Privacy Policy

This policy covers personalizedsong.org: making a song, buying it, giving it as a gift, and receiving one. It is written to be read, not filed. If something here is unclear, write to support@personalizedsong.org and we will explain it.

Who is responsible

PersonalizedSong is the data controller for the personal data described here. Privacy contact: support@personalizedsong.org.

What we collect

Your email address. You give it to us to get your free preview. We use it to send your preview, receipt and song, to sign you in, and to keep your orders together under one account. There is no password: you sign in with a one-time link we email you. If we offer sign-in with Google and you use it, Google sends us your email address, name and profile picture — we never receive your Google password.

What you tell us for the song. The name of the person the song is for and an optional nickname, the name you sign it with, your relationship, the occasion and its date, your answers to the story questions, the style, voice and mood you choose, and how to pronounce names. Your story can include personal details about the person the song is for, so only include what you are comfortable sharing and what you believe they would be comfortable with.

What we make for you. The lyrics, every edit and version of them, the preview and the full recordings, including every re-record.

Gift details. The note and the photo you add to the gift page (we remove location and camera data from the photo before storing it), the recipients' email addresses if you schedule delivery, the time and time zone you choose, whether and when the gift page was opened, and any reply the recipient sends you.

Purchase records. The order number, what was bought, the amount, the currency, the date, the payment status, any refund, and the payment record our merchant of record returns to us. Card numbers and bank details never reach our servers — they go directly to the merchant of record.

Free-preview and abuse checks. To keep the free preview to one per person, we keep a normalised form of your email address, a salted hash of your IP address, and a device identifier your browser generates. The email step is protected by Cloudflare Turnstile, an invisible check that tells people and bots apart (see below).

Moderation records. The outcome of every automated check on the text you write and on gift photos, and any decision a person makes when reviewing it. When a text is blocked or held for review, we also keep up to 500 characters of it so it can be reviewed and appealed.

Help requests. What you send through Need help? or to our mailboxes, and our replies.

Usage and device data. Server logs generated by our hosting provider (IP address, URL, response code, timestamp, user agent, referrer), and product events such as which step of the song questions was completed or whether a preview was played, tied to a random identifier. For website traffic we use Plausible Analytics, which counts visits in aggregate without cookies and without storing your IP address.

Cookies and similar storage. A session cookie so you stay signed in; a random analytics identifier; a utm_source cookie for 30 days if you arrive from a campaign link; and your browser's local storage, which keeps your unfinished answers for up to 14 days so you can pick up where you left off. We do not use advertising cookies.

Information about the person the song is for

A song is about someone else, so you will tell us about them. We use what you tell us only to write, record and deliver that song. If you schedule delivery, we email the gift to the addresses you give us (up to 3); we use a recipient's email address only for that delivery and never add it to a marketing list. The gift email includes a Report this link. If you received a gift and want your details removed, email support@personalizedsong.org.

Why we use it, and the legal basis

• Making and delivering your song — the preview, the full song, re-records, name fixes, the gift page and scheduled delivery. Legal basis: performance of a contract.
• Taking payment, refunds and preventing fraud, including abuse of the free preview. Legal basis: performance of a contract; legitimate interests.
• Moderating text and photos under the content policy. Legal basis: legitimate interests in running a safe, lawful service; legal obligation where content is illegal.
• Answering help requests. Legal basis: performance of a contract.
• Security and availability — rate limiting, bot checks, abuse detection, logs. Legal basis: legitimate interests.
• Improving the product through analytics. Legal basis: legitimate interests.
• Service email — sign-in links, preview ready, receipt, song ready, gift notices. Legal basis: performance of a contract.
• Reminder and gift-idea emails, only if you opted in. Legal basis: consent.
• Tax and accounting records. Legal basis: legal obligation.

We do not sell your personal data, we do not use it for targeted advertising, and we do not use it for automated decisions that produce legal effects for you.

Emails we send

Service emails are part of the service and do not need your consent: your sign-in links, "your preview is ready", your receipt, "your song is ready", re-record notices, gift notices (scheduled, reminder, delivered, opened, reply) and answers to help requests.

Reminder emails — for example a note that your preview is still waiting, or a reminder before the date you gave us — are sent only if you tick the box to receive them when you enter your email. The box is never ticked for you. Every one of these emails has an unsubscribe link, and unsubscribing stops them for every order under your email address. We do not send them while a help request of yours is still open.

Who we share it with

We use the following processors. Each receives only what it needs.

