Privacy Policy

Personal Information: When you place an order, we collect your name, email address, and payment information. We may also collect details you provide about your song request, including personal stories, names, and relationship details that help our musicians create your song.

Usage Data: We automatically collect information about your device, browser type, IP address, pages visited, time spent on pages, and referring URLs. This data helps us understand how visitors use our site and improve your experience.

Communication Data: When you contact us via email or our contact form, we retain the content of your messages, your email address, and our responses to provide ongoing support.

Marketing Data: If you subscribe to our email list, we collect your email address and any preferences you indicate. You may unsubscribe at any time.

We use your information to: fulfill and deliver your custom song orders; process payments securely; communicate with you about your order status; respond to customer service requests; send marketing communications (with your consent); improve our website, services, and user experience; detect and prevent fraud or unauthorized access; and comply with legal obligations.

Legal Basis (GDPR): We process your data based on contractual necessity (to fulfill your order), legitimate interest (to improve our services), consent (for marketing), and legal obligation (for tax and regulatory compliance).

We do NOT sell your personal information. We never have and never will sell, rent, or trade your personal data to third parties for their marketing purposes.

Service Providers: We share limited data with trusted third-party service providers who assist with payment processing (e.g., Stripe), email delivery, website hosting (Vercel), and analytics. These providers are contractually bound to protect your data and use it only for the services they provide to us.

Musicians: The personal stories and details you share for your custom song are provided to our musicians solely for the purpose of creating your song. Musicians are bound by confidentiality agreements.

Legal Requirements: We may disclose your information if required by law, court order, subpoena, or to protect our rights, property, safety, or the safety of others.

We implement industry-standard security measures including SSL/TLS encryption for all data in transit, secure payment processing through PCI-DSS compliant providers, restricted access to personal data on a need-to-know basis, regular security assessments and vulnerability monitoring, and encrypted storage of sensitive data at rest.

While we take every reasonable precaution to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information to the fullest extent possible.

Essential Cookies: Required for basic site functionality, shopping cart, and checkout. These cannot be disabled.

Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics). Data is anonymized and aggregated.

Marketing Cookies: Used to deliver relevant advertisements and track campaign performance. You can opt out via your browser settings or by using industry opt-out tools.

You can control cookies through your browser settings. Note that disabling certain cookies may affect site functionality.

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; correct inaccurate or incomplete data; delete your personal data ("right to be forgotten"); restrict or object to processing of your data; data portability — receive your data in a structured, commonly used format; and withdraw consent for marketing communications at any time.

California Residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information (we do not sell your data). You will not receive discriminatory treatment for exercising these rights.

EU/EEA Residents (GDPR): You have all the rights listed above plus the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at support@songgift.app. We will respond within 30 days.

We retain your personal data only as long as necessary to provide our services and fulfill the purposes described in this policy. Order data is retained for a minimum of 7 years for tax and legal compliance. You may request earlier deletion of non-essential data at any time.

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will promptly delete it. If you believe a child has provided us with personal data, please contact us immediately.

Your data may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required by GDPR.

We may update this Privacy Policy from time to time. Material changes will be communicated via email to active customers and by posting a prominent notice on our website. The "Last updated" date at the top of this page indicates when this policy was most recently revised. Your continued use of our services after any changes constitutes acceptance of the updated policy.