Privacy Policy

Vocal Pockets Privacy Policy

Last Updated: August 18, 2026

This Privacy Policy describes how Vocal Pockets, LLC (“Vocal Pockets,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information in connection with the Platform (as defined in our Terms of Use), including our websites, online store and related Services, and our Software products such as VIPA.

Capitalized terms used but not defined here have the meanings given in the Vocal Pockets Terms of Use (the “Terms”), currently accessible at vocalpockets.com/pages/terms-of-use.

By accessing or using the Platform, you acknowledge the practices described in this Privacy Policy. If you do not agree, do not use the Platform.

Table of Contents

1. Scope and Roles

1.1 Scope

This Privacy Policy applies to personal information we process in connection with:

  • the Services, including vocalpockets.com and related online pages;
  • Software, including VIPA and other plugin or application products we make available (including beta, early access, preview, or similar releases);
  • accounts, Subscriptions, purchases, credits, support, and communications; and
  • related marketing, analytics, security, and business operations.

1.2 Controller

Vocal Pockets, LLC is the controller of personal information described in this Privacy Policy, unless we tell you otherwise at the time of collection. Contact details appear in Section 14.

1.3 Global use

The Platform may be used from outside the United States. If you use the Platform from another country, your information may be processed in the United States and other countries as described in Section 10. We do not represent that the Platform is available or appropriate in every jurisdiction.

1.4 Relationship to other documents

This Privacy Policy is incorporated into the Terms. Additional product details appear in the Plugin Supplemental Agreement, applicable Product Schedules (including Schedule A — VIPA), the Credit Policy, Refund Policy, Acceptable Use Policy, Cookie Policy, and other Policies. If there is a conflict regarding privacy or data-protection matters, this Privacy Policy controls as stated in the Terms.

1.5 Feature and regional variation

Available features, data flows, and service providers may vary by product version, Subscription plan, beta or preview status, device/platform, or jurisdiction. Some features may be unavailable in certain regions.

2. Personal Information We Collect

“Personal information” (also called “personal data” under some laws) means information that identifies, relates to, describes, or could reasonably be linked to an individual or household. What we collect depends on how you use the Platform.

2.1 Information you provide

  • Contact data: name, email address, mailing address, phone number, professional title, and company name.
  • Account and authentication data: account identifiers, login credentials, and authentication information (including one-time passcodes).
  • Profile and preference data: preferences, settings, and communication preferences.
  • Purchase and billing-related data: order history, Subscription plan, trial or promotional status, entitlement status, credit balances and usage, and transaction metadata. Payment card data is processed by our payment processors; Vocal Pockets does not store full payment card numbers.
  • Communications: information you provide in support requests, feedback, surveys, or other correspondence.
  • Marketing data: contact details and preferences for marketing communications.
  • User Content: reviews, comments, testimonials, and other content you affirmatively post through the Services.
  • Referral data: contact information for people you refer, only if you have permission to provide it.
  • Other information you choose to provide, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

2.2 Information from Software (including VIPA)

(a) Required service, licensing, and metering data

When you install or use Software, we may process:

  • account identifiers and authentication tokens used to verify entitlement;
  • device and license data, including a hashed or otherwise pseudonymous device identifier, device lease/activation status, and device label metadata (which may include plugin version, operating system, and DAW host name);
  • connectivity and entitlement verification data (for example, heartbeat or similar checks used to refresh Subscription status and synchronize entitlements);
  • credit and usage metering data, including that a credit-consuming or AI-assisted feature occurred; feature/session type; integer counts of delivered outputs (for example, number of chord pads returned); image/pack identifiers; generation mode; sanitized tags you select; and related request/credit reference identifiers;
  • Subscription and commerce lifecycle metadata (for example, activation, renewal, cancellation, pause/resume, and pack entitlement events); and
  • limited acquisition attribution data associated with checkout (for example, UTM parameters and landing page), used primarily in aggregate.

Required service, licensing, and metering data is collected to operate the Platform. It is not controlled by the optional product-analytics setting described below.

(b) AI and cloud-feature inputs

When you use AI-assisted or other cloud-dependent features, we may process the inputs needed for that feature, as described in Section 4.

