Bandlab
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- Staff may review your content; the policy does not describe an opt-out.
You keep your music, but they take a broad license, auto-renew paid plans with no refunds, and can close you anytime.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, music and posts, device IDs, logs, cookies, and analytics.
Read the exact line
Privacy policy
“When you use a mobile device like a tablet or phone to access the Services, we may access, collect, monitor, store on your device, and/or remotely store one or more “device identifiers.””
Training
They run the app, personalize content, show ads, and improve the service.
Read the exact line
Privacy policy
“to provide you with personalised Content, updates on other Users’ activities and online advertisements on products that you might be interested in to improve your customer experience;”
Sharing
Related companies, vendors, advertisers, and analytics firms can get your data.
Read the exact line
Privacy policy
“We may provide Information to Third Party advertisers so that they can notify you of events or products which may be of interest to you.”
Kept
They do not say a clear time limit; deleted posts can stay in caches and archives.
Read the exact line
Privacy policy
“If you delete Information or Content which you have uploaded or posted on the Services, copies may remain viewable in cached and archived pages of the Services”
Controls
Email privacy@bandlab.com to correct, restrict, or delete; unsubscribe from marketing emails.
Read the exact line
Privacy policy
“If you (i) wish to update or correct your Information, (ii) wish to request for information from us on what Information of yours we have”
Fine print
Paid membership auto-renews with no refunds; they can close you anytime.
Read the exact line
Terms of service
“There will be no refunds for the Membership Fee that has been paid, and no credits for partially used Membership periods.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Email to delete or correct your data
privacy@bandlab.com (Data Protection Officer)
Cancel membership before renewal
Account Membership Settings
Unsubscribe from marketing
Unsubscribe link in emails or support@bandlab.com
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
You still own your songs, but BandLab can copy, change, share, and them for the product and ads.
Read the exact line
Terms of service
“you hereby grant us a worldwide, non-exclusive, , and transferable licence to access, use, reproduce, distribute, publicly display, publicly perform, adapt, synchronise, prepare derivative works of, compile, make available and otherwise communicate Your Content to the public, in connection with the Services and our (and our successors’ and Related Entities’) business, including the distribution of advertising or other promotional material through the Services.”
For example, they could use your track in a promo or let a partner show it even after you leave, until they take it down.
They can shut your account instantly without warning for almost any reason.
Read the exact line
Terms of service
“In our sole and absolute discretion, we may with immediate effect, with or without prior notice, suspend or terminate your Account and/or access to the Services (or any part thereof) for any reason whatsoever”
For example, unused accounts or a rule they think you broke could vanish overnight with no refund.
If someone sues over your use or your uploads, you may have to pay BandLab’s legal bills.
Read the exact line
Terms of service
“you hereby agree to and the Indemnitees from and against any claims”
For example, a copyright fight over a sample you uploaded could leave you covering their lawyers.
Membership keeps charging until you cancel, and you do not get money back for unused time.
Read the exact line
Terms of service
“There will be no refunds for the Membership Fee that has been paid, and no credits for partially used Membership periods.”
For example, canceling mid-month still costs the full month.
Your phone ID can be used to track you for personalized ads.
Read the exact line
Privacy policy
“A device identifier may deliver information to us or to a Third Party partner about how you browse and use the Services and may help us or others provide reports or personalised content and ads.”
For example, how you use the app could help an advertiser target you.
They say they do not sell data as a default, but they still share with advertisers and others listed.
Read the exact line
Privacy policy
“We will not rent or sell your Information to Third Parties without your consent, except as noted in this Privacy Policy.”
For example, an advertiser might still get info so they can pitch concerts to you.
Education accounts are not supposed to get third-party ads.
Read the exact line
Privacy policy
“However, your Information will not be used for advertising or marketing purposes.”
For example, a student class account should not see concert ads from partners.
Your songs stay yours; they take a license, not ownership.
Read the exact line
Terms of service
“As between you and us, you retain ownership of all Content that you Submit through use of the Services (“Your Content”). We do not claim any ownership rights over Your Content.”
For example, you can still license the same track elsewhere.
Under-13s need parental or school consent; they say they will delete if they find otherwise.
Read the exact line
Privacy policy
“We do not knowingly collect Information from children under the age of 13 without parental consent.”
For example, a parent can email privacy@bandlab.com to remove a child’s data.
Words to know
Legal words from the lines above, in plain English.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- consent
- Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
How we got here · grade D · score 37/100 · 15 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
They collect account and profile info, uploads, plus logs, cookies, analytics, and device identifiers.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Vendors may review content for compliance; they do not offer an opt-out from that review.
Are you profiled or tracked for advertising?
They use device IDs and share with third-party advertisers for personalized ads, except school use.
Do they sell or share your data, and can you opt out?
They say they do not rent or sell without consent, but they share with related companies, advertisers, and analytics.
What rights do they take over what you type and what the AI makes?
You own uploads, but you grant a worldwide, sublicensable, transferable license; comments stay licensed forever.
How long do they keep your data after you delete it, and can you delete it in the app?
You ask the DPO by email to delete; cached and archived copies may remain.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they require reasonable security and comparable protection when data leaves Singapore.
Is there a real age gate, and are teens protected?
You must be 13+ with parent permission if under 18; COPPA consent forms exist, but age is largely self-declared.
Will they tell you when the rules change, and is the policy specific?
Terms are dated; they email or in-app notice for material terms changes. Privacy can change and continued use counts as acceptance.
Can they close your account without warning, and can you get your data out first?
They may suspend or terminate immediately with or without notice for any reason; they do not give an export file.
If something goes wrong, who pays?
Service is as-is with broad liability limits, and you must indemnify them for claims tied to your use and content.
Do subscriptions renew on their own, and can you get a refund?
Membership auto-renews; paid fees and tokens are generally non-refundable.
The privacy policy is 5,178 words at a college level (Flesch reading ease 41.4); the terms are 19,181 words at a professional or legal expert level.
