privacy by design

1. Privacy at DivineWorx

DivineWorx is built around a simple principle: local by default, private by design. Our creative Labs are designed to process creative material on your device wherever technically practical. This Privacy Policy explains what information DivineWorx collects, why we collect it, how we use it, when information may be handled by third-party services you deliberately choose to use, and the choices available to you.

This policy applies to the DivineWorx website, Creator accounts, Studio, Labs, authentication, subscriptions, support, and other services that link to this policy.

2. Information you provide

When you create or use a DivineWorx Creator account, we may collect information you provide directly, including your name, email address, authentication information, support communications, account preferences, and information necessary to administer your trial, subscription, or access rights.

If you create an account with email and password, DivineWorx stores a securely hashed representation of your password rather than storing your password in readable form.

3. Sign in with Google

If you choose Continue with Google, DivineWorx uses Google authentication to establish your identity. For this sign-in function, DivineWorx intends to request only the minimum identity information needed for authentication, such as your Google account identifier, name, email address, and basic profile information made available through the sign-in process.

DivineWorx uses this Google user data to create or locate your Creator account, authenticate you, maintain account security, and provide access to the DivineWorx service. We do not use Google Sign-In as permission to read your Gmail, Google Drive, YouTube content, contacts, or other unrelated Google services. Any future connection to another Google service would be presented separately and would require the permissions appropriate to that feature.

4. Creative files and local processing

DivineWorx is designed so that creative processing can occur locally in your browser or on your device wherever technically practical. For example, Stem Lab is designed around browser-based, on-device audio processing rather than uploading your music to a remote audio-processing service by default.

Files you choose for local processing are not intentionally uploaded to DivineWorx servers merely because you use a local-processing feature. If a particular feature requires a remote service, cloud transfer, publishing destination, or third-party connection, that behavior should be made clear in the relevant feature before you choose to use it.

5. Account, access and operational data

DivineWorx may process limited service data necessary to operate the platform, such as Creator account identifiers, authentication-provider identities, trial start and expiry information, subscription and entitlement status, security events, payment-provider references, support records, and operational communications.

We may also process ordinary technical information generated when a website is used, such as IP address, browser or device information, request timestamps, and security or server logs, where necessary for service delivery, fraud prevention, troubleshooting, abuse prevention, and system security.

6. Payments

When paid plans are offered, payment transactions may be handled by third-party payment providers. DivineWorx does not need to store your complete payment-card details in order to maintain your account entitlement. We may retain transaction references, plan information, subscription status, billing status, and other records needed to administer access and reconcile payments.

7. How we use information

We use personal information only for legitimate service purposes, including to:

• create and administer Creator accounts;
• authenticate users and maintain secure sessions;
• start and enforce trials, subscriptions, gifts, and other access entitlements;
• provide, maintain, secure, troubleshoot, and improve DivineWorx;
• respond to support requests and important service communications;
• prevent fraud, abuse, unauthorized access, and security incidents;
• comply with legal obligations and enforce our Terms of Service.

8. Sharing and third-party services

We do not sell personal information. We may share or transmit limited information to service providers when reasonably necessary to provide a feature you request, operate infrastructure, process payments, authenticate you, protect the service, or comply with law.

When you deliberately connect or publish to a third-party service, that service's own terms and privacy practices also apply. DivineWorx aims to keep optional external connections distinct from local creative processing so that you can choose when your work leaves your device.

9. Google API Services User Data

DivineWorx's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements. For the current Google authentication function, Google data is used for sign-in and account identity as described above and is not repurposed for unrelated advertising or unrelated data collection.

10. Cookies and sessions

DivineWorx may use cookies or comparable browser mechanisms that are necessary for authentication, session continuity, security, preferences, and essential service operation. Where additional non-essential analytics or similar technologies are introduced, this policy may be updated and additional choices may be provided where required.

11. Data retention and deletion

We retain account and operational information for as long as reasonably necessary to provide the service, maintain security and business records, resolve disputes, enforce agreements, and meet legal obligations. Different categories of information may have different retention periods.

If account-deletion functionality is not yet available directly in Studio, you may contact us to request deletion or correction of personal information, subject to records we are legally or operationally required to retain.

12. Security

We use reasonable administrative and technical safeguards appropriate to the nature of the service, including HTTPS for network transport, secure session practices, restricted server-side access, and password hashing for password-based accounts. No internet service can promise absolute security, but DivineWorx is designed to minimize unnecessary collection and unnecessary movement of creative material.

13. Your choices and rights

You may choose whether to create an account using an available authentication method, whether to connect optional external services, and whether to use features that require data to leave your device. Depending on applicable law, you may also have rights to request access to, correction of, or deletion of certain personal information.

14. Children

DivineWorx is not directed to children under the minimum age required to independently consent to online services in their jurisdiction. If we learn that personal information has been collected in circumstances requiring parental consent without the required consent, we will take appropriate steps.

15. International use

DivineWorx may be accessed internationally. Information associated with accounts and server-side services may therefore be processed in countries other than the country in which you live, subject to applicable legal requirements and the safeguards described in this policy.

16. Changes to this policy

We may update this Privacy Policy as DivineWorx evolves. Material changes will be reflected by updating the effective date and, where appropriate, by providing additional notice through the service.

17. Contact

Questions about privacy, Google authentication, or this policy may be sent to support@divineworx.co.