(c) Optional product analytics

If you opt in through Software Settings (for example, a “Help improve VIPA” control), we may collect product-interaction events such as image browse/favorite/save activity, whether a saved item was AI-generated, generation feedback/likes, and similar improvement signals. Optional product analytics are separate from required service/metering data and from marketing communications preferences.

(d) Diagnostic and crash data

Where diagnostic or crash reporting is enabled, we may collect limited technical diagnostics such as plugin version, host DAW, operating system, session timing, UI context, image identifiers, status/credit signals, and limited recent technical event data needed to diagnose instability. Diagnostic reporting is separate from optional product analytics and, where offered, may be controlled in Settings.

(e) Locally stored information; on-device processing

Software may store settings, presets, favorites, downloaded image content, vibes/sessions, and locally created or edited musical content on your device. Musical works and MIDI you create generally remain under your control on your device unless you use a cloud, sync, backup, support, or AI feature that transmits data as described in this Privacy Policy.

Where Software offers local MIDI or audio analysis features (for example, drag-and-drop chord detection that runs on your device), those files are processed on-device for that feature and are not transmitted to our servers unless a specific feature expressly discloses that cloud transmission is required and you use that feature.

2.3 Information collected automatically on the Services

We and our service providers may automatically collect:

  • device and browser data (device/browser type, OS, IP address, screen resolution, referring URL, and approximate location derived from IP);
  • online activity data (pages viewed, navigation paths, timestamps, and interactions with the Services); and
  • cookies and similar technologies, as described in our Cookie Policy.

2.4 Information from other sources

We may receive information from:

  • commerce and subscription platforms (for example, Shopify and related billing apps);
  • authentication, hosting, database, analytics, support, operations, and AI providers;
  • business and advertising partners; and
  • public sources, where permitted.

2.5 Sensitive information

Unless we expressly request it, please do not submit special-category or sensitive personal information (for example, racial or ethnic origin, political opinions, religion, health, biometrics, genetics, criminal history, or trade-union membership) through the Platform.

3. How We Use Personal Information

We use personal information for the following purposes and as otherwise described in this Privacy Policy or at collection:

3.1 Provide and operate the Platform

  • create and maintain accounts and authenticate users;
  • process purchases, Subscriptions, trials, entitlements, and credits;
  • deliver, license, activate, update, and synchronize Software and content libraries (including visual content);
  • enforce device limits and prevent unauthorized access or abuse;
  • provide customer support and service communications (including announcements, security alerts, and administrative messages); and
  • operate AI-assisted, cloud-dependent, sync, diagnostic, and related Software features described in Section 4.

3.2 Improve and develop the Platform

  • analyze usage, reliability, and performance;
  • debug, secure, and maintain the Platform;
  • conduct research and development; and
  • create aggregated, de-identified, or anonymized data. We may use and disclose such data for lawful business purposes, including analytics and product improvement, provided it is not reasonably re-identifiable. If we create de-identified information, we will maintain and use it in de-identified form, except as permitted by law.

3.3 Marketing

We may send Vocal Pockets-related marketing communications where permitted by law, and may personalize, measure, and improve marketing. Marketing preferences are managed separately from optional Software product analytics (see Section 7). Where you provide feedback or make a purchase, we may use limited information (such as first name and city/region) to promote the Platform as described in the Terms.

3.4 Interest-based advertising

We may work with advertising and measurement partners that use cookies or similar technologies to collect information about activity on our Services and other sites over time and to help deliver ads. See Section 7 and our Cookie Policy. Certain of these activities may constitute a “sale” or “sharing” under California law; see Section 15.

3.5 Compliance, fraud prevention, and safety

We may process personal information as we believe necessary or appropriate to:

  • comply with law, lawful requests, and legal process;
  • protect rights, privacy, safety, or property;
  • audit internal processes;
  • enforce the Terms, Policies, Plugin Supplemental Agreement, Groove License, and this Privacy Policy; and
  • detect, investigate, and prevent fraud, abuse, security incidents, and other harmful or illegal activity.

