Privacy, plainly
Effective 2026-09-16 · applies to dugatto.com and the Dugatto apps
What Dugatto is
Dugatto is a workshop for making AI music: you note song ideas in an Idea Notebook, turn them into ready-to-use style text and lyrics, generate the audio — right in Dugatto (a beta feature) or on a separate AI music platform — then master it, organize your catalog, and keep a provenance record of how each song was made. This policy covers the website at dugatto.com and the Dugatto apps, which are the same service. Dugatto is operated by Live Wire Labs LLC, 3916 N Potsdam Ave #21, Sioux Falls, SD 57104, USA, the company responsible for the personal data described here.
What we collect
Your account (email, name, and a hashed password — we can never read the password itself); technical details your browser sends — your IP address, browser and device type, and the rough location an IP address implies — which we keep with your sign-in sessions for security and abuse prevention, and which our bot-protection and measurement providers also receive; the content you create: notes, songs, analyses, styles, lyrics, drafts, catalog records, and audio — files you upload for mastering or attach to a song, and songs Dugatto generates or masters for you; details you add about other people involved in your music — co-writers' and credited artists' names, rights-organization IDs and ownership shares, licensees, and documents you attach — which you should add only if you're allowed to share them with us; the release identity you choose to enter (such as a legal name or rights-organization IDs for release metadata — optional, only if you fill it in); and basic usage records (like how many songs you've made this month) that run quotas and prevent abuse. Payments are handled by our payment processor; we never see or store card details, only a reference to your customer record there, your plan and its billing cadence and renewal date. For your purchase that processor is the merchant of record: it collects your billing name and address itself, to charge you and work out tax, and handles refunds and disputes under its own privacy policy. If you send feedback from inside the app, the report carries your message, your account email and plan, the page you were on (its address, heading and open tabs), your browser and screen size, and your last few actions in the app — what you clicked, and any errors or failed requests — and it's kept in our support inbox.
One thing is deliberately not private: the reference-song analyses. These describe publicly released music — genre, tempo, instrumentation — and not you, so they go into a shared catalog that every Dugatto user can search and build from.
Your notes, songs, styles, lyrics, drafts and audio are private to you unless you turn on a song's share link: then anyone with the link can see that song's title, style text, lyrics and cover and play its audio, until you turn sharing off.
How we use it
To run the service — and, only if you sign up for it, to send you product news. When you generate or revise something, the material that job needs — song titles, artist names, your notes, and the style or lyric text being worked on — is sent to our AI providers to produce the result, and audio you upload is processed to master or analyze it. Generating audio sends your style text and lyrics to the outside provider that runs the music model. We use that provider's paid service, so it doesn't use your prompts or the results to train or improve its models; it may keep what we send for a limited time (up to 55 days) to detect abuse of its service, and its authorized staff can review flagged material for that purpose. Our other AI providers may likewise hold what we send briefly for abuse detection, under their own terms. None of our AI providers train on what we send.Your account details are never included.
We email you about your account (verification, password resets, email changes) and, once, a couple of days after you sign up, a reminder to make your first song if you haven't; reply to that one and we won't email you like that again. If you join our mailing list on the website, we keep your email address — and, as proof of consent, the time, IP address and browser of the sign-up — to send you product news until you unsubscribe, using the link in any of those emails or by writing to [email protected]. The list is run for us by an email provider, and we never add account holders to it without asking.
We don't sell data or run ads. Cookies and similar browser storage keep you signed in, filter out bots, keep your drafts on your device, and support the measurement described below.
Cookies and browser storage
Signing in sets a cookie that keeps you signed in for up to 7 days after your last visit, plus a short-lived copy that saves a trip to our database. Our hosting network may set a security cookie that filters out bots; it expires after 30 minutes of inactivity. The app keeps your unsaved drafts, recent choices and the ID of the signed-in account in your browser's local storage, on your device. Measurement stores a random ID in a cookie and in local storage for up to a year so visits can be counted over time. If you're in the EU, EEA, UK or Switzerland, measurement starts only if you agree; anyone can switch it off by declining the prompt, and we switch it off automatically when your browser sends Global Privacy Control or Do Not Track.
What we measure
We measure two things about our own service, and we run no advertising trackers. One tool records which pages are visited and which buttons and features get used, so we can tell what's working; while you're signed in, that activity is tied to your account ID, never your email or name. The same tool keeps a record of each AI job — what was sent to our AI providers and what came back, including your notes, style text and lyrics — so we can find out why a result went wrong and make results better. That record is tied to your account ID, kept for up to 30 days, and erased with your account.Another records errors, crashes, and how long a sample of pages and requests take, so we can fix problems and slowness. Both are operated for us by outside providers under their own privacy terms. We don't sell your data, we don't run ads, and we don't allow advertising or ad-network trackers on the site.
Third-party services
Parts of the service are delivered by outside providers working on our behalf, each under contract and its own privacy terms, and each handling only what its part of the job requires: payment processing; a bot-protection check on the sign-in and sign-up pages; delivery of service email such as account verification; hosting for our application, database and files; a web search service that runs the searches behind song research, plus public music databases and a video site's search, which we query for release details and playback links (they receive the song and artist names, not who you are); a breached-password check that receives only a short fragment of a scrambled form of a new password, never the password; the measurement and error tools described above; and the AI providers that run the models producing your style text, lyrics, artwork and audio. Our payment and bot-protection providers also use some of that data for their own security and fraud prevention, under their own privacy policies. Playing a reference video inside the app also loads an embedded player from a third-party video site, which may set its own cookies.
Where it lives
Your account and everything you make are held on managed cloud infrastructure run for us by established providers, in the United States. Connections to Dugatto are encrypted, data is encrypted at rest, our internal services talk over a private network, and the database is backed up nightly, with backups kept for up to 30 days. Access is limited to the people who operate the service. If you use Dugatto from outside the United States, your data is processed in the United States. Providers that handle it for us do so under data processing agreements where required.
We keep your content for as long as your account is open, with one exception: a master saved on a paid plan is removed 30 days after that plan lapses (see the Terms). When you delete your account we lock it straight away, and schedule it for erasure after a 30-day grace period; copies in backups age out within 30 days after that. Usage records that run quotas and prevent abuse, and the history of your generations, are kept while your account is open. Sign-in sessions end after 7 days without a visit. Error reports are kept for up to 90 days and measurement data for up to 12 months.
Children
Dugatto is only for people 18 and over, and we don't knowingly collect personal data from anyone younger. If you think a child has an account, email [email protected] and we'll delete it.
Your rights
Wherever you live, you can ask us for a copy of your personal data, to correct it, to delete it, or to stop a particular use of it: email [email protected] from your account address and we'll respond within 30 days, and we won't treat you differently for asking. We don't sell personal data or share it for cross-context behavioral advertising.
If you're in the EU, EEA, UK or Switzerland: we process your data to perform our contract with you (running your account and making what you ask for), for our legitimate interests in securing, measuring and fixing the service, and with your consent where the law requires it, which you can withdraw at any time; you can object to processing based on legitimate interests, and you can complain to your local data protection authority.
You can edit or delete your songs, lyrics, and drafts in the app at any time. To erase your whole account, use Delete account on the Account page — it signs you out and removes everything after a 30-day grace period, during which you can email [email protected] to recover it. Payment records stay with our payment processor, as their own law requires, and measurement and error records tied to your account ID are kept only for the periods above.
If this policy changes in a way that matters, we'll note it here and update the date above.