Privacy Policy

Effective 2026-08-16 · Version 1.3 · Updated 2026-08-16

This Privacy Policy explains how Your Song Gift ("Your Song Gift," "we," "us," or "our") collects, uses, shares, and retains personal information when you use our personalized song gift website and related services (the "Service"). It also explains the choices and rights available to you.

1. Contact and responsibility

Your Song Gift is the customer-facing name of the Service. This Policy describes the personal information processed in connection with that Service.

For privacy questions or requests, use our Contact page or email contact@yoursonggift.net. We may ask you to sign in or provide other information needed to verify that the request concerns you. Payment providers and identity providers may separately act as controllers for information they collect under their own policies.

2. Information we collect

2.1 Information you provide

• Account information: your Google account name, email address, profile image, authentication identifiers, and account status. Your Song Gift does not offer a password-based account.
• Song gift inputs: the occasion, emotional direction, relationship, recipient name, story, optional sender name, and optional gift message you enter.
• Creation records: confirmed facts, song title, lyrics, feedback about a version, generated audio, the version you select, and the resulting gift page.
• Payment and credit records: the credit pack, price, currency, order and transaction identifiers, payment status, credit lots, reservations, debits, releases, expirations, refunds, reversals, and disputes. We do not receive or store your full payment-card number.
• Support and moderation information: the category and text of a support request, an optional order reference, whether you request a reply, your account email when needed for that reply, and information submitted through a gift report.

Please do not include unnecessary sensitive information in a story, gift message, support request, or report. If you provide information about another person, you are responsible for having a lawful basis and any permission needed to do so.

2.2 Information collected automatically

• Device and network data: IP address, browser and device type, operating system, language, time zone, approximate country/territory, state or province, and city inferred from the request IP, user agent, and security or device identifiers.
• Service activity: pages and features used, fixed funnel events, request timestamps and outcomes, draft creation activity, gift visits and fixed gift interactions, generation and payment states, playback or download events, and safe error, latency, model, template, and cost metadata.
• Security data: session cookies, fraud and abuse signals, rate-limit records, authentication events, and audit records.

Our analytics events do not contain recipient or sender names, story text, gift messages, song titles, lyrics, email addresses, prompt bodies, audio, provider output URLs, or public gift URLs.

For our protected internal creation and gift-visit statistics, we may store only opaque record identifiers, a normalized country or territory code, a first-level region/state/province code and name, a city name, time zone, normalized device and browser/application categories, fixed activity codes, outcomes, and timestamps. The region and city labels are inferred by Cloudflare from the request IP, may be missing or inaccurate, and describe an approximate request-network location—not your residence or a precise physical position. That statistics database does not store raw or hashed IP addresses, browser or device geolocation results, GPS data, latitude or longitude, postal or metro codes, street addresses, raw user-agent strings, email addresses, names, story or song content, gift messages, URLs, request or response bodies, cookies, arbitrary location data, or arbitrary metadata. Raw request context may be used briefly in memory to derive an approved normalized field and is then discarded from that statistics record.

These internal statistics are best-effort. Browser settings, network failures, leaving a page, or service failures may cause an activity to be missing or duplicated. We do not use this data to decide access, billing, credits, refunds, disputes, or account penalties.

2.3 Local browser storage and cookies

We use strictly necessary cookies for authentication, security, fraud prevention, and core functionality. A pre-sign-in Builder draft is stored in the current tab's sessionStorage, not long-lived localStorage, and expires after 24 hours.

When configured, we also use Google Analytics and Plausible Analytics to understand aggregate product usage. You can limit non-essential cookies or scripts through your browser or privacy tools; blocking them should not prevent the Service's core creation and account features from working.

3. How we use information

We may aggregate or anonymize information so that it can no longer reasonably identify a person. We do not use private story content for advertising analytics, and we do not sell personal information.

An authorized operator may need to view a minimum set of current account, draft, gift, or credit-ledger information—such as an email address, recipient or sender name, story, gift message, title, or balance—to diagnose a creation flow, investigate gift access, or provide account support. Those fields remain in the main business database and are not copied into the statistics database. Protected lists and details require our operator access controls and a content-free read audit before the information is returned; if that audit fails, the protected response is not provided. Unusual read volume creates a content-free security alert.

4. AI processing

Your story and related inputs are processed to create a structured Song Blueprint and English lyrics. The confirmed lyrics and a limited music prompt are then processed to create audio.

We use approved third-party AI services, including OpenRouter and approved model endpoints operated through Microsoft Azure, Google Vertex AI, or approved Amazon Bedrock or Vertex routes for text generation, and Replicate with MiniMax Music for music generation. Each provider receives only the information needed for its task.

