Privacy Policy

1. Introduction

SongStudio ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes the information we collect, how we use it, the parties to whom it is disclosed, the methods of disclosure, and the security practices we use to safeguard your information. By using our Service, you consent to the data practices described in this policy.

Data Controller. SongStudio is the data controller responsible for your personal data. For questions about how we handle your data, contact us at privacy@songstudio.com.

EU/EEA Representative (GDPR Article 27). As we may be established outside the European Economic Area, we comply with Article 27 of the GDPR where applicable. You may direct data protection inquiries to privacy@songstudio.com. We will update this page with any formal EU representative details if appointed.

2. Information We Collect

We collect the following categories of information:

• Personal information: Names (yours and the song recipient), email address, and account credentials. Payment information is processed securely by our payment processor; we do not store full credit card numbers on our servers.
• Content information: Stories, memories, recipient details, occasion, genre and voice preferences, and any other information you provide to create your personalized song. Your stories may voluntarily include sensitive information (e.g., health, religious beliefs, or other special-category data under GDPR Article 9). We process such information only with your explicit consent and solely to create your song. You may withdraw consent by contacting us, though that may affect our ability to complete your order.
• Generated content: Lyrics and audio we create for your order.
• Technical information: IP address, device and browser type, referral data (e.g., UTM parameters), and usage data (pages visited, time on site) for security, fraud prevention, and service improvement.

3. How We Use Your Information

We use the information we collect to:

• Create and deliver your custom song and manage your order
• Process payments securely through our payment provider
• Send order confirmations, delivery notifications, and respond to inquiries
• Prevent fraud, unauthorized access, and other misuse
• Comply with applicable laws and regulations
• Analyze usage to improve our service (in anonymized or aggregated form where possible)
• Send marketing communications only with your consent where required by law

No AI training on your content. We do not use your stories, memories, or personal submissions to train public or third-party AI models. Your content is used solely to create your personalized song.

Automated processing. Our service may use automated processing, including AI, to generate lyrics and music. This is essential to deliver the service and is performed under contract performance. You may request human review of your order by contacting privacy@songstudio.com.

Legal bases (GDPR). For users in the EEA/UK, we process data based on: contract performance (fulfilling your order), legal obligation, consent (e.g., marketing), and legitimate interests (security, improvement, fraud prevention) where applicable.

4. Information Sharing and Disclosure

We do not sell your personal information. We share information only as necessary to provide the service, with the parties described in Section 5 (e.g., hosting, payment, email, and music/lyric generation providers), and when required by law, court order, or to protect rights, safety, or property.

5. Third-Party Service Providers

We use third-party providers for hosting, database, storage, payment processing, email delivery, and (where applicable) music and lyric generation. These providers are bound by contracts that require them to protect your data. They may process data in the United States or other countries. We use providers that comply with applicable data protection frameworks (e.g., EU-US Data Privacy Framework where relevant). For a current list of sub-processors or Data Processing Agreements, contact privacy@songstudio.com.

6. Cookies and Tracking

We use essential cookies (e.g., authentication, session, security) necessary for the service to function. We may use optional analytics or marketing cookies with your consent where required. You can manage preferences via your browser or our cookie banner if provided. We honor the Global Privacy Control (GPC) signal where required by law as an opt-out of sale/sharing of personal information.

7. Data Retention

We retain your information as long as needed to provide the service and as required by law: order and account data for the duration of your relationship and for a period thereafter for legal, tax, and accounting purposes (e.g., up to 7 years where applicable). Generated songs and story content are retained as needed to fulfill your order and any revisions, then may be retained for a limited period for quality assurance before deletion. You may request deletion of your data by contacting privacy@songstudio.com; we will respond in accordance with applicable law.

8. Data Security

We use industry-standard measures: encryption in transit and at rest where applicable, secure storage of credentials, access controls, and secure payment processing. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the right to: access your data, correct inaccuracies, request deletion, data portability, object to or restrict certain processing, withdraw consent, and lodge a complaint with a supervisory authority. To exercise these rights, contact privacy@songstudio.com. We respond within the timeframes required by applicable law (e.g., 30 days under GDPR, 45 days under CCPA/CPRA). California residents: we do not sell or share your personal information for cross-context behavioral advertising as defined by the CCPA/CPRA.

10. International Transfers

Your information may be transferred to and processed in the United States and other countries where our providers operate. We use appropriate safeguards (e.g., Data Processing Agreements, Standard Contractual Clauses, or adequacy decisions) for transfers from the EEA/UK. By using the service, you consent to such transfers to the extent permitted by law.

11. Data Breach Notification

In the event of a breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities within the timeframes required by applicable law (e.g., 72 hours where required), including a description of the breach, likely consequences, and measures taken.

12. Children's Privacy

Our service is intended for users who are at least 18 years of age (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction). If you believe we have collected such information, contact us at privacy@songstudio.com and we will delete it promptly.

13. Third-Party Links

Our site may contain links to third-party websites. We are not responsible for their privacy practices or content. We encourage you to read their privacy policies.

14. Marketing and Communications

Transactional emails (order confirmations, delivery, support) are necessary for the service and cannot be opted out. Marketing emails are sent only with your consent where required. You may opt out of marketing at any time via the unsubscribe link or by contacting support@songstudio.com.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. Significant changes may also be communicated by email or a notice on the site. Continued use after changes constitutes acceptance. If you do not agree, please discontinue use and contact us regarding your data.

16. Contact Us

Privacy inquiries: privacy@songstudio.com. General support: support@songstudio.com. We aim to respond within 30 days.

See also our Terms of Service.