3.6 Consent

Where required or appropriate, we rely on your consent for specific processing (including optional product analytics and certain cookies/advertising technologies). You may withdraw consent where applicable, without affecting the lawfulness of processing before withdrawal.

3.7 Compatible and related uses

We may also use personal information for purposes that are compatible with the purposes described in this Privacy Policy, including customer-support quality assurance, billing and credit integrity checks, security investigations, service troubleshooting, and internal reporting, as permitted by applicable law. Where a use is materially different from the purposes described here, we will provide additional notice and/or obtain consent if required.

4. Cloud AI, Software Processing, and Additional Features (Including VIPA)

4.1 Overview

Certain Software features, including AI-assisted generation of Generated Output in VIPA, require an internet connection and transmission of limited information to Vocal Pockets cloud infrastructure and to service providers for processing.

4.2 Image-based AI generation

When you use VIPA cloud AI generation features, we typically process:

  • account/authentication identifiers (to verify entitlement and apply credits);
  • selected image content identifiers and related pack/catalog identifiers;
  • associated metadata or tags you select (such as mood, genre, scale, texture, or similar tags); and
  • curated imagery or image-derived inputs associated with that image, which may be retrieved from our cloud storage and processed by our AI service providers to generate chord suggestions or related outputs.

4.3 Other AI-assisted or cloud-dependent features

Depending on the feature, we may also process limited structured musical context or other inputs you affirmatively submit within the Software (for example, selected chord symbols, note/MIDI fields, progression summaries, naming or refinement requests, or similar data) to provide that feature.

4.4 Required usage metering

When cloud AI chord-generation features succeed, we may record that a generation occurred; the generation type; how many chord pads were delivered; image/pack identifiers; generation mode; sanitized tags; credit/request identifiers; plugin variant; and timestamps. We do not store the chord names, notes, or MIDI content from those generations in our usage-metering records.

This metering is required to operate credits, prevent abuse, support the service, and produce aggregate statistics. It is collected whether or not you opt in to optional product analytics.

4.5 Optional product analytics

If you opt in, we may collect additional interaction events to improve the Software. Where a feedback feature stores musical symbols or similar content, that storage is limited to that feature and your consent preference. You can change optional analytics preferences in Settings where the control is offered.

4.6 Local processing

VIPA may include a local chord engine and other on-device features that do not consume credits and do not require transmission to our AI providers. Locally processed content remains on your device unless you use a feature that transmits data.

4.7 AI service providers (Google / Google Cloud)

We use third-party cloud infrastructure and AI processing services to power AI-assisted features. These providers act as our service providers / subprocessors and may include Google and Google Cloud services used to host or run machine-learning models and related processing.

We process feature inputs to provide the requested feature to you. We do not use your private compositions, image-generation inputs, or feature outputs to train our own machine-learning models for unrelated purposes. Our AI service providers are engaged to process relevant inputs to provide the requested service to us. Under Google Cloud’s applicable customer terms for its generative AI services, Google does not use customer data to train or fine-tune its models without the customer’s prior permission or instruction. We do not sell your personal information to these AI service providers. We disclose relevant inputs to them only so they can process data on our behalf to provide the requested feature.

4.8 Cloud sync, backups, and libraries

If Software offers cloud sync, backup, or server-side library features, we may process favorites, vibes/sessions, presets, settings, and related metadata you choose to save or synchronize so those features can function across devices or sessions.

4.9 Additional and future features

We may introduce additional Software features over time, including features in development, beta, early access, preview, or not yet generally available. When you use a feature, we process the personal information reasonably necessary to provide it, including as otherwise disclosed at the time of use.

Depending on the feature you choose to use, that may include:

  • curated imagery and related metadata;
  • tags, prompts, preferences, and feature settings;
  • structured musical context you submit within the Software;
  • files or media you affirmatively submit for a cloud-enabled feature (for example, MIDI or audio uploaded for cloud analysis, naming, or related tools), only as needed for that feature and subject to in-product notice where appropriate;
  • cloud-synced library or session data you choose to save;
  • personalization or preference signals where such features are offered; and
  • diagnostic data needed for reliability and security.

Unless a specific feature discloses otherwise at the time of use:

  • we do not continuously record your DAW audio output or microphone input as a background practice; and
  • local-only features keep processing on your device.