• Cloudflare (hosting, Workers, D1 database, R2 storage) — everything the service stores or serves, including your songs and gift photos in a private R2 bucket.
• Cloudflare Turnstile (bot check on the email step) — information about your browser and device and how the check runs, used to tell people and bots apart. Cloudflare processes it under the Cloudflare Turnstile Privacy Addendum.
• AI model providers — OpenRouter (which passes lyrics requests to DeepSeek) and fal.ai (which runs the MiniMax and Mureka music models and the photo safety check), as named in the AI models we use list. They receive the story, lyrics and settings a step needs, and fal.ai also receives a photo you add to a gift page so it can be checked. They receive no account data.
• Waffo Pancake or Creem, as shown at checkout (payments) — our merchant of record. It acts as the reseller of the service to you, handles tax and invoicing, and receives the details you enter at checkout directly; card numbers never reach our servers. Its buyer terms and privacy notice also apply to your purchase.
• Waffo Prompt Sift (text screening) — receives the text being checked only, to decide whether it is allowed, and does not store the text it checks.
• Plausible Analytics (website analytics, hosted in the EU) — the page address, referrer, browser, device type and a country derived from your IP address, which Plausible does not store. It sets no cookies and builds no profile of you.
• Resend (email) — the recipient's email address and the message content, for every email we send.
• Google — only if you choose to sign in with Google.

We also disclose data where the law requires it, to respond to a lawful request from a public authority, to protect a child's safety, or to establish or defend a legal claim.

International transfers

Our processors operate in the European Economic Area, the United Kingdom and the United States; as the terms say, AI model providers may also process the data a step needs outside the EEA, the UK and the US. Where our processors move personal data out of the EEA or the UK, the transfer is covered by the European Commission's Standard Contractual Clauses (and the UK Addendum), or by an adequacy decision.

How long we keep it

• Paid songs, their lyrics and gift pages — kept for as long as we operate the service, so the song and its gift page keep working, unless you ask us to delete them.
• Previews you did not buy, with their story and lyrics — kept so you can come back to them. We may delete the recording of a preview that was never bought 30 days after it was made.
• Gift photos — kept with the gift page; when you replace a photo, the old one is deleted.
• Account data and free-preview checks — kept while the account exists.
• Orders, payment and refund records — kept for at least 7 years, because tax and accounting law requires it.
• Server logs — up to 7 days.
• Help requests and support email — 2 years after the conversation ends.
• Moderation records — kept while they may be needed for appeals and for compliance reviews by our payment partner. The text kept in them is erased when you close your account; the decision itself is kept.

Deleting your data

To delete your songs, stories and gift details, email support@personalizedsong.org from the address you ordered with. We delete your stories, lyrics, recordings, gift notes, gift photos and recipients' addresses within 30 days and confirm when it is done. Your gift pages stop working when we do this. Orders, payment and refund records are kept for the accounting period above.

Closing your account. If you are signed in, you can also close your account yourself from Settings. This ends your sessions, removes your sign-in connections (such as Google) so that signing in again later starts a new, empty account, erases the text kept in moderation records, and irreversibly anonymises your name, email address and profile picture. Closing your account on its own does not delete your songs, stories or gift details; to have those deleted, email us as described above. Private files are then deleted on the schedule on this page, or sooner when you ask.

Security

All traffic is encrypted with TLS. There are no customer passwords to steal: sign-in links expire after 15 minutes and are stored only as hashes. Songs and gift photos live in private storage and are served only through short-lived signed links. Order and gift links are long random tokens and are kept out of search engines. Text you write is redacted and truncated before anything is written to a log. No system is perfectly secure; if a breach is likely to put your rights at risk we will notify the competent authority within 72 hours and tell you directly where the law requires it. To report a vulnerability, write to legal@personalizedsong.org.

Children’s privacy

Some of the people songs are made for are children, so we take this seriously.

• PersonalizedSong is not directed at children under 13. We do not knowingly collect personal information from a child under 13 without verifiable consent from a parent or legal guardian, as required by the U.S. Children's Online Privacy Protection Act (COPPA) and similar laws.
• Songs for children are made and bought by adults. A child's name and the details you share about them are used only to make and deliver the song, are never shown on anything public, and are never used for advertising.
• Parents and guardians can, at any time, review the personal information we hold about their child, ask us to delete it, and refuse further collection, by emailing support@personalizedsong.org. We will verify that the request comes from the child's parent or guardian before acting on it.
• If we learn that we have collected personal information from a child under 13 without parental consent, we delete it.
• Where the age of digital consent in your country is higher than 13 (for example up to 16 in parts of the EU), that age applies instead.

Your rights

Wherever you are, you have the right to access, correct, delete, restrict or port your personal data, to object to processing based on legitimate interests, to withdraw consent, and to complain to your data protection authority. Email support@personalizedsong.org from the address you used with us; we answer within 30 days and do not charge for this.

Changes to this policy

We may update this policy. Material changes are reflected in the date at the top of this page and, where appropriate, announced through the service.

Contact

• Privacy questions, data requests, parents and guardians, anything else: support@personalizedsong.org
• Legal notices, security reports and copyright complaints: legal@personalizedsong.org