Privacy Policy

Who is responsible

HeeyDJ is operated by WP Media LLC. WP Media LLC is the controller of your personal data.

Registered address: will be published here before public launch. Place of formation: will be published here before public launch.

Use the Contact page (heeydj → Contact) or Account → Privacy. Public email addresses will be listed on the Contact page.

What we process

Account and contact data: email address, display name, sign-in and security records.

Transaction data: credit balance, holds, purchases and plan status. Card details are handled by our payment processor; we do not store card numbers.

Music you upload: audio files and their analysis (tempo, key, energy) used to mix your sets.

Face-reference photos: only if you create a DJ that looks like you. See the Face & AI Data Notice.

Prompts and creative directions you write, and optional venue photos you upload.

Generated images and videos, saved sets and recordings.

Device and security data: browser type, approximate technical logs and fraud-prevention signals.

Consent records: which statements you accepted, the version and the time.

Analytics: anonymous product usage, only if you allow it in the cookie banner.

Why we process it and our lawful bases

To provide the service you asked for (contract): accounts, mixing, DJ creation, credits and support.

Facial images: your explicit consent, which you can withdraw at any time.

Payments, tax and accounting records: legal obligation.

Security, fraud and abuse prevention, and enforcing our policies: legitimate interests.

Optional analytics: your consent.

Who receives data

Lovable (hosting, database, private file storage and server functions).

Google (Gemini API): creates DJ photos. For a DJ that looks like you it receives your Face Profile photos; for your own venue it receives your venue photos; it also processes text when you use “Improve with AI”.

Runway: creates DJ photos for HeeyDJ-world fictional DJs and makes every performance video from the photo you chose.

An AI review model reached through Lovable's AI gateway may check generated images for quality and safety.

Stripe: payment processing.

We do not sell personal data, and we never sell face data.

International transfers

Some providers process data outside the EU/EEA or UK, including in the United States. Where required we rely on recognised safeguards such as Standard Contractual Clauses or adequacy decisions. You can ask us for details.

How long we keep data

Account data: while your account exists, then deleted except records we must keep.

Payment and ledger records: as long as tax and accounting law requires.

Face-reference photos, venue photos and generated media: see the Face & AI Data Notice; you can delete them in Account → Privacy.

Saved sets and recordings: until you delete them or your account.

Security and audit logs: only as long as needed for security and to handle disputes.

Your rights (GDPR and UK GDPR)

You can ask to access, correct, delete, restrict or port your data, and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time without affecting earlier processing. Most controls are in Account → Privacy.

You can complain to your local data-protection supervisory authority.

Adults only

HeeyDJ is for people aged 18 or over. We do not knowingly process data of anyone younger.

Security

We use access controls, private storage, encryption in transit and audit logs. No online service can guarantee absolute security.

Changes

We will show the date of the latest version on this page and tell you about important changes before they apply.