Security & Zero-Knowledge Commitment

Privacy Policy

Effective Date: August 1, 2026

AES-256-GCM Encryption

API keys stored in our database are encrypted server-side with AES-256-GCM. Plain text keys are never written to disk.

Zero-Knowledge Memory

Keys are decrypted in RAM solely during active API calls and cleared immediately. We do not store or sell your prompts.

BYOK & LocalStorage

Anonymous users can use Bring Your Own Key (BYOK). Keys remain exclusively on your device's browser LocalStorage.

1. Information We Collect

When you use AI Music Prompt Generator, we collect minimal data required to deliver prompt generation and keep your settings synchronized:

Anonymous Usage: If you use the application without creating an account, no personal data or API keys are stored on our servers. Your settings and API keys reside locally in your browser.
Authenticated Users: When you sign in (via Google OAuth or Email), we store your email address, name, avatar URL, and encrypted provider configurations.

2. API Key Protection & Encryption Standards

We treat your AI provider API keys (OpenAI, Google Gemini, Groq, OpenRouter, DeepSeek, etc.) with strict security protocols:

Symmetric Cryptography: All API keys saved in our SQLite database are encrypted using AES-256-GCM with unique Initialization Vectors (IVs) and authentication tags.
No External Transmissions: Your API keys are only transmitted via SSL/TLS directly to the respective AI provider endpoint specified in your request.
Ephemeral Memory Decryption: Keys are decrypted transiently in server memory during prompt generation calls and garbage-collected immediately.

3. Third-Party AI Providers

Prompt generation requests are fulfilled by third-party Large Language Model (LLM) providers selected by you in Settings. These providers operate under their respective privacy policies:

Google AI (Gemini), OpenAI, Groq, OpenRouter, DeepSeek, NVIDIA NIM, Perplexity, Together AI, Fireworks AI, and Ollama. We encourage you to review their privacy disclosures regarding API data processing.

4. Data Control & Deletion

You maintain complete ownership of your data. You may clear your browser LocalStorage at any time, or request full account and key deletion from our database by contacting us.

5. Contact & Credits

AI Music Prompt Generator is developed and operated by ViaWeb. For privacy inquiries or data requests, visit https://www.viaweb.pro.