TropusPrivacy Policy
Last updated: 26 August 2026
1. Who we are
Tropus is a service by Llull Lab (Firat Ilim, entrepreneur individuel), 61 rue de Lyon, 75012 Paris, France. Data controller contact: contact@llulllab.com.
2. What we process, and why
- Your email address. We use it only to send you a one-time code and to limit abuse. There is no account. Abuse limiting is applied to a one-way hash of your address, not the address itself. We do not use your address for marketing and we do not share it.
- Your prompt and any lyrics. The text you submit is processed to compose your song. Please do not include personal information about yourself or others in a prompt or in lyrics.
- The generated track. The audio file Tropus produces for you, stored so you can play and download it.
- Technical data. Basic request metadata and, briefly, your IP address, used to keep the service reliable and to prevent abuse.
Legal bases: providing the service you ask for (GDPR Art. 6(1)(b)); keeping the service reliable and preventing abuse (Art. 6(1)(f), legitimate interest).
3. How your song is generated
Your prompt and any lyrics are processed by a computational model to compose the song. This generation step may be carried out by a model provider located outside the European Union; where that is the case, the transfer is covered by the European Commission's Standard Contractual Clauses (GDPR Art. 46). We do not use your prompts, lyrics, or songs to train our own models, and we do not authorise our providers to train theirs on your content.
4. Where data is held
The one-time code is held briefly in an EU-based cache and expires automatically (within 24 hours). The application and the audio files are hosted within the European Union (Hetzner, Germany). Our transactional email provider, which sends your code, is established in the United States and is covered by Standard Contractual Clauses; it receives your email address and the code, not your prompt.
5. How long we keep it
- Sign-in code: expires within 24 hours, or as soon as it is used.
- Your generated track: kept so you can download it, then cleared; it is not archived for you, so please save your own copy.
- Abuse-limiting counters and short technical logs: kept for a short period, then removed.
6. Cookies and tracking
Tropus uses no advertising cookies, no tracking cookies, and no third-party analytics. Strictly necessary local storage may be used on your device for the player and session.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability, and objection. Write to contact@llulllab.com and we will answer within one month. You may lodge a complaint with the French supervisory authority (CNIL).
8. Changes
We post material changes on this page and update the date above.