1. Who controls your information
For the current preview, SongGift is the controller of personal information handled through trysonggift.com. SongGift is a working project name. The verified legal operator, postal address and postal contact will be displayed here, at checkout and on the receipt before live sales open. Our monitored privacy email is support@trysonggift.com.
You can make a privacy request by email or through Help & contact. If you have an order, sign in with the order email and open a support request so we can verify you without collecting unnecessary identity documents.
2. Information we collect
- Account and contact data: email address, one-time-code and session records, and marketing preference.
- Creative data: occasion, relationship, names, pronunciation, story, memories, facts, lyric instructions, chosen style, generated lyrics, music and feedback.
- Order data: order reference, prices, consent version and time, delivery status, chosen track, gift-link and usage-right records.
- Payment data: Stripe identifiers, amount, currency, payment and refund status. We do not store full card numbers or card security codes.
- Support data: messages, correction requests, case history and actions taken.
- Technical data: IP and security signals, browser and device information, timestamps, request logs, errors and necessary browser storage.
- Optional product analytics: page and feature events, coarse campaign/referrer information and a pseudonymous session identifier, only after you allow analytics.
- Google Ads measurement: allowlisted page and feature events plus coarse campaign/referrer information; advertising storage and personalization are denied by default, and regional consent and opt-out controls apply.
3. Why we use it
| Purpose | UK/EU legal basis |
|---|---|
| Create, deliver and support your song | Performance of our contract; steps you request before a contract |
| Process payment, refunds and receipts | Contract; legal obligations |
| Send sign-in, delivery, security and policy notices | Contract; legitimate interests |
| Prevent abuse, secure the Service and resolve disputes | Legitimate interests; legal obligations |
| Run optional product analytics | Your consent |
| Measure advertising campaign performance | Regional consent or opt-out rules, as applicable |
| Send optional gift ideas or marketing | Your consent |
4. Providers and disclosures
We disclose only what is reasonably needed for these functions:
- Cloudflare: website delivery, security, Worker computing, application database, private audio storage and transactional email.
- Stripe: checkout, payment processing, fraud prevention, payment records and refunds.
- Kie.ai and the underlying Suno workflow: the confirmed lyrics, title and requested musical direction needed to generate music. They do not need your payment card details.
- Mixpanel EU: privacy-filtered product events only when optional analytics is enabled. IP enrichment is disabled; story, lyrics, names and email are excluded.
- Google Ads: allowlisted measurement events and coarse campaign context. Advertising storage and personalization are denied by default; Global Privacy Control, regional consent settings and the Privacy choices page can disable measurement.
We may also disclose information where required by law, to protect people and the Service, or as part of a genuine business transfer with continuing confidentiality protections. We do not sell personal information or use it for cross-context behavioural advertising.
5. Creative content and AI processing
Confirmed creative content is sent to the music provider only when generation is authorised. Because those providers operate their own systems, their contractual privacy, retention and model use terms also matter. SongGift does not claim that an unverified supplier will never retain or train on content; paid production remains closed until the required provider terms and data arrangements are verified.
Do not include health information, government identifiers, financial account details or other highly sensitive data unless it is genuinely necessary. Review the lyrics before submitting them for music generation.
8. How long we keep information
| Information | Normal retention |
|---|---|
| Unpaid drafts | Deleted after 30 days of inactivity |
| Original story and detailed brief | Removed or anonymised 90 days after final locking, unless an open dispute requires it |
| Unselected audio candidates | Deleted 30 days after final locking when no case is open |
| Selected final audio and gift page | Hosted for 12 months from initial delivery, unless you delete it sooner or a dispute requires preservation |
| Expired one-time codes and email jobs | Automatically deleted after their operational expiry |
| Transaction, consent, tax and dispute records | Kept only for the period required by applicable accounting, tax, fraud-prevention and legal-claims rules |
A deletion request removes customer-facing access promptly. A minimal record may remain where necessary to document a payment, refund, consent, licence, fraud signal or legal claim.
9. Security
We use HTTPS, private application storage, restricted service credentials, signed Stripe webhooks, one-time sign-in codes, access controls and audit records designed to protect information. No online system is completely secure. If a personal-data breach creates a legally reportable risk, we will notify the relevant regulator and affected people within the period required by law.
10. International transfers
Our providers may process information in the United Kingdom, European Economic Area, United States and other countries. Where UK or EEA law requires a transfer safeguard, we rely on an adequacy decision, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, or another lawful mechanism provided by the relevant processor.
11. Your privacy rights
Depending on where you live, you may ask to access, correct, delete or receive a portable copy of your information; restrict or object to processing; or withdraw consent. You may also lodge a complaint with your local data-protection authority. In the UK, that is the Information Commissioner’s Office.
Start through Help & contact or your authenticated order page. We aim to respond within one month, subject to lawful extensions. We may ask for proportionate verification and will not ask for a full card number or password.
12. Children
SongGift is for adults aged 18 or over. It is possible to make a lawful gift about a child, but the purchaser must have authority to provide the child’s information and should include only what is necessary. We do not knowingly accept orders placed by children. Contact us if you believe a child submitted personal information without appropriate permission.
13. Changes and contact
We will update the date and version on this page when the notice changes. Material changes will be highlighted on the site or sent to the order email where appropriate.
SongGift’s legal operator, postal address and monitored privacy contact remain required launch disclosures. The operator and postal address will be published before live sales. For this preview, email support@trysonggift.com, use Help & contact, or open an authenticated order support request.