Account information: When you sign up we collect your email address (and, if you use Google sign-in, your name and Google account email). Guest creations are linked to a random device identifier stored in your browser.

Stories and song inputs: The names, occasions, memories and stories you submit, plus your style choices — these are the raw material of your songs.

Generated content: The lyrics, audio files, cover art and personal notes produced for you, stored so your songs remain playable and shareable.

Payment information: Payments are processed by Stripe. We receive confirmation of the purchase and the last digits of your card at most — never the full card number.

Usage data: Basic technical logs (pages visited, errors, approximate region from IP) used to keep the service running and improve it.

Your inputs are used for one purpose: making your songs.

• Stories and preferences are sent to AI providers (lyric and music generation partners) to produce your lyrics and audio
• Providers process this data to fulfil your request; we do not sell your stories or use them for advertising
• Generated songs are stored privately and delivered through time-limited links
• Support communication uses your email only to respond to you

Where data lives: Account and song records are stored in Supabase (Postgres); audio and cover files are stored in a private Amazon S3 bucket in the United States.

Access control: The media bucket is not publicly listable or readable; songs are delivered via signed URLs that expire after a few hours. Full songs are only issued for purchased tracks.

Encryption: Data is encrypted in transit (HTTPS everywhere) and at rest by our storage providers.

Song pages are designed to be shared: anyone with the link can see the song's title, recipients' first names, cover art, your note, lyrics and the audio player. Links use unguessable identifiers and are not listed publicly — but treat a song page like a private link: only send it to people you want to hear it.

• Authentication cookies keep you signed in (Supabase session)
• A random device identifier in your browser's local storage links guest songs to your device
• We do not use third-party advertising or tracking cookies

Songs: Songs and their pages are kept so gifts don't disappear — recipients may replay them for years. You can request deletion of any song at any time.

Account deletion: Deleting your account removes your profile and disassociates your songs; you may request full deletion of song content and files by contacting support.

Logs: Technical logs are retained briefly for security and debugging, then rotated out.

Depending on where you live (including GDPR and CCPA regions), you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Email us and we will honour verified requests within the legally required timeframe. We do not discriminate against you for exercising these rights.

SongFor is not directed at children under 13, and we do not knowingly collect their personal information. Songs about children (a lullaby for your daughter, a birthday song for your son) are created by adults from their own stories.

We will post any changes on this page and update the effective date. Material changes will be highlighted on the site or sent to account holders by email.

Privacy questions or requests: privacy@songfor.ai. See also our Terms of Service.