Last Updated: December 1, 2025
Effective Date: January 1, 2026

1. Introduction

PFORM ("Company," "we," "us," "our," or "Service") is committed to protecting your privacy and ensuring you have a transparent experience on our website located at https://pform.live ("Website") and related services, including our AI-powered music generation, video concept creation, and social content workflow tools.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit and use our Website and services. Please read this policy carefully. If you do not agree with our policies and practices, please do not use our Website.

We comply with:

• Tennessee Information Protection Act (TIPA) (effective July 1, 2025)[1]
• Federal Trade Commission (FTC) Standards and Guidance
• Children's Online Privacy Protection Act (COPPA)[2]
• Americans with Disabilities Act (ADA) Compliance Standards
• YouTube and TikTok AI Disclosure Requirements

2. Information We Collect

2.1 Information You Provide Directly

Account Registration: When you create an account with PFORM, we collect:

• Full name
• Email address
• Phone number (optional)
• Password (encrypted)
• Business/organization name (if applicable)
• Profile information and preferences
• Content creator type (musician, video producer, social content creator)

Forms and Communications: When you submit forms, contact us, or communicate with our support team:

• Contact information (email, phone)
• Message content and attachments
• Subject matter and inquiry type
• Communication preferences

Payment Information: If you purchase services through our Website:

• Billing address
• Payment method information (processed securely through third-party payment processors)
• Transaction history and invoice records
• Subscription tier and feature usage

Content and User-Generated Data: Any content you upload, create, or store using PFORM services:

• Documents, audio files, and music projects
• Video concepts and scripts
• AI prompts and generation requests
• User-generated artwork and metadata
• Social media content drafts
• Licensing and attribution information

2.2 Information Related to AI-Generated Content

AI Generation Requests:

• Prompts and inputs you provide to our AI music/video/content generation tools
• Parameters selected for AI generation (genre, mood, style, duration, etc.)
• Generated outputs and your modifications
• Feedback provided to refine AI results
• Usage patterns for specific AI features

AI Output Data:

• Records of AI-generated music, video concepts, and social content created through PFORM
• Attribution and source information for training data incorporated
• Quality and performance metrics of generated content
• Your selections and customizations of AI outputs

Creative Metadata:

• Tags, descriptions, and categorizations you assign to content
• Licensing choices and copyright claims
• Publication and distribution intent
• Collaboration and sharing permissions

2.3 Information Collected Automatically

Device Information:

• Device type, operating system, and browser type
• Device identifiers (IP address, MAC address)
• Mobile device information
• Device settings and configurations

Website Usage Information:

• Pages visited and time spent on each page
• Clicks, interactions, and navigation patterns
• AI tools used and feature engagement
• Music/video/content generation frequency and parameters
• Referral source and exit pages
• Search queries within our Website

Cookies and Tracking Technologies:
We use cookies, web beacons, pixels, and similar technologies to:

• Remember your preferences and login information
• Understand how you interact with our Website and AI tools
• Deliver personalized content and recommendations
• Improve our services and user experience
• Prevent fraud and enhance security
• Track AI generation usage and performance

Types of Cookies:

• Essential Cookies: Required for basic Website functionality and AI tool operation
• Performance Cookies: Measure how you use our Website and AI features
• Functional Cookies: Remember your preferences and generation settings
• Targeting Cookies: Deliver personalized content and AI recommendations (requires consent)

2.4 Information from Third Parties

• Analytics providers (Google Analytics, similar services)
• Social media platforms (if you link your account or share content)
• Payment processors and financial institutions
• Communication service providers
• AI model providers and training data sources
• Business partners and integrations
• Public databases and data brokers
• Law enforcement and government agencies (when required by law)
• Copyright and music licensing databases (for content verification)

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

• Creating and maintaining your account
• Processing transactions and sending confirmations
• Providing technical support and customer service
• Delivering AI music generation, video concept, and content creation services
• Processing and refining AI-generated content based on your inputs
• Personalizing your PFORM experience and AI tool recommendations
• Training and improving our AI models (with appropriate safeguards)

3.2 AI-Specific Usage

For AI Music Generation:

• Processing your music prompts and specifications
• Generating musical compositions and arrangements
• Storing your generated tracks and project history
• Enabling collaboration and sharing of musical content
• Analyzing which musical styles and genres are most requested
• Improving AI music quality and diversity over time

For AI Video Concept Generation:

• Processing your video brief and requirements
• Generating video concepts, scripts, and storyboards
• Storing your video projects and creative iterations
• Enabling sharing with collaborators and platforms (YouTube, TikTok)
• Analyzing video concept trends and preferences

For AI Social Content Creation:

• Processing your content ideas and social media brief
• Generating social media posts, captions, and content variations
• Optimizing content for specific platforms (TikTok, Instagram, YouTube Shorts)
• Analyzing trending formats and audience engagement patterns

3.3 Communication

• Sending transactional emails (confirmations, receipts, updates)
• Responding to your inquiries and support requests
• Sending service announcements and important notices
• Notifying you of changes to our policies or services
• Alerting you to new AI features and content generation capabilities

3.4 Marketing and Promotional Activities (with consent)

• Sending newsletters, promotional emails, and marketing communications
• Informing you about new AI features, music styles, video templates, or social content tools
• Conducting surveys and promotional activities focused on AI tools
• Analyzing marketing campaign effectiveness
• Showcasing successful AI-generated content examples (with your permission)

Note on Sensitive Data: If we collect sensitive personal information (biometric data, health information, precise geolocation, racial/ethnic origin, religious beliefs, or financial account information), we obtain your opt-in consent before processing, as required by TIPA[1].

3.5 Analytics and Improvement

• Analyzing Website usage patterns and AI tool adoption
• Conducting research and developing new AI features
• Improving AI model accuracy, diversity, and output quality
• Understanding trends in music, video, and social content creation
• A/B testing different AI algorithms and generation parameters
• Identifying bias and fairness issues in AI outputs

3.6 Legal and Security Purposes

• Complying with legal obligations and court orders
• Enforcing our Terms of Service and other agreements
• Preventing, detecting, and addressing fraud and security issues
• Protecting our rights, privacy, safety, and property
• Responding to lawful requests from government authorities
• Copyright and licensing verification for AI-generated content
• Compliance with platform requirements (YouTube, TikTok, etc.)

3.7 Data Protection Assessments

We conduct Data Protection Assessments (DPAs) when processing information for:

• AI model training and refinement
• Targeted content recommendations
• Profiling activities with reasonably foreseeable risk of harm
• Sale of personal information[1]
• Processing of sensitive personal data

4. Legal Basis for Processing (TIPA Compliance)

Under Tennessee's Information Protection Act, we process personal information under the following lawful bases[1]:

• Consent: Processing with your explicit opt-in or opt-out consent
• Contract Performance: Processing necessary to provide AI services you've requested
• Legal Obligation: Processing required by law or regulation
• Legitimate Interests: Processing for our legitimate business interests (analytics, AI improvement, fraud prevention) - balanced against your privacy rights
• Vital Interests: Processing necessary to protect health, safety, or vital interests
• Public Task: Processing in the public interest or official authority

5. How We Share Your Information

5.1 Service Providers and Third Parties

We may share your information with:

• Payment Processors: Stripe, PayPal, or similar payment platforms (for transactions only)
• Cloud Infrastructure Providers: For secure data storage, backup, and AI processing
• Email and Communication Providers: SendGrid, Mailchimp, or similar services
• Analytics Providers: Google Analytics and similar tools
• AI Model Providers: Third-party AI services (Suno, Udio, OpenAI, similar platforms) for music/video/content generation
• Customer Support Tools: Zendesk, Intercom, or similar platforms
• Advertising Partners: For targeted advertising (with your consent)
• Social Media Platforms: Data required to publish your content to TikTok, YouTube, Instagram (with your authorization)
• Business Integrations: Third-party tools and services you authorize
• Music Licensing Services: For copyright verification and royalty management

All third parties are contractually obligated to maintain confidentiality and use your information only for specified purposes. AI model providers are required to respect your data privacy and comply with TIPA and FTC standards.

5.2 AI Training Data and Model Improvement

Important Note on AI Training:

• Your prompts and generated content may be used to train and improve our AI models, unless you opt-out
• We do not use AI-generated outputs to train models that could reproduce your creative work without attribution
• Training data is anonymized and de-identified when possible
• You may request that your data not be used for AI model training via opt-out request

5.3 Legal Requirements and Protection

We may disclose your information when required by law or to:

• Comply with court orders, subpoenas, or government requests
• Enforce our Terms of Service and legal agreements
• Protect against legal liability and fraud
• Protect the security and safety of our users and Website
• Respond to claims of illegal activity
• Comply with copyright and intellectual property enforcement

5.4 Business Transfers

If PFORM is involved in a merger, acquisition, bankruptcy, or sale of assets:

• Your information may be transferred as part of that transaction
• We will notify you of any such change and any choices you may have
• The acquiring entity will remain bound by this Privacy Policy (unless updated with notice)

5.5 De-identified and Aggregated Data

We may share aggregated, anonymized data that cannot identify you:

• For research and analytics on music/video/content trends
• For marketing and business development
• With partners and the public
• To benchmark AI model performance
• No consent required for de-identified data

Important: We do NOT sell your personal information to third parties for their direct marketing purposes without your explicit opt-in consent[1].