If a new feature materially expands the categories of data we process (for example, cloud upload of audio, user-uploaded images, or public sharing), we will provide notice in the feature flow and/or update this Privacy Policy when the feature is made available.

4.10 Availability; Generated Output

We do not warrant that third-party AI or cloud services will be uninterrupted, error-free, or available in all jurisdictions. Feature availability and related data processing may vary as described in Section 1.5. Generated Output is provided as described in the Terms and Plugin Supplemental Agreement. You are responsible for evaluating Generated Output before commercial use.

5. How We Share Personal Information

We may disclose personal information to:

5.1 Affiliates

for purposes consistent with this Privacy Policy.

5.2 Service providers / subprocessors

that help us operate the Platform (hosting, cloud infrastructure, AI processing, databases, authentication, payments, ecommerce, email delivery, customer support, analytics, security, and internal operations tooling). They may process personal information only to provide services to us, subject to contractual obligations.

5.3 Advertising and measurement partners

including through cookies, pixels, or hashed customer lists where used.

5.4 Other users and the public

when you choose to post User Content publicly (for example, a review displaying your first name and city/region).

5.5 Professional advisors

such as lawyers, auditors, bankers, and insurers.

5.6 Authorities and others

when we believe disclosure is necessary or appropriate for legal compliance, safety, fraud prevention, or enforcement.

5.7 Business transferees

in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards.

We do not sell personal information for money. Certain advertising technologies may be treated as a “sale” or “sharing” under California law; see Section 15.

6. Service Providers and Subprocessors

We use trusted third parties to help operate the Platform. Representative providers and categories include:

  • Ecommerce, payments, and subscriptions: Shopify and related billing/subscription applications. Payment card data is handled by the applicable processor.
  • Edge compute, CDN, API gateway, and object storage: Cloudflare.
  • Database, authentication, and backend data services: Supabase.
  • Cloud AI / machine-learning processing: Google / Google Cloud.
  • Internal operations and analytics tooling used by authorized personnel (and, where approved, contractors) for support, account administration, and product analytics.
  • Customer support and ticketing tooling.
  • Analytics and marketing measurement providers, as described in this Privacy Policy and our Cookie Policy.

We may update our service providers and subprocessors from time to time. Where required by applicable law, or upon reasonable request, we will provide additional notice or an updated list of material subprocessors. Requests may be sent to team[at]vocalpockets.com or as described in Section 14.

7. Your Choices

7.1 Account information

You may review and update certain account information through available account tools or by contacting us as described in Section 14.

7.2 Marketing communications

You may opt out of marketing emails using the unsubscribe link in those emails. You may continue to receive transactional or service messages. If we send marketing texts, reply STOP to opt out. Marketing preferences are separate from optional Software product analytics.

7.3 Optional Software product analytics

Where offered in Software Settings, you may enable or disable optional product analytics. Required service data (account, entitlement, device licensing, credits, AI usage metering, security/fraud data, and similar operational data) is not controlled by that toggle.

7.4 Diagnostic reporting

Where a crash/diagnostic setting is offered, you may disable it in Settings.

7.5 Cookies and advertising choices

Manage cookies through your browser and the choices in our Cookie Policy. Where we provide a cookie banner, preference center, or “Do Not Sell or Share My Personal Information” link, use those controls.

7.6 Do Not Track

Some browsers send “Do Not Track” signals. We currently do not respond to DNT signals. Where required, we provide separate cookie or sale/sharing controls instead.

7.7 Device management

You may revoke device activations through available account/device management tools, subject to the Plugin Supplemental Agreement.

7.8 Choosing not to provide information

If you do not provide information needed for an account, Subscription, or cloud feature, we may be unable to provide that feature.

7.9 Privacy rights requests

See Sections 15 and 16, or contact us as described in Section 14. Where a privacy law does not apply to us, we may still choose to honor reasonable requests as a matter of policy, but we are not obligated to do so except as required by applicable law.

