Nafy.ai Privacy Policy

Last Revised: October 9, 2026

This document describes how Nafy.ai collects, stores, and processes your personal information when you use our AI music generation platform.

Nafy.ai is operated by OMNIRA LABS PTE. LTD., Singapore. OMNIRA LABS PTE. LTD. is the controller of the personal information described in this policy. Our registered address is 9 RAFFLES PLACE, #06-00, REPUBLIC PLAZA, SINGAPORE 048619.

1. Information We Gather

Data you provide directly:

  • Registration details (name, email, password)
  • Billing and payment information
  • Support tickets and correspondence

Data collected automatically:

  • IP address and approximate location
  • Browser type and operating system
  • Pages visited and features used
  • Device identifiers

2. Why We Need Your Data

We use the information collected to:

  • Operate and improve our music generation service
  • Process payments and prevent fraud
  • Send account notifications and respond to inquiries
  • Analyze usage trends to enhance features

3. Cookies and Tracking

Our website uses cookies and similar tracking technologies for:

  • Remembering your login and preferences
  • Understanding how visitors navigate our site
  • Measuring marketing campaign effectiveness

4. Protecting Your Information

We deploy encryption, firewalls, and access controls to keep your data safe. While no system is 100% secure, we continuously monitor and update our defenses against threats.

5. Third-Party Service Providers

We share limited data with trusted vendors who help us:

  • Process credit card and payment transactions
  • Host our infrastructure and store data
  • Send transactional emails

6. Children's Privacy

Nafy.ai is designed for users aged 13 and older. We do not knowingly collect information from children. If we discover that a child under 13 has registered, we will delete their account and data promptly.

7. Your Rights

Depending on your location, you may have the right to:

  • Access a copy of your personal data
  • Correct inaccurate information
  • Request deletion of your data
  • Opt out of marketing communications

8. How to Opt Out

Marketing emails: Click the unsubscribe link at the bottom of any promotional email, or update your notification settings in your account dashboard.

Cookies: Adjust your browser settings to block or delete cookies. Note that some site features may not work properly without cookies.

Data requests (GDPR/CCPA): Email [email protected] with your request. We will respond within 30 days.

9. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be announced via email or a prominent notice on our website before they take effect.

10. Contact Us

Questions or concerns about this policy? Reach out:

OMNIRA LABS PTE. LTD.
9 RAFFLES PLACE, #06-00, REPUBLIC PLAZA, SINGAPORE 048619
UEN: 202623783M

Website: nafy.ai
Email: [email protected]

ChatGPT App Privacy Addendum

Updated October 9, 2026. This section describes the Nafy AI tools and preview component used through ChatGPT. Use the connection only if you are at least 13 years old and meet any higher minimum age required where you live.

Account linking. We use your existing Nafy account and session to grant the permissions you approve. OAuth shares your verified email and account identity with the connecting client for account linking. Tool results do not include your internal account ID, password, payment details, or access tokens. We store authorization grants and protected tokens to maintain and revoke the connection.

Tool inputs and outputs. Depending on the tool you request, Nafy receives music settings, titles, genre, mood, instruments, tempo, model, original lyrics, generation references, library filters and pagination cursors. We return draft settings and approval links, credit balances and costs, generation status, music titles and styles, availability information, and temporary audio or cover links. The tools access only the linked account. These results are shared with ChatGPT in your conversation; OpenAI's applicable privacy policy governs its processing.

Generation and safety providers. We send music settings and lyrics you confirmed in ChatGPT to the configured music generation provider (PayAPI or Kie/APIBox), whose output-safety controls apply to generated audio and covers. We send request text to OpenAI's moderation API before generation starts. Nafy does not send generated audio to OpenAI for a second transcription or output-moderation pass. Checks can fail or miss content; no automated filter guarantees that every result is safe. Hosting and media storage use Vercel, PostgreSQL and Cloudflare R2.

Retention, storage and sharing. Draft approval expires after 15 minutes. Access tokens expire after five minutes, refresh tokens after no more than 30 days, and conversation media links within one day or sooner if the underlying storage entitlement expires. OAuth grants and consent records remain until you disconnect, revoke access or delete your account. Draft settings, generation records and charging/refund records remain with your Nafy account for service operation, support and transaction reconciliation until the account is deleted, except where a longer period is required for legal, fraud-prevention or accounting obligations. Generated music follows your existing storage entitlement. Anyone you share a temporary media link with can open it until it expires. New generations are private rather than posted to a public feed. The preview has no advertising or analytics scripts of its own, and Nafy does not sell ChatGPT tool data or use it for advertising.

Your choices. Each generation needs your separate approval of its credit cost; connecting the account does not authorize a charge. You may disconnect the integration on Nafy to revoke its grants and existing conversation media links, or remove it from ChatGPT. Disconnecting does not delete your songs or cancel a job that has already started. To request access, correction or deletion of app-related data, contact [email protected].