Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This privacy notice establishes Suno's data collection and processing practices for users of its AI music generation service. The document authorizes Suno to collect creative inputs, prompts, uploaded audio, voice recordings, and generated music outputs, and permits use of this data to train and improve the platform's AI models. Users subject to EEA or California jurisdiction are granted rights to access, correct, or delete their personal data through requests submitted to privacy@suno.com.
This Privacy Notice governs Suno, Inc.'s collection, use, sharing, storage, and security of personal information across its AI music generation platform, websites, and mobile applications, asserting legal bases including contract performance, legitimate interests, legal compliance, and consent. The agreement states that Suno collects Contact Information, User Account Information, User Activity Information, Interactive Chat Information, and Content (including voice recordings, music, and creative prompts), and the terms authorize use of user-submitted Content and activity data to train and enhance the AI models that power the Services. The notice asserts a broad right to use user submissions, including prompts and generated outputs, for AI model training as a matter of legitimate interests, a legal basis that may require more careful evaluation under GDPR's balancing test, particularly for EU/EEA users who may hold stronger objection rights; the document also asserts that California residents hold CCPA-enumerated rights but does not clearly specify whether Suno engages in data sales or sharing for cross-context behavioral advertising as defined under CPRA. The notice engages GDPR for EEA residents, CCPA and CPRA for California residents, and COPPA given the platform's stated minimum age requirement of 13; the document also references Google Analytics and third-party advertising cookie providers, which may require evaluation under ePrivacy Directive requirements and state-level privacy laws governing targeted advertising.
Institutional analysis available with Compliance
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.
Start Compliance free trialMonitoring
Suno has updated this document before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
Compliance Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Compliance free trialCross-platform context
See how other platforms handle AI Model Training on User Content and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.