Privacy Policy

Last updated: April 23, 2026

This Privacy Policy explains how DRULES AI, LLC ("DRULES AI", "we", "our", or "us") collects, uses, stores, and discloses information when you visit or use artist-clone.com and its related tools and services (the "Service"). By using the Service you agree to the practices described below. If you do not agree, please do not use the Service.

Plain-English summary, if you're in a hurry:

• We set an anonymous session cookie so we can track your 5-free-prompt quota and your credit balance.
• If you submit an email, we store it to unlock 100 bonus credits and add you to our newsletter (you can unsubscribe anytime).
• If you subscribe, Stripe processes your payment — we never see your card number.
• Your prompt inputs go to Anthropic (Claude) so it can produce the output, and are not otherwise stored.
• We use Google Analytics to understand which features people actually use.
• We do not sell your personal information.

1. Who we are

DRULES AI, LLC operates the Service at artist-clone.com. The company is registered in California, USA. You can reach us at dannyrulesai@gmail.com.

2. Information we collect

Things you give us directly

• Email address — when you submit one to unlock additional free credits or through the post-generation capture form.
• Prompt inputs — the artist names, descriptors, lyrics, song titles, subjects, Suno URLs, and related text you paste into the various tools.
• Payment information — when you subscribe or buy lifetime access. Handled entirely by Stripe; we receive only a customer ID and subscription ID, never your card number.

Things we observe automatically

• Anonymous session identifier — a random ID we generate the first time you hit the site, stored in a first-party HTTP-only cookie named sid, valid for one year. Used to count your free prompts, track your credit balance, and remember your subscription status across visits.
• Usage telemetry — which tool you used, whether a generation succeeded or was rate-limited, your credit balance, and which pricing plan you're on. Stored in our database keyed by your sid.
• Analytics data — page views, clicks, scroll depth, and custom events (which tool opened, which plan CTA clicked, checkout started, purchase completed, etc.), collected via Google Analytics 4 (measurement ID G-N6GYND7JHZ). This data includes your IP address (truncated by GA), device type, browser, and referring URL.
• Server logs — our hosting provider (Vercel) temporarily logs request metadata (URL, response code, timestamp, IP). Retained per their infrastructure defaults.

Jukebox

If you paste a Suno share link into the Jukebox, we store that link, the song title, cover image URL, and audio URL as part of a communal "recently dropped" queue visible to all visitors. Only the last 5 entries are retained. Your sid is not attached to jukebox entries.

3. How we use it

• To provide the Service — enforcing free-tier quotas, deducting credits per generation, unlocking features after purchase, and routing your prompt inputs to the AI model that produces the output.
• To process payments — only via Stripe.
• To send you email — if you submit your email address, to deliver the newsletter you opted into and occasional product updates. You can unsubscribe via any email's footer.
• To improve the product — aggregate analytics tell us which tools get used, which plans convert, and where users drop off.
• To comply with the law — and to detect or prevent abuse of the Service.

4. Third parties we share data with

We do not sell your personal information. We share data with the following service providers strictly to operate the Service:

• Vercel (privacy) — hosting, serverless functions, edge CDN.
• Upstash (privacy) — managed Redis database for sessions, credits, blog posts, and jukebox state.
• Anthropic (privacy) — the Claude model that powers every prompt tool. Your prompt inputs are sent to Anthropic's API, processed, and returned. Per Anthropic's policy, API inputs are not used to train their models by default.
• xAI (privacy) — Grok model used by our automated blog cron to summarize public X/Twitter posts into daily articles. No individual user data is sent to xAI.
• Stripe (privacy) — payment processing. When you check out, you are redirected to Stripe's hosted page; we receive only a customer ID and the fact that a payment succeeded.
• Mailchimp (privacy) — email list management. Your email address is synced to our mailing list when you submit it.
• Google Analytics (privacy) — traffic measurement. IP addresses are anonymized.
• Suno (terms) — when the Jukebox resolves a Suno URL, our server fetches the public share page and our site embeds the direct audio URL for your browser to stream.

Each provider processes data under its own privacy policy. Links above.

5. Cookies and local storage

• sid — our session cookie. First-party, HTTP-only, Secure, SameSite=Lax. Expires after 1 year. Used for quota enforcement. Strictly necessary; not used for advertising.
• Google Analytics cookies (_ga, _ga_N6GYND7JHZ) — first-party, expire after 2 years. Used for measurement.
• Stripe cookies — set only when you reach a Stripe checkout page, by Stripe directly, for fraud prevention.
• Local storage / session storage — we use ssp_subscribed (local) to migrate legacy users, and ssp_tracked (session) to count unique visitors once per tab.

You can disable cookies in your browser. Disabling the sid cookie will break quota tracking and may prevent login-free features from working correctly.

6. How long we keep data

• Session IDs, usage counters, credits — retained as long as the account is active. Delete on request.
• Email addresses — retained until you unsubscribe or request deletion.
• Stripe records — retained per Stripe's policy (typically 7 years for tax/regulatory purposes). We retain the customer/subscription IDs until the subscription ends.
• Analytics data — retained per Google's default (14 months) or as configured.
• Jukebox queue — last 5 entries only; older entries are automatically removed.

7. Your rights

Depending on where you live, you may have the right to:

• Request a copy of the data we hold about you ("right to access");
• Correct inaccurate data ("right to rectification");
• Delete your data ("right to erasure");
• Opt out of certain uses (we do not sell data or use it for automated decision-making with legal effect);
• Withdraw consent at any time (for newsletter emails, via the unsubscribe link);
• Lodge a complaint with a data-protection authority if you're in the EU/UK.

To exercise any of these, email dannyrulesai@gmail.com with the subject "Privacy request". We respond within 30 days.

California residents — under CCPA/CPRA, you have the rights listed above plus a right to non-discrimination. We do not sell or share personal information for cross-context behavioral advertising.

8. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us data, email dannyrulesai@gmail.com and we will delete it.

9. Security

We use TLS for all traffic, HTTP-only Secure cookies, encrypted environment variables for third-party credentials, and rely on Vercel, Stripe, Upstash, and Google for the bulk of our infrastructure security. No system is bulletproof; we cannot guarantee absolute security but we take reasonable steps.

10. International data transfers

Our providers are primarily based in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. For EU/UK users, our providers rely on Standard Contractual Clauses or equivalent safeguards where applicable.

11. Changes to this policy

We may update this Privacy Policy as the Service evolves or laws change. We'll update the "Last updated" date at the top and, for material changes, surface a notice on the Service.

12. Contact

Questions or requests? Email dannyrulesai@gmail.com.