Privacy Policy

SunoBoard is operated by YellowKode Academy (Kelvin Biffi) in partnership with Wunka Tech. We provide a visual dashboard to help independent creators generate, organize, and manage AI-generated music for use in their own projects, including content creation, game soundtracks, podcast intros, and automated workflows.

Contact: ola@sunoboard.com

We collect only what is necessary to provide the service:

• Google account data: name, email address, and profile picture, collected via Google OAuth when you sign in.
• Suno API key: if you provide one, it is stored encrypted using AES-256 and is never exposed in plain text.
• Music generations: metadata about the songs you generate (title, prompt, status, audio URL) so we can display your history.
• Stripe billing data: if you subscribe to SunoBoard Pro, payment processing is handled entirely by Stripe. We do not store credit card numbers.
• Usage & analytics data: pages visited, referrer, device and browser type, and anonymized interaction data (including aggregated click and session-replay data). This is collected through the analytics services listed below and used only to improve the product and measure our marketing.

• To authenticate you via Google OAuth and issue secure JWT tokens.
• To send your music generation requests to the sunoapi.org API on your behalf.
• To display your generation history and organize your projects in the dashboard.
• To manage your SunoBoard Pro subscription via Stripe.
• To understand how the product is used, improve the experience, and measure our marketing — through the privacy-focused analytics and advertising services described below.

We do not sell or rent your personal data. We do use third-party analytics and advertising services that process usage data (such as pages visited and interactions) to help us improve SunoBoard and measure our campaigns.

SunoBoard integrates with the following third-party services:

• sunoapi.org: third-party API proxy for AI music generation. Your prompts are sent to this service. Review their privacy policy separately.
• Google OAuth: used for authentication only. We request minimal scopes (email, profile).
• Stripe: handles payment processing for Pro subscriptions. Stripe is PCI DSS compliant.
• Google Analytics 4: measures traffic and product usage (pages, sources, conversions) in aggregate. See Google's privacy policy.
• Microsoft Clarity: captures aggregated, anonymized behavior data such as heatmaps and session replays to help us find and fix usability issues. Sensitive content is masked by default.
• Google Ads & Google Search Console: used to measure our marketing campaigns and search performance.

You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on, and control ad personalization in your Google Ad Settings.

Your data is stored for as long as your account is active. You may request deletion of your account and all associated data at any time by emailing ola@sunoboard.com. Deletion is processed within 30 days.

Suno API keys are stored encrypted with AES-256-CBC. All traffic is transmitted over HTTPS. JWT tokens expire after 15 minutes and are refreshed using secure rotation. We do not log sensitive credentials.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and data.
• Withdraw consent at any time by stopping use of the platform.

We may update this Privacy Policy from time to time. We will notify users of significant changes via the email associated with your account. Continued use of SunoBoard after changes constitutes acceptance of the updated policy.