Privacy Policy

Published version: privacy-2026-10-02-v2 · Effective when posted

This policy covers information processed by Zampini LLC for Zampini’s Studio at zampinismusic.com and related event services. Version privacy-2026-10-02-v2 applies from publication. Contact: Zampini LLC, Attn: Privacy, 14977 Topgallant St., Corpus Christi, TX 78418.

Information involved in using the service

Depending on the features you use, we receive your nickname, event or request identifier, theme, music selections, generated content, and support communications. Optional features involve microphone recordings, verification recordings, uploaded images, saved voice samples, and derived voice representations used to create requested media. You can use available standard voice options without submitting your own voice or photo.

Our app and infrastructure providers may also process IP addresses, browser and device information, timestamps, error records, and session identifiers needed to deliver and secure the service. Payment providers process payment details and transaction information; we receive information needed to identify purchases, confirm payment status, and handle refunds. Do not put financial, medical, or other sensitive personal details into a song theme or recording prompt.

Purposes and recipients

We process information to generate requested content, associate it with the right event, review and play it, provide selected storage or delivery features, collect payments, handle support, prevent abuse, and meet legal obligations. Authorized DJs can access the information and generated media needed to manage their event. Your nickname, theme, lyrics, generated voice, or visual likeness may be heard or seen by attendees when used in event content. Event participation should not be treated as a private communication.

Necessary information is processed by providers of hosting, databases, media storage, music or video generation, payment processing, and operational support. Information may be processed in the United States or other locations where those providers operate. A provider may have separate legal obligations or applicable terms. We remain responsible for disclosures and processing for which the law makes us responsible. We may also disclose information where lawfully required, to respond to legal claims or protect rights, or as part of a business transfer with legally required safeguards and notice.

Voice and image information

Before recording or uploading your voice or likeness, we request separate permission that explains the purpose. AI voice processing may create a voice representation; whether particular processing creates a legally regulated voiceprint or other biometric identifier depends on the technology and law. Biometric collection, use, and disclosure remain subject to applicable legal restrictions even when a user consents.

A saved voice sample is for your later requests only if you choose that feature. Permission to create one song is not permission to create unrelated songs, enroll you in advertising, or make your voice available to other guests. Promotional use requires a separate optional release.

Storage and deletion

We retain information only as reasonably needed for the purposes described here, including delivering requests, operating selected saved features, resolving complaints, and keeping legally required records. The relevant period depends on the information, whether you selected continued storage, pending transactions or disputes, legal requirements, and applicable provider retention obligations. We review whether continued retention is necessary; an archive is not a promise of permanent storage.

When a source recording or voice representation is no longer needed for its authorized purpose, we arrange deletion within a reasonable time and any applicable legal deadline. Where Texas biometric law applies, covered identifiers must be destroyed within a reasonable time and no later than one year after the collection purpose expires, unless a statutory exception applies. Selecting optional saved storage does not permit indefinite retention after that purpose ends. Completed media, transaction records, and consent records are assessed separately; keeping a completed song alone does not justify keeping the source voice representation.

You may request deletion or withdraw optional voice, image, storage, or marketing permission by writing to our Privacy contact with enough information to locate your request. We may need proportionate verification; do not send sensitive identity documents unsolicited. Withdrawal stops future uses covered by that permission after we can reasonably act. It does not undo completed public playback. We will address provider-held copies and backups consistent with our obligations; technical limitations do not override legal deletion deadlines.

Your choices and requests

You may ask about your information, request access, correction, deletion, or a portable copy where applicable, and withdraw optional permission. Depending on your location and the law’s applicability, you may also have rights to opt out of data sales, targeted advertising, or certain profiling. We will honor applicable rights and legally required preference signals. We do not sell or lease voiceprints or other biometric identifiers. These terms do not authorize selling your personal information or using it for targeted advertising.

Send requests to the Privacy address above, or give a written request to the on-site Zampini LLC operator for forwarding. Include a return address or email and your event or request details. We respond within applicable legal deadlines. Where the Texas Data Privacy and Security Act applies, we respond within 45 days, with a further 45 days when legally permitted and after timely notice. You may appeal a denial through the same contact by identifying it as a privacy appeal; where that Act applies, we respond within 60 days. If an appeal is denied, we explain available complaint options, including the Texas Attorney General at texasattorneygeneral.gov. We do not penalize you for exercising a protected right.

Device storage and security

Browser storage and similar technologies may maintain your session and remember selections. Clearing browser data can remove locally saved settings or access information. Device microphone and camera permissions can be revoked in your device settings, but revoking device permission does not itself delete information previously submitted. Optional tracking requiring consent must not operate without that consent.

We use reasonable safeguards appropriate to the information processed. No internet service can promise absolute security. Protect your device and access codes, and report suspected misuse promptly. We handle security incidents and required notifications under applicable law.

Children and policy changes

The service is for adults age 18 and older. Do not submit a child’s personal information, voice, or photo. If you believe a child’s information was collected, contact us so we can investigate and take appropriate action. We will post changes to this policy and provide additional notice or obtain new consent when required. A policy update does not retroactively authorize an incompatible use of previously collected information.

Current providers and voice storage

Our app currently uses the SunoAPI.org service: voice uploads go to sunoapiorg.redpandaai.co, and music and voice-processing requests go to api.sunoapi.org. Lyrics may be processed by xAI. Vercel hosts the app, Neon provides the deployed database, and Stripe processes checkout payments. We send each provider information needed for its feature. In the separate private owner test lab, ElevenLabs processes voice conversion and HeyGen processes optional selfie animation. That lab identifies the selected provider before upload. ElevenLabs clone deletion is attempted after conversion; pending cleanup is shown to the operator. HeyGen assets require removal from the provider account.

Device storage and saved access are separate from provider storage. Temporary sample and verification recordings expire for use in this browser after 12 hours. If you choose the optional saved-voice feature, the original sample is saved for reuse for up to one year; a browser token links to a server-side access record that expires after one year. The app attempts to remove temporary recordings when it detects that the song has finished. Expired browser copies are removed when the feature next reads or cleans that storage, so data may remain on an inactive device longer. Clearing this site’s browser data removes device-held copies and access information, but does not request deletion from providers.

We have not confirmed deletion timing for all provider-held original voice samples, verification recordings, or derived voice data, or the upstream providers’ training practices. A provider Voice ID becoming unavailable is not proof that the underlying data were erased.

Removing saved voice access revokes reuse through that access in our app and attempts to remove the saved sample from this browser. It also records a request for our operator to follow up with the provider. The provider has not supplied a dedicated early per-item deletion endpoint. A request recorded in our app is not confirmation of provider deletion. You may also contact the on-site operator or our Privacy contact with your request reference. We remain responsible for meeting applicable privacy obligations and deletion deadlines.

You can also give a written deletion request to the on-site operator or use the mailing address above. Include your song or voice request reference, if available. Completed songs and records necessary to resolve the request are handled separately. We do not treat this disclosure or your consent as a waiver of legally required deletion or restrictions on biometric disclosure.