Song Splitter

Privacy Policy

Last updated: 28 May 2026

1. Who We Are

Song Splitter is an AI-powered music source separation service operated by Emmanuel Ansah, served from stemsplits.com. Contact: privacy@stemsplits.com

2. Information We Collect

  • Account information: When you sign in with Google, we receive your name, email address, and profile picture via Google OAuth 2.0.
  • Job history: We store metadata about your separation jobs (filename, status, creation date). The audio content is not stored beyond 24 hours.
  • Payment information: Credit pack purchases are processed by Paystack. We do not store your card details. We store your credit balance and purchase history to track available fast splits.
  • Usage data: We track your weekly fast-split usage to manage free quotas.
  • Cookies: We use cookies for session authentication and, if you consent, for advertising (Google AdSense).

3. How We Use Your Information

  • To provide and improve the Service.
  • To authenticate you and maintain your session.
  • To process credit pack payments and send billing-related emails.
  • To upload your separated stems to your Google Drive (with your permission).
  • To show relevant advertisements via Google AdSense (with your consent).

4. Limited Use of Google User Data

Song Splitter's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, in relation to data we receive from Google APIs:

  • We use Google user data solely to provide the user-facing feature of saving separated stems to your Google Drive.
  • We do not transfer Google user data to others, except as necessary to provide or improve the Service, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
  • We do not use Google user data for serving advertisements, including retargeting, personalised, or interest-based advertising.
  • We do not allow humans to read Google user data, except (a) with the user's explicit consent for specific data, (b) when necessary for security purposes (such as investigating abuse), (c) to comply with applicable law, or (d) where the data has been aggregated and anonymised in a way that cannot identify any individual user.
  • We do not use Google user data to develop, improve, or train generalised AI and/or ML models. The HTDemucs audio separation model used by this service is a pre-trained, publicly-available model from Facebook Research and is never fine-tuned on user audio.

5. Third-Party Services

  • Google OAuth: For sign-in. Governed by Google's Privacy Policy. Scopes requested: userinfo.email, userinfo.profile.
  • Google Drive: Stems are uploaded to your personal Drive. Scope requested: https://www.googleapis.com/auth/drive.file — per-file access only. We can read and write only the files our app creates; we cannot see or modify any other file in your Drive.
  • Paystack: Payment processing for Ghana and Nigeria. Governed by Paystack's Privacy Policy.
  • Google AdSense: Advertising platform. May use cookies to show personalised ads. You can opt out via Google's ad settings.
  • Cloud processing infrastructure: Audio is sent to a third-party compute provider for separation and is not retained there.

6. Data Retention

  • Uploaded audio: Automatically deleted from our servers within 24 hours of upload.
  • Separated stems: Automatically deleted from our servers after 7 days. The copy saved to your Google Drive is not affected. You control that file directly.
  • Account data: Retained until you request deletion.
  • Job history metadata: Retained until you request deletion (so you can find past songs in your dashboard).

7. Your Rights

You can permanently delete your account and all associated data by calling DELETE /api/user/me while signed in (a UI button is on the roadmap). This revokes our Google access, wipes every audio file and stem we store, and removes your account record. Files already saved to your Google Drive remain in your Drive. You can remove those from drive.google.com.

You may also email privacy@stemsplits.com for access, correction, or deletion requests. We respond within 30 days.

8. Cookies

We use:

  • Session cookie: An opaque random identifier (sid) that maps to a server-side session record. Essential for the Service.
  • Advertising cookies (AdSense): Only set if you click "Accept" on our cookie banner.

You can withdraw consent for advertising cookies at any time by clearing your browser cookies.

9. Security

We use HTTPS for all data in transit. Session cookies are HttpOnly with SameSite=Lax, and the session identifier itself is opaque — session contents live server-side in Redis. Payment data is never stored on our servers; only Paystack handles card information. OAuth refresh tokens are encrypted at rest using Fernet symmetric encryption.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us personal data, contact privacy@stemsplits.com and we will delete the data.

11. International Users

For users in the European Economic Area, United Kingdom, or Switzerland, Emmanuel Ansah is the data controller. The legal bases for processing are: your consent (Google sign-in, AdSense cookies), performance of a contract (delivering separated stems), and our legitimate interests (fraud prevention, service security). You may have rights of access, rectification, erasure, restriction, and portability under your local law.

12. Changes to This Policy

We may update this Privacy Policy. We will notify you of material changes by posting a notice on the site. Continued use of the Service after changes constitutes acceptance.

13. Contact

Questions? Email us at privacy@stemsplits.com