Privacy Policy | PersonalSongGifts

1. Introduction

Personal Song Gifts ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes the information we collect, how we use it, the parties to whom it is disclosed, the methods of disclosure, and the security practices we have in place to safeguard your information. By using our Service, you consent to the data practices described in this policy.

2. Information We Collect

We collect the following categories of information:

Personal Information

Contact Information: Email address for order confirmations, delivery, and customer support
Payment Information: Processed securely through our payment processor; we do not store credit card numbers on our servers
Names: Recipient names and your name (if provided) for song personalization

Content Information

Memories and Stories: Personal stories, memories, and details you share for song creation. If you voluntarily include sensitive information (such as health conditions, religious beliefs, or other personal details) in your story, you explicitly consent to us processing this information solely for creating your personalized song
Preferences: Genre, decade, voice, occasion, and style preferences
Generated Content: Lyrics and audio files created for your order
Photos: Photos you upload for your album cover. We remove location and camera details from each photo before we use it. If a photo had a location, we keep only the rough area (about 11 km) and the date it was taken, privately. We never show or share them.

Technical Information

Device Information: Browser type, operating system, and device type
Usage Data: Pages visited, time spent on site, and interaction patterns
IP Address: For security, fraud prevention, and approximate geolocation purposes
Referral Data: How you found us (UTM parameters, referrer URLs)

3. How We Use Your Information

We use the collected information for the following purposes:

Service Delivery: To create and deliver your custom song
Communication: To send order confirmations, delivery notifications, remake updates, and respond to inquiries
Payment Processing: To process transactions securely through our payment provider
Service Improvement: To analyze usage patterns and improve our service
Security: To prevent fraud, unauthorized access, and other malicious activities
Legal Compliance: To comply with applicable laws and regulations
Marketing: To send promotional communications (with your consent, where required)
No AI Training: We do not use your stories, memories, or personal submissions to train public AI models. Your content is processed solely to create your personalized song and is not used to improve or train third-party AI systems

Legal Bases for Processing (GDPR)

For users in the European Economic Area, we process your data based on:

Contract Performance: Processing necessary to fulfill your order
Legitimate Interests: Improving our services, preventing fraud, marketing (where permitted)
Consent: For optional marketing communications
Legal Obligation: Compliance with applicable laws

4. Information Sharing and Disclosure

We share your information only with the parties listed below and only as necessary to provide our Service. We do not sell your personal information to third parties.

Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Third-Party Service Providers

We share your information with third-party service providers to deliver our Service. Each provider is contractually obligated to protect your data. These providers assist with:

Payment Processing: We use a secure payment processor to handle transactions. We never store or have access to your full credit card number.
Content Generation: Your song details (recipient name, relationship type, occasion, personal stories/memories, qualities, and dedication message) are processed by our content generation providers to create personalized lyrics and music.
Email Delivery: Your email address and order details are shared with our email provider to send order confirmations and song deliveries.
Data Storage: Order information and generated songs are securely stored by our cloud infrastructure providers with encryption at rest and in transit.
Hosting & Infrastructure: Our application is hosted on cloud infrastructure providers.
Error Tracking: Anonymized error logs and usage data may be shared with monitoring services for application improvement.

6. Cookies and Tracking Technologies

Types of Cookies We Use

Essential Cookies (Required)

Session cookies for maintaining your order state during checkout
Authentication cookies for admin users
CSRF protection tokens

These cookies are necessary for the Service to function and cannot be disabled.

Analytics Cookies (Optional)

We may use analytics tools to understand how visitors use our site
These help us improve user experience
You can opt out through your browser settings

How to Manage Cookies

Most browsers allow you to refuse cookies through settings. Refusing essential cookies may prevent you from completing orders.

Do Not Track

We currently do not respond to "Do Not Track" browser signals. We will update this policy if we implement DNT support in the future.

7. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy:

Order Data: Retained indefinitely to allow you to access your purchase and for legal/tax compliance purposes
Generated Songs: Stored indefinitely unless you request deletion
Support Conversations: Retained for 3 years after resolution
Marketing Data: Until you unsubscribe or request deletion
Technical Logs: Generally deleted after 90 days

You may request deletion of your data by contacting us at support@personalsonggifts.com.

