose errors and evaluate service quality;
- display advertising modules and evaluate their performance.
6.2. Disabling cookies or local storage may lead to partial or full unavailability of certain Service features.
7. Information Security
7.1. The Service takes reasonable organizational and technical measures to protect data, including secure transport protocols (SSL/TLS), access restriction, logging, and other security practices.
7.2. User passwords are stored as cryptographic hashes and are not available in plain text.
7.3. At the same time, the user understands that no Internet-based system can guarantee absolute protection against all possible threats.
8. Retention Periods
8.1. Personal data is stored no longer than necessary for the purposes of processing, service provision, contractual performance, and legal compliance.
8.2. Account data may be stored until account deletion by the user or termination of Service usage, unless a longer retention period is required by law.
8.3. Generated content, task history, and files may be stored for a limited period according to Service rules and retention settings.
8.4. Payment and accounting data may be stored for the period required by applicable law.
9. User Rights
9.1. The user may request information about personal data processing, correction, updating, restriction of processing, or deletion, to the extent such deletion does not conflict with legal obligations or the proper operation of the Service.
9.2. The user may also request account deletion and deletion of associated data by contacting support through the details provided by the Service.
10. Account and Data Deletion
10.1. The user may request deletion of the account and termination of personal data processing, except where retention is required by applicable law, accounting, tax, payment, claims handling, or other mandatory record-keeping obligations.
10.2. Account deletion does not automatically require immediate destruction of all related data where retention is necessary to confirm service provision, review claims, prevent abuse, comply with legal obligations, or protect the rights and legitimate interests of the Service operator.
11. Consent to Personal Data Processing
11.1. By registering, authenticating, making a payment, topping up a balance, submitting forms, or using the Android application, PWA, or any Service functionality, the user grants consent to personal data processing in the scope and for the purposes described in this Policy.
11.2. Such consent is given freely, voluntarily, and in the user’s interest, and remains effective until the processing purposes are achieved or until consent is withdrawn, unless otherwise required by applicable law or necessary for the Service operator to perform its obligations.
12. Contact Information
12.1. The data controller/operator under this Policy is the person operating the Service under the Suno Pro brand.
12.2. Requests related to personal data, account deletion, restriction of processing, and privacy rights may be submitted via the support contact information available in the Service.
13. Changes to the Policy
13.1. The Service operator may amend this Policy. The updated version becomes effective from the moment it is published on the relevant page unless otherwise expressly stated.