privacy
Privacy Policy
This policy explains what information we collect, why we collect it, who we share it with, and how we use it to create, sell, deliver and support your personalized song.
songs2you decides how the information described here is used. If you have any question about your data, or want to exercise any of the rights in section 9, write to [email protected].
1. What we collect
What you give us. Who the song is for, the name of the person it honours, the musical style and voice you choose, the occasion, the qualities and moments you describe, your special message, and — for an additional song bought as an add-on — the same details for that second person. At checkout: your full name, email address and phone number.
What we record automatically. A browser identifier, the page you visited, where your visit came from (including campaign parameters in the link), and events such as starting a preview, opening checkout, paying, and accessing your order. We also record your IP address and browser user-agent for security and fraud prevention.
What we never see. Your card number, expiry date and security code are entered directly into Stripe's payment form and never reach our systems. We only receive confirmation of whether the payment succeeded.
2. Information about other people
The story you send is likely to contain information about someone else: their name, your relationship, family facts, dates and personal memories. By sending it, you confirm that you are entitled to share it. Please do not include sensitive information that is not needed — health, religion, sex life, political opinion, racial or ethnic origin, details about children, or private matters. If you do choose to include it, we use it only as far as necessary to create the song you asked for.
3. Why we use it
To write the lyrics, produce the preview and the complete song, run any remakes you are entitled to, and produce the add-ons you bought. To identify your order, process payment, confirm payment status and release your delivery. To send you transactional emails, access links and support replies. To prevent fraud, abuse, chargebacks, unauthorized access and security problems. To measure how the site, the sales funnel and our advertising campaigns perform, and to find technical failures. To meet legal, tax and accounting obligations and to respond to lawful requests from authorities.
4. Our legal grounds
We rely on performance of a contract and the steps leading up to it (your order); compliance with legal obligations; our legitimate interests in security, support, fraud prevention, service improvement and measurement; the establishment or defence of legal claims; and your consent where the law requires it or where you have opted in to a specific purpose. Where we rely on consent, you can withdraw it at any time; that does not affect processing already carried out on another valid ground.
5. Who we share it with
We share only what is necessary, with providers that operate parts of the service on our behalf:
Payment: Stripe. Hosting, database and file storage: Supabase and Cloudflare. Lyrics and music generation: Anthropic, OpenAI and KIE/Suno, which receive the details of your order in order to produce the text and the audio. Email delivery: Brevo. Advertising measurement and attribution: Meta, TikTok, RedTrack and Utmify, which receive conversion events; where applicable, your email or phone number may be shared in a protected (hashed) form for conversion measurement. We may also disclose information where required by law, by an order from an authority, to defend legal claims, or to protect rights.
We do not sell your personal information.
6. Cookies, pixels and advertising
We use cookies, identifiers, pixels and event tracking — including the Meta Pixel, the TikTok Pixel and our own analytics — to measure visits, conversions, campaigns, errors, security and performance. These record events such as viewing a page, starting checkout, completing a purchase and opening your order.
7. International transfers
Some of our providers store or process information outside your country, including in the United States. We transfer information only where it is necessary to operate the service, and we work with providers that offer contractual, technical and organisational safeguards compatible with applicable data protection law.
8. Security and retention
We apply reasonable security measures, access controls and operational separation to reduce the risk of unauthorized access, loss, alteration or disclosure. No digital system is completely immune to incidents, but we work to prevent, detect, mitigate and — where the law requires it — report them.
We keep information for as long as we need it to produce and deliver your song, provide support, let you recover your download, prove transactions, prevent fraud, meet legal obligations and defend legal claims. When it is no longer needed, information may be deleted, anonymized, or kept in a minimal form for audit, security and legal compliance.
9. Your rights
You can ask us to confirm what we hold about you and to give you access to it; to correct it; to delete it; to restrict or object to how we use it; to receive it in a portable form; to tell you who we have shared it with; and to withdraw consent. Write to [email protected] from the email address used at purchase, or include your order number so we can identify you. We may decline a request in whole or in part where we have a legal obligation, need to keep proof of a transaction, are preventing fraud, or are establishing or defending legal claims. If you are in the European Union or the United Kingdom, you also have the right to complain to your local data protection authority.
10. Children
This service is for people aged 18 or over. If a song includes information about a child or teenager, it must be submitted by a parent, legal guardian or properly authorized person, in the best interest of the minor and with the minimum information necessary.
11. Changes
We may update this policy to reflect changes to the product, our providers, legal obligations or security practices. The version published on this page is the version in force.
Last updated: 17 September 2026.