8. Data Security

We implement comprehensive security measures to protect your information:

Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL
Secure Payment: Credit card information is processed by our payment provider and never touches our servers
Database Security: Our database is hosted with encryption at rest and in transit
Access Control: Only authorized personnel have access to user data, on a need-to-know basis
Regular Audits: We regularly review and update our security practices
Environment Variables: Sensitive API keys and credentials are stored securely as environment variables

While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate information
Deletion: Request deletion of your personal information
Portability: Request your data in a portable format
Opt-out: Unsubscribe from marketing communications at any time

To exercise any of these rights, please contact us at support@personalsonggifts.com.

10. Your Rights Under GDPR (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following additional rights under the General Data Protection Regulation (GDPR):

Your GDPR Rights

Right of Access: Request a copy of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure ("Right to be Forgotten"): Request deletion of your data
Right to Restrict Processing: Request limitation of how we use your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time for consent-based processing
Right to Lodge a Complaint: File a complaint with your local data protection authority

How to Exercise Your Rights

Contact our Data Protection contact at support@personalsonggifts.com. We will respond within 30 days as required by GDPR.

11. Your Rights Under CCPA (California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Your CCPA Rights

Right to Know: Request disclosure of categories and specific pieces of personal information collected
Right to Delete: Request deletion of your personal information, subject to certain exceptions
Right to Correct: Request correction of inaccurate personal information
Right to Opt-Out of Sale: We do not sell your personal information
Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Categories of Information Collected (Past 12 Months)

Identifiers: Email address, name
Personal information (Cal. Civ. Code § 1798.80): Name, address
Commercial information: Purchase history, order details
Internet activity: Pages visited, interaction with our site
Inferences: Preferences derived from the above

How to Exercise Your Rights

Submit a request to support@personalsonggifts.com. We will verify your identity before processing requests. You may designate an authorized agent to make requests on your behalf with proper written authorization.

12. International Data Transfers

Personal Song Gifts is based in the United States. Your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

Transfer Mechanisms

For transfers from the EEA/UK/Switzerland to the United States, we rely on:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data Processing Agreements with all service providers
The recipient country's adequacy decisions where available

Your Consent

By using our Service, you consent to the transfer of your information to the United States and other jurisdictions that may have different data protection laws than your country of residence. Regardless of where your data is processed, we apply the same protections described in this Privacy Policy.

13. Data Breach Notification

In the event of a data breach that affects your personal information:

Notification Timeline

We will notify affected users within 72 hours of becoming aware of a breach that poses a risk to your rights and freedoms. We will also notify relevant supervisory authorities as required by law.

Notification Content

Our notification will include:

Description of the nature of the breach
Categories and approximate number of individuals affected
Likely consequences of the breach
Measures taken or proposed to address the breach
Contact information for questions

How We Will Notify You

We will notify you via email to the address associated with your order, by a prominent notice on our website, and by other means as required by applicable law.

14. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information from a child under 13, please contact us immediately at support@personalsonggifts.com and we will take steps to delete such information.

15. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

16. Marketing Communications

Types of Communications

Transactional Emails: Order confirmations, delivery notifications, change request links (required for service delivery — cannot be opted out)
Marketing Emails: Promotional offers, new features, company updates (optional)

Opt-In/Opt-Out

You can opt out of marketing emails at any time by clicking "unsubscribe" in any marketing email or contacting support@personalsonggifts.com. Transactional emails cannot be opted out as they are necessary for order fulfillment.

Abandoned Cart Emails

If you start an order but do not complete checkout, we may send reminder emails. You can opt out of these by clicking unsubscribe in the email.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page and, in some cases, by sending you an email notification. Your continued use of our Service after changes constitutes acceptance of the updated policy. If you do not agree to the modified policy, you should discontinue use of the Service.

18. Contact Us

If you have any questions about this Privacy Policy, our data practices, or would like to exercise your rights, please contact us:

Privacy Inquiries: support@personalsonggifts.com

General Support: support@personalsonggifts.com

We aim to respond to all inquiries within 30 days.