8. Retention

We retain personal information for as long as reasonably necessary to:

  • provide the Platform and maintain your account or Subscription;
  • fulfill the purposes described in this Privacy Policy;
  • comply with legal, tax, accounting, and reporting obligations;
  • resolve disputes and enforce agreements; and
  • support security, fraud prevention, audit, and abuse-prevention needs.

Retention periods vary by category. In particular:

  • account, purchase, entitlement, credit-ledger, and AI usage-metering records are generally retained for the life of the account and for a commercially reasonable period thereafter;
  • subscription and security-related audit/lifecycle logs may be retained for longer periods as needed for billing integrity, dispute resolution, security, fraud prevention, and legal compliance;
  • optional analytics and diagnostic data may be retained for shorter operational periods; and
  • backups may persist for a limited time after deletion until overwritten.

When we no longer have an ongoing legitimate need to process personal information, we delete, anonymize, or securely isolate it until deletion is practicable. De-identified or aggregated information may be retained and used as described in Section 3.2.

Account and deletion requests

You may request account closure or deletion of personal information by contacting us as described in Section 14. We do not currently offer fully automated self-service account erasure in all products. We will review and process verified requests as required by applicable law and within any applicable statutory timelines. Where no specific privacy law requires deletion, we will consider reasonable requests as a matter of policy. We may delete or anonymize personal information associated with your account except where we are permitted or required to retain information (for example, for legal compliance, billing records, dispute resolution, security, fraud prevention, or backup integrity). We may need to verify your identity before completing a request.

9. Security; Security Incidents

9.1 Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encryption in transit where appropriate, and credential segmentation so Software clients do not embed cloud-provider secrets. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9.2 Security incidents

If we become aware of a security incident involving personal information, we will investigate and take appropriate steps, including providing notification to affected individuals and/or regulators where required by applicable law.

10. International Data Transfers

Vocal Pockets is based in the United States. Personal information may be transferred to, stored in, or processed in the United States and other countries where we or our service providers operate. Those countries may not provide the same level of data protection as your home jurisdiction.

Where required by applicable law (including, if and to the extent applicable, GDPR/UK GDPR), we will use appropriate transfer safeguards, which may include Standard Contractual Clauses or equivalent mechanisms, together with supplementary measures where appropriate. Contact us as described in Section 14 for more information about transfers.

11. Children

The Platform is not directed to children, and we do not knowingly collect personal information from anyone under 18. Consistent with the Terms, the Platform is not for persons under 18. If we learn that we collected personal information from a person under 18, we will delete it. If you believe a child provided personal information to us, contact us as described in Section 14.

12. Third-Party Sites and Services

The Platform may link to or integrate with third-party websites, DAWs, payment processors, support tools, cloud providers, app stores, social platforms, advertising partners, and other services. We do not control those third parties and are not responsible for their privacy, security, or data-handling practices. Their processing is governed by their own policies. We encourage you to review them.

13. Changes to this Privacy Policy

We may modify this Privacy Policy from time to time. We will post the updated Privacy Policy with a revised “Last Updated” date. Except where applicable law requires otherwise, changes are effective when posted, and we are not obligated to provide individualized notice (such as email) of every update.

For material changes, we may provide additional notice (for example, by email, through the Platform, or in-product notice), but except where required by applicable law we are not obligated to do so. Where applicable law requires a different standard for a particular change (such as consent), we will comply with that standard.

Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes acceptance of the updated Privacy Policy, except where applicable law requires a different standard.

14. How to Contact Us

Questions about this Privacy Policy or our privacy practices, including privacy rights requests, may be sent to:

Email: team[at]vocalpockets.com

Postal mail:
Vocal Pockets, LLC
971 US Highway 202N, Ste R
Branchburg, NJ 08876
United States

To email us, replace “[at]” with “@”.

15. Notice to California Residents

This Section 15 applies if and to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to Vocal Pockets’s processing of personal information. If the CCPA does not apply to us, this Section is provided for transparency only and does not create CCPA rights or obligations beyond applicable law.