Private-story requests are configured to require approved providers, zero-data-retention or equivalent no-retention controls where required by our product policy, and no provider data collection for model training. If those controls cannot be enforced, the request is designed to fail instead of silently routing to an unapproved provider. We do not use your private inputs to train our own AI models.

AI output may be inaccurate, unexpected, or similar to other material. You should review confirmed facts, lyrics, and the final song before publishing or sharing them.

5. Sharing and disclosure

We share information only as needed to operate, secure, and support the Service:

• Cloudflare: website delivery, Workers, security and Turnstile, separate D1 business and limited statistics database storage, Workflows, and private R2 audio storage.
• Google: Google OAuth account sign-in and, when selected through an approved route, AI text processing on Google Vertex AI.
• OpenRouter and approved AI endpoint operators: structured Blueprint, lyrics, and limited quality-repair processing.
• Replicate and MiniMax: music generation from confirmed lyrics and the limited music prompt.
• Creem and Waffo Pancake: one-time checkout, payment, refund, and dispute processing. The payment processor or merchant of record used for an order is identified at checkout. Full card details are handled by that provider and are not stored on our servers.
• Resend: essential service email, such as a generation-complete notice.
• Google Analytics and Plausible Analytics: aggregate website and fixed product-event measurement when those services are configured.
• Professional advisers, authorities, or transaction parties: when reasonably necessary to comply with law, protect rights and safety, handle a dispute, or complete a merger, acquisition, financing, or sale subject to continued protections.

We may also share information at your direction or with your consent.

6. Public gift pages

Selecting a final song publishes a gift at a high-entropy link. The gift can display the recipient name, sender name or fallback label, song title, lyrics, gift message, default cover, and playable audio. Anyone with the link may be able to open and share it.

Gift pages are marked noindex, nofollow by default, but those signals do not make a link confidential and cannot guarantee that a third party will not copy or redistribute content. Creators can revoke or delete a gift, and recipients can report one. Revocation stops new public access promptly; previously downloaded files or copies controlled by other people cannot be remotely erased.

7. Data retention

We retain information only for the Service, security, payment, dispute, and legal purposes described here. Current default periods are:

Account and Google OAuth records are kept while your account remains active and as needed to provide the Service. If you request account deletion, we delete or anonymize information that is no longer required, including linked statistics identifiers and environment snapshots when applicable, while retaining ledger, payment, fraud-prevention, safety, and legal records where deletion is not permitted or would compromise another person's rights. A statistics-cleanup retry does not delay the immediate business-side restriction or deletion result.

8. Security

We use HTTPS, access controls, private object storage, short-lived audio authorization, server-side ownership checks, signed webhook verification, and audit records to protect information. Production audio is not exposed through a public R2 origin. No online service can guarantee absolute security, so you should also protect your Google account and avoid sharing authenticated sessions.

If a security incident affects your rights, we will notify affected people and relevant authorities within the time required by applicable law.

9. International transfers

Your information may be processed in countries other than where you live because our infrastructure and service providers operate internationally. Where required, we rely on appropriate safeguards such as contractual protections, approved transfer mechanisms, adequacy decisions, and provider security commitments.

10. Your data rights

Depending on where you live, you may have the right to:

• know how we process your information and obtain access to it;
• correct inaccurate or incomplete information;
• request deletion or restriction of certain processing;
• receive certain information in a portable format;
• object to processing based on legitimate interests;
• withdraw consent where processing depends on consent; and
• complain to your local data-protection authority.

Submit a request through our Contact page or by emailing contact@yoursonggift.net. You may start an email request without signing in. Before we disclose, correct, delete, export, or otherwise act on account-linked information, we may require sign-in or another proportionate verification method; receiving an email alone does not authorize a change to an account, purchase, refund, credit balance, gift, or protected record.

We will acknowledge support submissions within two business days and respond to a verified privacy request within the period required by applicable law, ordinarily within 30 calendar days. These rights may be limited where we must retain information for payment records, fraud prevention, legal claims, another person's rights, or other legal obligations.

11. Children's privacy

The Service is intended only for people aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to the Service, contact us so we can investigate and take appropriate action.

12. Third-party services and links

This Policy applies to information controlled by Your Song Gift. Third-party websites and services have their own privacy practices. Review the policy shown by Google during sign-in and the policy shown by the applicable payment provider at checkout before submitting information to them.

13. Changes and contact

We may update this Policy to reflect changes to the Service, providers, or law. We will provide notice when and as required by applicable law, and may also provide notice through the Service or your registered email. An update may take effect immediately where permitted; the effective date and version at the top identify the current policy.

For privacy, security, account, or data-rights questions, use the monitored Your Song Gift Contact page or email contact@yoursonggift.net.