Privacy Notice
Last updated 10 September 2026
Cloneproof Entertainment, a sole proprietorship owned by Rahman Hameed du Plessis is the data controller for personal information processed through EDITFORGE AI. This notice explains what we collect, why, who we share it with and what rights you have.
What we collect and why
- Account data — email address, password hash, authentication provider details. Used to create and secure your account and to sign you in. Legal basis: performance of our contract with you.
- Audio and project data — the masters you upload, the deliverables generated from them, and analysis metadata such as tempo, key, loudness and section structure. Used to provide the Service. Legal basis: performance of contract.
- Billing and credit records — plan, credit balance and grants, transaction and payment event records. Used to run your subscription, apply credits and keep accurate accounts. Legal basis: contract and legal obligation.
- Usage and technical data — log entries, device and browser information, IP address, error reports. Used for security, fraud prevention, troubleshooting and improving the Service. Legal basis: legitimate interests.
- Support messages — what you send us by email. Used to answer you. Legal basis: legitimate interests.
We do not use your uploaded audio to train third-party models, and we do not sell your personal data.
Who we share it with
- Hosting and backend providers — who host the application, database and audio storage on our behalf.
- Paddle.com — our reseller and Merchant of Record, who handles the sale of our products, subscription management, payments, invoicing and tax compliance, and who handles refund requests.
- Professional advisers — legal and accounting, where necessary.
- Authorities — where we are required to disclose by law.
Some of these providers are located outside South Africa and the EEA. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.
How long we keep it
Uploaded audio and generated deliverables are deleted automatically when a project reaches its expiry date — 7 days on Free, 40 days on Pro and 120 days on Premier. Analysis metadata and account records are kept while your account is active. Billing and transaction records are kept for as long as tax and accounting law requires. When data is no longer needed, it is deleted or anonymised.
Your rights
You can ask us to give you access to your personal data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format, and you can withdraw consent where we rely on it. Contact Rahclonep06@gmail.com and we will respond within one month. If you are unhappy with our response, you may complain to the South African Information Regulator or, if you are in the EEA or UK, to your local data protection authority.
Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, per-user access rules on the database and private, non-public audio storage that is only reachable through short-lived signed links issued to you.
Cookies
We use essential cookies and browser storage to keep you signed in and to keep the application secure. These are required for the Service to work. We do not use advertising cookies. You can clear or block cookies in your browser settings, but signing in will stop working if you do.