15.1 Categories of personal information

Depending on your use of the Platform, we may collect:

  • Identifiers (name, email, account ID, IP address, device identifiers);
  • Commercial information (purchases, Subscriptions, credits, order history);
  • Internet or other electronic network activity (Site browsing and Software interaction data);
  • Geolocation data (approximate, derived from IP);
  • Audio or similar information only if you affirmatively submit audio or similar media to us (for example, through a cloud-enabled feature that expressly requests it, or through support/testimonial channels). Local on-device MIDI/audio analysis that is not transmitted to us is not treated as collection of sensory information by Vocal Pockets;
  • Inferences drawn from the above; and
  • Characteristics that may be incidentally revealed if you choose to provide them (we do not intentionally collect protected classification characteristics to operate VIPA).

Sources, purposes, and categories of recipients are described in Sections 2, 3, 5, and 6.

15.2 Sale / sharing

We do not sell personal information for monetary consideration. We may use advertising and analytics technologies that California law treats as “sale” or “sharing” for cross-context behavioral advertising. If and to the extent the CCPA applies, you may opt out as described below and in our Cookie Policy.

15.3 Sensitive personal information

If and to the extent the CCPA applies, we do not use or disclose sensitive personal information for purposes that require a right-to-limit notice under the CCPA, except as permitted to provide the Platform, prevent fraud/security incidents, or as otherwise allowed by law.

15.4 Your California rights

If and to the extent the CCPA applies, and subject to legal limitations, California residents may request to:

  • know/access categories and specific pieces of personal information;
  • delete personal information we collected from you;
  • correct inaccurate personal information;
  • opt out of sale/sharing for cross-context behavioral advertising;
  • limit use of sensitive personal information, where applicable; and
  • exercise CCPA rights free from prohibited discrimination.

15.5 How to exercise rights

Contact us as described in Section 14 with the subject line “California Privacy Request,” or use any privacy-request mechanism we make available on the Site. We will verify your identity as required by applicable law. You may use an authorized agent with appropriate documentation. If the CCPA does not apply to the request, we may still consider it as a matter of policy under Section 7.9.

15.6 Shine the Light

California Civil Code § 1798.83 permits certain requests regarding disclosure of personal information to third parties for their direct marketing purposes. To submit such a request, contact us as described in Section 14 and include your name, California resident attestation, and postal address.

16. Notice to European Economic Area, UK, and Swiss Users

This Section 16 applies if and to the extent European data-protection law (including the GDPR, UK GDPR, and/or Swiss data-protection law) applies to Vocal Pockets’s processing of personal information. If such law does not apply to us, this Section is provided for transparency only and does not create rights or obligations beyond applicable law.

16.1 Controller

The controller is Vocal Pockets, LLC. Contact details are set out in Section 14.

16.2 Legal bases

Where European data-protection law applies, we process personal information under one or more of the following bases:

  • Contract: to provide accounts, Subscriptions, Software entitlement, credits, purchases, support, and requested AI/cloud/sync features;
  • Legitimate interests: product improvement, security, fraud prevention, required service analytics/metering, reliability, and limited marketing where permitted, balanced against your rights;
  • Consent: optional product analytics, certain cookies/advertising, and other processing where consent is required; and
  • Legal obligation: compliance with applicable law.

Where we rely on consent, you may withdraw it at any time without affecting prior lawful processing.

16.3 AI / cloud feature processing

Where European data-protection law applies, processing described in Section 4 is generally necessary to perform our contract with you when you use AI-assisted or cloud-dependent Software features, and/or based on legitimate interests in operating a secure and reliable service. Optional analytics remain consent-based where required.

16.4 Retention

See Section 8.

16.5 Your rights

If and to the extent European data-protection law applies, and subject to that law, you may request access, correction, deletion, restriction, objection (including to processing based on legitimate interests), and data portability. You may also lodge a complaint with your local supervisory authority.

To exercise rights, contact us as described in Section 14. We may need to verify your identity. If we decline a request as permitted by law, we will explain why subject to legal limits. If European data-protection law does not apply to the request, we may still consider it as a matter of policy under Section 7.9.

16.6 International transfers

See Section 10.

17. Cookie Policy

Our use of cookies and similar technologies on the Site is described in our Cookie Policy, currently accessible at vocalpockets.com/pages/cookie-policy (or the then-current URL we publish). Questions may be directed to us as described in Section 14.

Vocal Pockets, LLC