Suno Privacy Policy

This is Suno's privacy policy, explaining how the AI music generation platform collects and uses your personal data including your name, email, billing details, music prompts, voice recordings, and all content you create or upload. The most important thing to know is that Suno explicitly uses your prompts, music submissions, and chat interactions to train its AI models, and there is no clearly stated opt-out for this specific use. You can request deletion of your personal data by emailing privacy@suno.com, and California and EEA residents have additional rights to access, correct, or port their data.

This Privacy Notice governs Suno, Inc.'s collection, use, sharing, storage, and security of personal information across its AI music generation platform, websites, mobile applications, and related services, with legal bases including contractual performance, legitimate interests, and consent. The document creates obligations for Suno to respond to data deletion, correction, and portability requests from California residents under CCPA and EEA residents under GDPR, while users implicitly consent to broad data collection including Contact Information, User Account Information, User Activity Information, Interactive Chat Information, and Content (including voice recordings and music submissions). A notable and potentially high-risk provision is the explicit statement that user-generated Content, Submissions, and Interactive Chat Information may be used to 'train and enhance the models that power our Services' — a use that goes beyond standard service delivery and lacks a clearly delineated opt-out mechanism. The document engages GDPR (EEA residents), CCPA/CPRA (California residents), COPPA (age restrictions), and general FTC Act Section 5 consumer protection standards; material compliance considerations include the adequacy of legitimate interests as a GDPR lawful basis for AI model training on user content, the sufficiency of CCPA disclosures regarding data sale versus sharing, and the absence of explicit consent mechanisms for sensitive data uses such as voice recordings.