Privacy Policy

1. Who We Are

TAK Ventures LLC ("Company", "we", "us") operates CornyBot (cornybot.com) and TAKTARI (taktari.com). This Privacy Policy explains how we collect, use, and protect your information when you use our services.

2. Information We Collect

Information you provide

Data	Purpose	Retention
Email address	Account creation, login, notifications	Until account deletion
Payment information	Processed by Stripe (we never see your card number)	Managed by Stripe
Verses and lyrics	Verse generation, song library	Until you delete them
Audio uploads	Voice model training (with consent)	Until you delete or revoke consent
Feedback and ratings	Improve AI quality	Aggregated, anonymized

Information collected automatically

Data	Purpose	Retention
Usage events (page views, actions)	Service improvement, volume tracking	90 days
IP address	Security, abuse prevention	30 days
Browser/device info	Compatibility, debugging	30 days
API token usage	Budget tracking, billing	12 months

3. How We Use Your Information

• Provide and improve the Service
• Process payments and enforce volume limits
• Send account-related notifications (not marketing, unless opted in)
• Detect and prevent abuse, fraud, and security incidents
• Aggregate anonymous usage data for platform improvement
• Generate R&D insights (aggregated, never individual)

4. What We Do NOT Do

• We do not sell your personal data
• We do not share your verses, lyrics, or audio with third parties
• We do not use your content to train our AI models without explicit consent
• We do not serve targeted advertising to you based on your personal content (see Section 5a for advertising tools we operate on behalf of artist clients)
• We do not track you across other websites for our own marketing

5. Third-Party Services

Service	Purpose	Data Shared
Stripe	Payment processing	Email, payment method (card/bank)
Cloudflare	CDN, security, hosting	IP address, request metadata
Turso (libSQL)	Database hosting	All service data (encrypted in transit)
Anthropic (Claude)	AI verse generation	Verse prompts (no personal identifiers)
Microsoft (Edge-TTS)	Text-to-speech audio	Verse text for audio synthesis
Spotify	Track metadata import	Spotify track URLs (public data only)
Meta Platforms (Facebook/Instagram)	Advertising-campaign management on behalf of artist clients	Ad account IDs, campaign insights, ad spend/balance (via Meta Marketing API — see Section 5a)
TikTok	Advertising-campaign management on behalf of artist clients	Ad account IDs, campaign insights (via TikTok Marketing API)

5a. Advertising Platform Data (Meta & TikTok)

TAKTARI is an agentic music-marketing platform. When a user (typically an artist or their manager) chooses to connect their own Meta (Facebook/Instagram) or TikTok advertising account, we access advertising data on that user's behalf and with their explicit authorization through each platform's official Marketing API.

What we access

Using the Meta permissions ads_read, read_insights, and business_management (and equivalent TikTok scopes), we read:

• Ad account identifiers, names, and status
• Campaign, ad set, and ad structure and settings
• Performance insights (reach, impressions, clicks, spend, results)
• Account balance and billing status (read-only, for budget reporting)

How we use it

• To display the connecting user's own campaigns, spend, and results inside their TAKTARI dashboard
• To compute promotional-effort and return-on-spend analytics for that user's own marketing
• To generate AI-assisted campaign recommendations for that user

What we do NOT do with advertising data

• We do not sell, rent, or transfer advertising data to third parties
• We do not use one client's advertising data to benefit another client
• We do not use advertising data to train AI models
• We do not access advertising accounts you have not explicitly connected

Storage and revocation

Access tokens are encrypted at rest and used only to fetch the data described above. You may disconnect a connected advertising account at any time from your TAKTARI dashboard, or by removing TAKTARI's access in your Meta Business Settings / TikTok account settings. On disconnection we stop all further access and delete the stored token. Use of Meta data complies with the Meta Platform Terms and Developer Policies.

6. Voice Data and Consent

Voice model training requires explicit written consent from the voice owner before any audio is processed. Voice training data is:

• Stored securely and encrypted at rest
• Used only for the consented purpose (model training)
• Deletable at any time upon request
• Never shared with third parties

We comply with the Tennessee ELVIS Act (2024), California AB 1836 (2025), and applicable right-of-publicity laws.

7. Data Security

We protect your data with:

• HTTPS/TLS encryption for all data in transit
• HMAC-SHA256 webhook verification
• SHA-256 hashed API keys (we never store plaintext keys)
• SQL injection prevention via parameterized queries
• XSS prevention on all user-supplied content
• CORS origin validation

8. Your Rights

You have the right to:

• Access your data — contact support@taktari.com for a data export
• Delete your data — request account deletion and we'll purge within 30 days
• Correct your data — update your profile or contact us
• Revoke consent — withdraw voice training or data processing consent at any time
• Data portability — export your verses, songs, and audio in standard formats

For GDPR (EU), CCPA (California), and similar regional privacy laws: we honor all applicable data subject rights. Contact privacy@taktari.com.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

10. Data Retention

We retain your data only as long as your account is active or as needed to provide the Service. After account deletion, personal data is purged within 30 days. Aggregated, anonymized data may be retained indefinitely for research and platform improvement.

11. Changes to This Policy

We may update this Privacy Policy with 30 days notice via email or in-app notification. The "last updated" date at the top reflects the most recent revision.

12. Contact

TAK Ventures LLC
Wyoming, USA
privacy@taktari.com
For legal matters: legal@taktari.com