Privacy Policy

1. Who looks after your data

MOYS (Master Of Your Sound) is the data controller for your personal data. You can reach us through the channels under "Contact us" at the end of this page.

2. What we collect

• From the Google account you sign in with: your name, email address and profile picture. We never see your Google password.
• The display name and username (@username) you choose.
• Sign-in data: IP address, browser and device type, and when you accepted the terms, recorded when you sign in.
• The audio files you upload and the masters we create.
• Your history: file names, chosen style and loudness, check reports and when each job ran.
• Your credit balance.
• When you buy credits: the pack, the amount, the time of payment and Stripe's reference for the payment (Stripe is our payment provider). You enter card numbers and bank details on Stripe's own payment page: we never receive or store them.
• If you contact us by email, or messaged us on LINE in the past: your display name, our conversation, and proof of payment if you bought credits by bank transfer (account name, bank, amount and time of transfer).
• If you rate the sound or report a problem on the site: the stars, the message you write, the page you sent it from, and your browser and device type. Sent without signing in, we do not know whose it is unless you write your contact details in the message yourself. To stop floods of messages, we keep a hash of that sender's IP address to count how many they send, not the address itself, and delete the hash in the daily cleanup.
• Technical web logs recorded automatically, such as IP address, pages visited and time.

We do not store card details, and we do not collect sensitive data such as religion, health or biometric data.

3. How we use your data

We use your data only as needed, on the legal basis shown in brackets:

• Creating your account and signing you in (necessary to provide the service under our contract)
• Mastering your songs, creating reports and keeping files for download (necessary to provide the service under our contract)
• Counting and adding credits, taking payments and making refunds (necessary to provide the service under our contract, and for our duties under tax and accounting law)
• Answering questions and fixing problems you report (necessary to provide the service under our contract)
• Reading the ratings and messages you send on the site, to fix problems and improve the service (legitimate interests)
• Preventing fraud and repeat free-credit sign-ups, and keeping the system secure (legitimate interests)
• Looking at overall usage, such as songs per day and success rates, to improve the service (legitimate interests)
• Sending emails with MOYS news, such as new pages or features, to your sign-in email, starting on 20 October 2026. You can unsubscribe at any time with the link at the end of every email (legitimate interests)

We only use your music to master it for you and never publish it. We do not give your data to anyone for advertising, and our news emails are only about MOYS, with no one else's adverts.

4. Cookies

This site uses only cookies (small files a website stores in your browser) that it needs to work, so no consent is required. We do not use advertising cookies or cookies that track you across other sites.

• Sign-in cookie: remembers that you are signed in; removed when you sign out or it expires
• Language cookie: remembers your chosen language for 1 year
• Browser storage: the style and loudness you last picked, kept only on your device

5. Who we share data with

We do not sell your data. We share it only with the providers MOYS needs to run, who use it only on our instructions:

• Vercel: website hosting, audio processing and file storage
• Neon: database and sign-in system
• Google: confirms your identity when you sign in with Google, under Google's own privacy policy
• Stripe: takes payments for credits and makes refunds. When you buy credits, Stripe receives your email, the amount and the payment details you enter on its payment page (such as card details), and also uses them under Stripe's own privacy policy, for example to prevent fraud
• Resend: sends MOYS news emails. It receives only your email address, and records whether each email was delivered and whether you have unsubscribed

We may disclose data when the law requires it, for example under a court order or a request from an authority with legal power.

6. International transfers

Your account, history, audio files, and the ratings and messages you send on the site are stored in Neon and Vercel data centres in Singapore. Both are US companies. Sending data to be stored there is necessary to provide the service you ask for, and both providers protect data to international standards.

The email address we send news to goes to Resend, a US company that processes data in the United States. Resend has a data protection agreement with us that meets international standards.

When you buy credits, the payment details go to Stripe, a group of companies from the United States that may process data in the United States and other countries. This transfer is necessary to take the payment you ask for, and Stripe protects data to international standards.

7. How long we keep data

• Original audio files: deleted as soon as mastering finishes, or within 1 day if mastering fails
• Master files and listening copies (small MP3s of the song before and after mastering, for listening and comparing): deleted after 7 days
• Songs you delete from History yourself: the master files, the listening copies and the file name are deleted right away. The style, the loudness level, whether it succeeded, the figures of the check report and the time are kept without the file name, to see overall usage, until you delete your account
• Account, credits and history: kept until you delete your account
• Ratings and problem reports sent on the site: kept until you delete your account. Sent without signing in, they are kept until you ask us to delete them through "Contact us".
• After you delete your account: only a one-way hash of your email (not the email itself) is kept, so the same email cannot get free credits again
• Your email address on the news list at Resend: kept until you delete your account. If you unsubscribe, it stays on the list marked as unsubscribed, so that no more emails are sent to you
• Database backups: overwritten automatically within 30 days
• Technical web logs: up to 30 days
• The list of credit purchases in our system: deleted with your account. Proof of payments and refunds is held by Stripe and kept for as long as tax and accounting law requires, even after you delete your account

8. Security

• Audio files are stored privately. Download links are created fresh each time and expire after 1 hour.
• Your songs are private until you switch on "Let friends hear this song" yourself. From then on, anyone with that song’s link can play its listening copies without signing in, until you switch it off (someone who has the song open may keep listening for up to 15 minutes) or the files are deleted. Only you can download the WAV files.
• All data is sent over an encrypted connection (HTTPS).
• Only MOYS administrators can access account data, and only as needed to run the service.
• If a data breach puts you at risk, we will notify the Office of the Personal Data Protection Committee within 72 hours and tell you without delay.

9. Your rights

Under the PDPA you have the right to:

• See and get a copy of your data
• Receive your data in a common file format, or have it sent to another provider
• Correct data that is wrong
• Have your data deleted, which you can do yourself right away with the "Delete account" button on the Settings page
• Object to, or ask us to restrict, some uses of your data
• Stop receiving our news emails at any time, with the link at the end of every email or through the channels under "Contact us"
• Complain to the Office of the Personal Data Protection Committee (PDPC) at www.pdpc.or.th

Send requests through the channels under "Contact us". We may ask you to confirm you own the account, for example by writing from your sign-in email. We handle requests within 30 days, free of charge.

10. Minors

If you are under 20, you need a parent's or guardian's consent before using the service. If we find an account belonging to a child under 10 without a parent's or guardian's consent, we will delete it.

11. Changes to this policy

We may update this policy when the service or the law changes. The date at the top shows the latest change. For important changes we will give at least 7 days' notice on the website.

Changed on 12 October 2026: added MOYS news emails and the provider Resend. We will start sending news emails on 20 October 2026.

Changed on 13 October 2026: credits are now bought on the website through Stripe instead of by messaging us on LINE, so Stripe is added as our payment provider and LINE is removed from the ways to contact us.