Songkeep — Privacy Policy
Last updated: July 31, 2026
This Privacy Policy explains what personal data Songkeep ("we", "us") collects when you use songkeep.app (the "Service"), how we use it, and the choices you have. We aim to collect the minimum needed to make your song and deliver your gift.
1. Data We Collect
You provide it directly:
- Order details: the story, names, occasion, style choices, messages, and lyric edits you submit;
- Email address: used to save your brief, deliver your song, and send receipts;
- Photo (optional): if you upload one for the gift page or cover;
- Voice recording (optional): if you use voice input, the audio is transcribed to text to fill in your story. The recording is processed for transcription and is not used to clone voices.
Collected automatically:
- Basic technical data (IP address, browser type, approximate region, device type) used for security, anti-abuse rate-limiting, and analytics;
- Minimal cookies / local storage strictly needed for the Service to work (e.g., keeping your draft on your device, and a human-verification / anti-bot check). We do not use advertising cookies.
Payment data: payments are processed by Creem as merchant of record. Card details go directly to Creem and never touch our servers. We receive order confirmation, amount, and a payment reference.
2. How We Use Data
- To generate lyrics and songs from your input and deliver your order;
- To create and host the private gift page;
- To send transactional emails (delivery links, receipts, support replies);
- To prevent fraud and abuse (rate limits, human verification, cost controls);
- To fix problems and improve the Service (error logs, aggregate analytics);
- To comply with legal obligations.
We do not sell your personal data. We do not use your stories, photos, or recordings for advertising, and we do not use them to train our own AI models.
Legal bases where GDPR/UK GDPR applies: performance of a contract (making and delivering your song), legitimate interests (security, anti-abuse, service improvement), consent (optional uploads such as photos and voice), and legal obligation.
3. Processors and Third Parties
To operate the Service, your data is processed by third-party service providers under contract, acting on our instructions. These providers fall into the following categories:
| Category | Purpose |
|---|---|
| Cloud hosting, storage & security providers | Website hosting, content delivery, file storage, and human-verification / anti-abuse protection |
| Database providers | Storing your order and account data |
| AI music generation providers | Producing your song from the lyrics and style choices you approve |
| AI language-model providers | Drafting lyrics from the story you submit |
| Speech-to-text providers | Transcribing optional voice input into text |
| Background-processing & rate-limiting providers | Coordinating generation jobs and enforcing usage limits |
| Payment processor — Creem (merchant of record) | Processing payments, receipts, refunds, and applicable taxes |
| Email delivery providers | Sending transactional emails (delivery links, receipts, support) |
| Error-monitoring providers | Detecting and diagnosing technical problems |
We name our payment processor (Creem) because it acts as merchant of record for your purchase and is your point of contact for payment, receipts, and refunds. For the remaining categories, we work with reputable providers selected for security and reliability; we do not publish the specific vendor names, but we will disclose the identity of a specific processor to you on request where required by applicable data-protection law. You may contact us at support@songkeep.app to make such a request.
These providers may be located in the United States or other countries. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.
The content you submit for song generation (the lyrics and style inputs you approve) is sent to the AI generation providers above solely to produce your song; their processing is governed by their own terms.
4. Retention
- Purchased songs and gift pages: retained so the gift remains accessible long-term (see Terms §9);
- Unpurchased drafts and previews: automatically deleted after a period of inactivity;
- Voice recordings: retained only as needed for transcription and quality/debugging, then deleted in the normal course;
- Order and payment records: retained as required for accounting and legal compliance;
- Server logs: short-term retention for security and debugging.
5. Your Rights
Depending on your location (e.g., EU/UK GDPR, California CPRA), you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any right, email support@songkeep.app from the address used for your order. We will respond within the time required by applicable law. You may also lodge a complaint with your local data-protection authority.
Note: deleting your data may make a purchased gift page permanently unavailable; we will confirm before deleting purchased content.
6. Children
The Service is not directed to children under 13, and we do not knowingly collect their data. Purchases require users to be 18+. If you believe a child provided personal data, contact us and we will delete it.
7. Security
We use industry-standard measures: encrypted transport (HTTPS), access-controlled infrastructure, secrets management, and private storage for paid content. No system is perfectly secure; please keep your gift links private to the people you intend.
8. Changes
We may update this Policy; material changes will be posted here with a new "Last updated" date.
9. Contact
Data controller: Songkeep (individual proprietor) Email: support@songkeep.app Website: https://songkeep.app
The English version of this Policy is the governing version; translations are for convenience only.
The English version is the governing version; translations are for convenience only.