Privacy Policy
SetLight ("SetLight," "we," "us") turns a musician's own recordings into finished content you can share. This policy explains, in plain language, what personal information we hold, why, who it goes to, how long we keep it, and how you can see, correct or delete it. If anything here is unclear, email legal@setlight.ai.
1. Who can use SetLight
SetLight is for adults. You must be at least 18 years old to create an account or use the service.
2. What we collect, and why
Your account
When you create an account we store your email address, the artist or display name you give us, and your password — the password only as a one-way secured hash, never as plain text. We keep a record of your sign-in sessions so you stay logged in.
What you upload
The recordings you upload — your video and audio — and everything SetLight makes from them: the songs it detects, clips, thumbnails, titles, descriptions, hashtags and other parts of a publishing pack. This is the core of the service; we process it to give you back finished content.
Information about your act
If you use Brand Studio we store your artist name and social handle and the brand details you enter. For a performance we may store details you provide such as the city it was recorded in and a title.
If you apply to the Founding Artist Pilot
Your application stores your email, name, country, time zone and your answers to the application questions, plus a consent record of what you agreed to. Each consent record keeps the exact wording you were shown, whether you granted or declined it, the time, and your browser's user-agent string. We do not record your IP address.
How you found us
When you land on a recruitment or application page we may store the referring link and campaign source and your browser's user-agent, to understand where applicants come from. We do not use Google Analytics, advertising pixels, or any third-party tracking or profiling tools on our pages.
Operational records
We keep internal technical records of how the product ran on your uploads — processing times, model usage and cost, error logs — so we can run the service and fix problems. These are for operating SetLight, not for advertising.
3. Who your information goes to
SetLight uses a small number of specialist services to do the actual work of turning your recording into content. Your material is sent to them only to perform that task.
Your video is uploaded directly from your browser to SetLight’s own server. It is not routed through a third-party file service.
| Service | What we send | What it does |
|---|---|---|
| OpenAI | Audio, text and images from your recordings and brand | Transcription, writing titles/descriptions, analysing images, and generating some images |
| Recraft | Prompts and brand details | Generating brand and thumbnail images |
| fal.ai | An image to refine | One image-polishing step |
| Only if you connect a YouTube channel — your channel authorisation | Lets you connect your channel. Publishing is not switched on yet, so nothing has been posted. | |
| Zoho Mail | Your email address and the contents of messages we send you | Delivers our email to you — invitations, and account messages such as password resets |
| TikTok, Meta (Instagram/Facebook), X | Only if you connect that channel — your authorisation to post | Lets you connect the channel. Publishing is not switched on yet. |
If, and only if, you choose to connect a social account, SetLight will hold an authorisation to that account. The platforms this is built for are YouTube (Google), TikTok, Instagram and Facebook (Meta), and X. See section 4.
We do not sell your personal information, and we do not share it with anyone for their own advertising or marketing.
4. Connecting a social account (not active yet)
Publishing to social platforms is not switched on yet. No account has been connected and no posting happens today. When you do connect an account, SetLight will ask that platform only for the access it needs:
| Platform | Permission it would request — only if you choose to connect |
|---|---|
| YouTube | Permission to upload videos and read your channel’s own information |
| TikTok | Permission to read your basic profile and to upload and publish video |
| Permission to read your basic profile, publish content, and list your pages | |
| Permission to manage posts, read page engagement, and list your pages | |
| X | Permission to read your profile and to post on your behalf |
None of these permissions is in use today. They are requested only at the moment you choose to connect a platform, and publishing remains switched off. Connecting is always your choice, and you can disconnect a platform at any time from your account.
5. How long we keep things
Small text records — titles, descriptions, hashtags, transcripts, song boundaries, and links to anything you published — are kept indefinitely so your account history stays intact. Your account details are kept while your account is open.
For the large media files, SetLight has a retention schedule that deletes what you no longer need:
- a raw upload is deleted once a good processed copy has been made from it;
- content you uploaded but never processed is deleted after 30 days;
- content SetLight prepared but you never published is deleted after 90 days;
- a published item's source file is deleted 30 days after that post is confirmed live.
6. How we protect it
Passwords are stored only as a secured one-way hash, never in readable form. Access to the systems that hold your data is restricted. When SetLight is running as a hosted service, connections to it use encryption in transit. No system is perfectly secure, but we take reasonable steps to protect your information and limit who can reach it.
7. Your choices and rights
You can ask us to:
- see the personal information we hold about you;
- correct anything that is wrong;
- delete your account and your personal information; and
- get a copy of your content.
To make any of these requests, email legal@setlight.ai. We will respond within a reasonable time and, where a law sets a deadline, within it.
If you are in the EU or UK
Under the GDPR and UK GDPR you have rights to access, correct, delete, restrict and object to processing of your personal data, and to data portability. Where we rely on your consent, you can withdraw it — and withdrawing it is as easy as giving it. You can also complain to your local data protection authority. Some promotional permissions in the separate Founding Artist Pilot agreement are treated specially there; that agreement explains your withdrawal route.
If you are in a US state with a privacy law
Depending on your state (for example California, and other states with comprehensive privacy laws) you may have rights to know what we collect, to access and delete it, to correct it, and to opt out of sale or of targeted advertising. We do not sell personal information and we do not run targeted advertising, so there is nothing to opt out of on those points. To exercise any other right, contact us at the address above. We will not discriminate against you for exercising a right.
8. Where SetLight is available
SetLight is offered worldwide. If you use it from outside the country where our systems operate, your information may be processed in another country. We apply this policy wherever your data is handled.
9. Changes to this policy
If we change this policy we will post the new version here with a new version number and effective date, and — for material changes — show a notice inside the product. (We send transactional email — invitations and account messages such as password resets — through Zoho Mail. We do not send marketing email unless you opt in.) The version that applied when you accepted it is recorded, so we can always show you the exact text you agreed to.
10. Contact
Questions or requests about your privacy: legal@setlight.ai.