6. Data Retention

6.1 Retention Schedule

We retain information for as long as necessary to:

• Provide services to you
• Comply with legal and tax obligations
• Resolve disputes and enforce agreements
• Maintain business records and historical data
• Support AI model improvement and research

6.2 Specific Retention Periods

• Account Information: Retained during active use and 2 years after account closure
• AI-Generated Content: Retained as long as you maintain account access; 1 year after deletion per your request
• Music/Video/Content Projects: Retained for backup and recovery purposes (90 days after deletion)
• AI Prompts and Generation Parameters: Retained for 12 months for model improvement; may be anonymized
• Transaction Records: Retained for 7 years (tax and accounting compliance)
• Communications: Retained for 2 years or as required by law
• Cookies and Tracking Data: Generally retained for 12 months
• Marketing Opt-Out Lists: Retained indefinitely to honor preferences
• Logs and Security Data: Retained for 90 days (or as required by law)
• Copyright and Licensing Records: Retained for duration of content use plus 3 years

6.3 Deletion and Anonymization

Upon request, we will:

• Delete personal information no longer needed for stated purposes
• Delete or anonymize AI prompts and generation data per your request
• Anonymize and de-identify data when feasible
• Retain information only as required by law
• Maintain secure disposal procedures
• Provide confirmation of deletion within 30 days

7. Your Privacy Rights and Choices

Under TIPA, you have the following rights[1]:

7.1 Access Request

You have the right to request confirmation of what personal information we hold about you, including:

• Categories of information collected
• Source of the information
• Purpose for collection
• Recipients with whom we share information
• AI models trained with your data
• Copies of your AI-generated content and prompts

To submit an access request: Email legal@pform.live with subject line "Privacy Request - Data Access"

7.2 Deletion Request

You have the right to request deletion of your personal information, except where:

• Information is necessary to complete a transaction
• Information is required by law or regulation
• Information is needed for fraud detection or security
• Information is necessary to exercise free speech rights
• Information is part of legitimate business records

To submit a deletion request: Email legal@pform.live with subject line "Privacy Request - Data Deletion"

7.3 Correction Request

You have the right to request that we correct inaccurate, incomplete, or outdated personal information.

To submit a correction request: Email legal@pform.live with subject line "Privacy Request - Data Correction"

7.4 Opt-Out of Processing

You have the right to opt-out of:

• Targeted Advertising: We will not use your information to serve you personalized advertisements
• Profiling: We will not use your information for profiling activities
• Sale of Personal Information: We will not sell your information to third parties
• Data Processing for AI Model Training: We will not use your prompts or generated content to train AI models
• Marketing Communications: Opt-out of newsletters and promotional content
• Data Processing for Certain Purposes: Subject to legal limitations

To submit an opt-out request: Email legal@pform.live with subject line "Privacy Request - Opt-Out"

7.5 Processing Restrictions

You have the right to restrict our processing of your information in certain circumstances, including:

• If you believe information is inaccurate
• If processing is unlawful but you prefer restriction to deletion
• If we no longer need information but you need it for legal claims
• If you object to AI model training using your data

7.6 Data Portability

You have the right to receive your personal information in a portable, structured, and commonly-used format (CSV, JSON, etc.), and request that we transfer it to another service provider.

To request data portability: Email legal@pform.live with subject line "Privacy Request - Data Portability"

7.7 Rights Related to AI-Generated Content

You have the right to:

• Receive clear information about whether content was AI-generated
• Request removal of AI-generated content from our systems
• Opt-out of having your AI prompts used to train models
• Receive attribution if your style or work influenced AI training
• Know what personal information was used in AI model training

7.8 Rights for Children (COPPA Compliance)

If you are under 13 years old, we require parental or guardian consent before collecting, using, or disclosing your information. Parents may review, request deletion, or prohibit future collection of their child's information[2].

For users aged 13-18, certain data uses (AI training, targeted advertising) require explicit opt-in consent.

7.9 Response Timeline

We will respond to all requests within 30 days of receipt. If your request is complex, we may extend this period by an additional 30 days (60 days total).

7.10 Non-Discrimination

We will not discriminate against you for exercising your privacy rights. You will receive the same service and pricing regardless of whether you exercise any privacy rights.

