Privacy Policy

Information we use

A song begins with the details you choose to share: a recipient’s name, the occasion, your memories, message and creative choices. Lyrics and music are generated together. A remake also uses the title and lyrics you edit. Gift preparation may include photos, a note and a signature.

The email supplied before composing is saved with your song for service updates, including readiness, failures and one unfinished-payment reminder. After purchase, we use your checkout email for payment confirmation, gift updates, one unfinished-gift reminder and your published share link. A paid order also needs a receipt and recovery address, transaction status and payment reference. If you contact us, we receive your contact details and message. Do not send a password, full card number or information you are not authorized to share.

Your information

Your story, musical choices and email are saved when you create a song. Our music providers process the creative details to generate lyrics and audio, which are stored privately. The draft you are writing stays in this browser until you create your song. Clearing access cookies can remove access to guest songs; a private song link alone cannot restore it.

Gift edits and photos are saved when you select Save changes. You choose when to publish the first gift link. Saved edits update an existing song page; gift-package changes appear once their new files are ready. We email the gift link after you publish. Sign-in and paid-order recovery use your account and purchase details to restore access.

Why information is processed

We use the information needed to provide the requested song and gift, deliver service messages, administer purchases, answer support requests and protect the service. Where applicable, the legal basis is fulfilling a contract or steps you request before it, legitimate interests in security and service operation, legal obligations, or your consent.

We do not sell personal information or publish your story, photos, song or reaction as a public example without separate permission. An email for song updates does not enroll you in marketing emails.

Service providers and AI

Cloudflare hosts the site and stores your files. You can sign in with Google, and Stripe processes payments. These providers receive the information needed to deliver their services, including technical request data. Stripe handles payment card information; we do not store your full card number.

Google Lyria, accessed through the Gemini API, generates the lyrics and music together. It receives the creative inputs and, for a remake, the edited words. Your notification email and access credentials are excluded from music prompts. Operational prompt diagnostics retain creative text; external analytics excludes it. Gemini creates song covers from your story and an optional reference photo. Your photo is cropped and compressed in your browser; only the prepared crop is uploaded privately and sent to Google for the requested cover; your notification email and access credentials are excluded.

PostHog helps us understand service usage, purchase sources and problems through limited action events and error categories. These events exclude names, stories, lyrics, gift photos, email addresses and access tokens. We keep normalized campaign labels, referring domains and public entry pages in this browser for up to 30 days, and save a source snapshot with a song and order. We also use PostHog to reconcile Stripe payment, refund and customer records, which may include billing contact details supplied to Stripe. We do not use session recordings or advertising profiles. Security records may include request and device information.

We use Google Analytics to understand page visits, navigation and website usage. Google receives analytics cookie identifiers, page paths with private song/gift identifiers and access credentials removed, limited referral information and browser/device information. We do not send your creative text, photos, email address or personalized page titles to Analytics. See the Cookie Policy for information about browser storage and controls.

When Google Customer Reviews is enabled, its order-confirmation invitation shares your order reference, checkout email, billing country and digital delivery date with Google. Google sends a review survey only if you choose to participate. The invitation excludes your story, lyrics, photos and gift access links. Participation is optional and does not affect your purchase.

Providers may process information outside your country. Any international transfer must use the safeguards required by applicable law.

Who can open a gift link

Anyone with a published gift link can open the purchased song and included gift contents. Share that link with care. It is not a password-protected invitation, and there are no audience-permission settings on a published gift.

You can open a private song through the browser or account that created it, or by recovering a purchased song with its purchase email. Opening the same URL in another browser does not provide access to the song or its original story.

Keeping and deleting information

Unpurchased song previews are normally kept for 30 days; purchased recordings do not expire automatically. We keep records needed to investigate unfinished work, payment issues and support requests. Paid-order recovery checks the purchase email before restoring access to purchased songs.

Draft autosave stays on the device until site data is cleared. Generated recordings and covers are stored privately on the service. Gift photos and finished gift files are stored privately until shared through a published gift. Abandoned photo uploads, replaced gift files, settled reference uploads and unused covers are scheduled for deletion. A published gift retains its files until explicitly updated or deleted. We retain support, payment, fraud-prevention and legal records for the purposes and periods required to handle the request or meet applicable obligations. A deletion request may not remove records we must legally keep.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete or receive a copy of personal information, object to or restrict processing, withdraw consent, or complain to a data protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal.

Send a request to privacy@thesongforyou.com. We may need information to verify the request and prevent disclosure to someone else. Tell us the relevant account or order reference; do not send identity documents unless we explain why they are needed and how to provide them securely.

Children and sensitive information

The service is intended for adults aged 18 or older. A song may celebrate a child, but the person using the service must be an adult with appropriate permission to share the child’s information or photo. Avoid unnecessary health, identity or other sensitive details.

If you believe a child has used the service or someone has shared information without permission, contact privacy@thesongforyou.com.

Policy changes

We will update this policy when the connected services or processing practices change. Material changes require appropriate notice. The revised date appears at the top of the page.