← MUSA

Privacy Policy

Last updated: October 2, 2026 · in accordance with the LGPD (Law 13.709/2018)

1. What data we collect

  • Account: email and display name.
  • Content: prompts, projects, references (photos, voices, brands) you submit, the DNAs created from them, and generated media.
  • Usage: technical records (logs) to operate and protect the service.
  • Purchase: payment is processed by Stripe — card details go straight to them and MUSA neither receives nor stores them. When a promotion requires a CPF (Brazilian tax ID), we keep only a code derived from it (a hash), used solely to tell whether that CPF has already used the promotion; the CPF itself is never stored.

2. Face and voice (DNA)

  • Sensitive data. Face photos and voice samples submitted to create a DNA identify a person and are treated as sensitive personal data (LGPD, article 5, II, and article 11).
  • Legal basis. The specific consent confirmed when the DNA is created: yours, when the DNA is of you, or that of the person depicted, which you declare you have obtained.
  • Single purpose. Generating content for your account. We do not share it with other users, sell it, license it or use it to train models.
  • Where it is kept. Photos are kept in private storage, accessible only to your account, and sent to AI providers only at the moment of each generation. A cloned voice is kept at the voice provider, tied to your DNA.
  • For how long. Until you delete the DNA or the account. On deletion, we delete the photos and the cloned voice at the provider.
  • The person depicted. Anyone who appears in a DNA created by someone else can request deletion through the data officer channel at the end of this policy.

3. How we use it

To operate the platform (generate and store your media), process credits, provide support, ensure security and meet legal obligations. We do not sell your data and we do not use your content to train our own models.

4. Sharing with AI providers

To generate content, prompts and references are sent to AI model providers (for example, image/video generation, voice synthesis, transcription and language providers). Those providers process the data under their own terms, and some of them operate outside Brazil — in those cases there is an international transfer, made under the safeguards set by the LGPD. We also use providers for infrastructure, transactional email and payment. By using MUSA you consent to that processing. We do not send data to third parties for advertising.

5. Storage and security

Data is stored on cloud infrastructure (Supabase/Vercel), with controlled access. Clips Tool reference media is processed locally in your browser — the video is not sent to our servers; only the audio, in parts, is transcribed.

6. Your rights (LGPD)

You may request access, correction, portability, or deletion of your data, and revoke consent. Deleting your account and its content is something you can do yourself, in Settings › Profile; other requests go to the email below and are handled within LGPD timelines.

7. Retention

We keep your data while your account exists; DNAs, until you delete them. After account deletion, we remove your content and personal data, except what the law requires us to retain — such as purchase and credit-usage records, kept for tax and accountability purposes. A blocked account keeps its library for 6 months, with notice before it is purged.

8. Cookies

We use two first-party cookies: one keeps your authenticated session, the other remembers the language you chose. We use no advertising cookies and no third-party trackers. Visits to public pages are counted in aggregate, with no cookie, IP address or visitor identifier.

9. Data officer / contact

The data controller is ELEVESSY GESTÃO, INOVAÇÃO, TECNOLOGIA E COMÉRCIO LTDA (CNPJ 52.038.549/0001-79 · São Paulo/SP). The channel for the data protection officer (LGPD, article 41), to exercise your rights or ask privacy questions, is: contato@elevessytech.com.br.

Terms of Use