8. Email Communications and Marketing

8.1 Email Preferences

• Transactional Emails: We send service-related emails (confirmations, password resets, support) that you cannot opt-out of while maintaining an account
• Marketing Emails: You can opt-out of promotional emails at any time
• Newsletter: You can subscribe to or unsubscribe from our newsletter using the link in each email
• Feature Updates: Notifications about new AI features and music/video/content tools (opt-out available)

8.2 Unsubscribe Options

Every marketing email includes an "Unsubscribe" or "Manage Preferences" link. Click it to:

• Unsubscribe from specific email types
• Update communication preferences
• Manage frequency of communications
• Opt-out of AI feature announcements

8.3 Do Not Call/Text

If we contact you by phone or text for marketing purposes, we comply with:

• National Do Not Call Registry: Respecting your preferences
• TCPA Compliance: Obtaining prior written consent for texts and autodials
• FCC Regulations: Honoring carrier requirements

9. Data Security and Breach Notification

9.1 Security Measures

We implement comprehensive technical and organizational security measures:

• Encryption: All data in transit uses SSL/TLS encryption; sensitive data encrypted at rest
• Access Controls: Role-based access and authentication requirements
• Data Minimization: Collecting only necessary information
• Security Audits: Regular assessment and testing of AI systems and infrastructure
• Employee Training: Staff training on data protection practices and AI safety
• Incident Response Plan: Procedures for addressing security incidents involving AI systems
• Backup and Recovery: Regular backups with recovery procedures
• Multi-factor Authentication: Available for account protection
• AI Model Security: Safeguards to prevent adversarial attacks on AI models

9.2 Breach Notification

If we discover a security breach involving your personal information:

• Notification Timing: We will notify affected individuals without unreasonable delay
• Notification Method: Email, phone call, or written notice
• FTC Notification: We notify the FTC if breach affects 500+ individuals
• Regulatory Notification: Compliance with TIPA breach notification requirements[1]
• Content: Information about the breach, steps you should take, our response, and AI systems affected (if any)

9.3 Your Responsibilities

You are responsible for:

• Maintaining confidentiality of your password
• Protecting your account credentials
• Notifying us immediately of unauthorized access
• Complying with our acceptable use policy
• Properly crediting AI-generated content when required

10. Third-Party Links and Services

Our Website may contain links to third-party websites and services:

• Not Endorsed: Third-party links do not constitute endorsement
• Not Our Responsibility: We are not responsible for their privacy practices
• Review Their Policies: Please review their privacy policies before sharing information
• No Obligation: We have no obligation to monitor third-party practices
• Third-Party AI Models: Links to Suno, Udio, OpenAI, or other AI services are subject to their respective privacy policies

Your use of third-party services is governed by their terms and privacy policies, not ours.

11. Cookie Policy and Tracking

11.1 Cookie Consent

We obtain your consent before placing non-essential cookies:

• Cookie Banner: Displayed on initial Website visit
• Consent Methods: Accept all, reject all, or manage preferences
• Tracking Preference Signals: Respecting Do Not Track (DNT) signals where supported
• Global Privacy Control: Respecting privacy control signals from your browser

11.2 Disabling Cookies

You can control cookie preferences through:

• Browser Settings: Most browsers allow you to block or delete cookies
• Cookie Management Tools: Third-party tools to control cookies
• Our Cookie Panel: Manage preferences directly on our Website
• Opt-Out Services: Services like Network Advertising Initiative (NAI)

Note: Disabling essential cookies may impact Website functionality and AI tool performance.

11.3 Third-Party Analytics

We use Google Analytics and similar tools:

• Data Collection: Collects Website usage information and AI tool engagement
• Opt-Out: Use Google Analytics Opt-Out Browser Add-on
• Privacy: Review third-party privacy policies for details

12. International Data Transfers

If you access our Website from outside the United States, your information will be:

• Transferred to and stored in the United States
• Subject to U.S. laws and regulations
• Protected by equivalent security measures
• Processed according to this Privacy Policy
• Subject to different data protection laws than your country of origin

By using our Website, you consent to such transfers.

13. California, Virginia, and Multi-State Privacy Compliance

While PFORM is based in Tennessee, we comply with privacy laws in all states where we operate:

• CCPA (California): If you are a California resident
• VCDPA (Virginia): If you are a Virginia resident
• CPA (Colorado): If you are a Colorado resident
• TIPA (Tennessee): If you are a Tennessee resident[1]
• COPPA: For users under 13 years old[2]

You have rights under applicable state laws, which are summarized in this Privacy Policy.

14. Privacy Policy Updates

We may update this Privacy Policy periodically:

• Review Regularly: Check back frequently for updates
• Notice of Changes: We will notify you of material changes via email or Website notice
• Effective Date: The "Last Updated" date appears at the top of this policy
• Acceptance: Your continued use of our Website constitutes acceptance of updated terms

15. Contact Us - Privacy Inquiries

For all privacy-related questions, requests, or concerns, please contact:

PFORM Legal Department
Email: legal@pform.live
Response Time: Within 30 days of receipt

Please include in your email:

• Your full name
• Email address associated with your account
• Detailed description of your request
• Proof of identity (if requesting personal data)