Privacy Policy

Effective July 27, 2026

This policy explains what CheckSong collects, how it is used, and the control you keep over it. The short version: your uploads are your evidence — we archive them to make your reports verifiable, we never sell them, and we never train on human recordings. Confirmed AI-generated uploads may be used to make detection better.

1. Who we are

CheckSong (checksong.com) is operated by HumanStandard AI Inc, doing business as HumanStandard ("HumanStandard," "we," "us"). CheckSong provides AI-music detection and derivative-work analysis for music and intellectual-property professionals. This policy describes what we collect, why, and the choices you have. It applies to the CheckSong website, console, and shared report pages.

2. Information we collect

Account information. When you create an account we receive your name, email address, and authentication identifiers from our sign-in provider. If you join as part of an organization, we receive the organization name and your membership in it.

Audio and case content. The service exists to analyze audio. We collect the audio files you upload, recordings retrieved at your direction from permitted sources, and the metadata you attach to them (filenames, client names, case names, ISRCs, notes). From each recording we derive technical artifacts: cryptographic hashes, acoustic fingerprints, spectral features, transcripts of sung or spoken content, and analysis results.

Requests and correspondence. If you submit feedback, a problem report, or a beta access request, we collect what you write, the page it was filed from, and a snapshot of the on-screen data needed to investigate it.

Usage and device data. We collect standard technical logs — IP address, browser type, pages visited, actions taken, and timestamps — used for security, debugging, and metering plan usage such as monthly scan counts.

3. How we use information

We use your information to run the analyses you request; to generate, store, and serve reports; to preserve evidentiary integrity (hashing and archiving the exact audio a report describes); to meter usage against your plan; to respond to support requests; to secure the service against abuse; and to improve the product.

Training. We never use human recordings you upload — your clients' masters and catalogs — to train our detection models; those models are trained on separately licensed and consented material. AI-generated uploads are treated differently: recordings that are determined to be AI-generated, including tracks you report as missed detections that are confirmed AI, may be used to improve our detection models. Where practical we ask before doing so, and this policy is your notice that AI-generated uploads may be used this way.

4. Sharing

We do not sell your personal information. We share data only with service providers who process it on our behalf — cloud hosting, file storage, authentication, and audio-processing infrastructure — under agreements limiting their use to providing services to us; with a metadata provider when you search commercial releases at your direction; and when required by law or to protect the rights, safety, or property of HumanStandard, our users, or the public.

Content becomes visible to others only when you make it so: creating a share link publishes a read-only page for that specific result, and anyone holding the link can view it, including the audio players on it, until you revoke the link. Report verification pages serve the canonical copy of a report to anyone holding its verification URL.

5. Retention

Case content and archived audio are retained while your account is active, because reports depend on the archived original for verification. Technical logs are retained for shorter operational windows. When you delete a track, case, or your account, we delete the associated content within a commercially reasonable period, except where a copy must be preserved to honor an issued report's verification, resolve a dispute, or comply with law.

6. Security

Audio and case data are stored in access-controlled infrastructure; API access is authenticated and scoped to your firm; report authenticity is anchored to cryptographic hashes. No system is perfectly secure, and we cannot guarantee absolute security, but we treat evidentiary integrity as a core product requirement, not an afterthought.

7. Your rights

You may access, correct, export, or delete your data by using the product's controls or contacting us. Depending on where you live, you may have additional statutory rights (such as under the GDPR or the California Consumer Privacy Act), including the right to lodge a complaint with a supervisory authority. We honor verified requests within the timelines those laws require.

8. International transfers

We are based in the United States and process data there. If you access the service from elsewhere, you understand your data will be transferred to and processed in the United States.

9. Children

CheckSong is a professional tool. It is not directed to anyone under 18, and we do not knowingly collect data from them.

10. Changes

We will post any changes to this policy on this page and update the effective date. Material changes will be announced in the product or by email before they take effect.

Questions about this document: rasha@hsverify.com