Privacy Policy - MadeYouASong

1. Introduction

MadeYouASong ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services.

MadeYouASong is operated from Delaware, United States.

2. Information We Collect

Information you provide

Account information: email address and name when you place an order
Song details: recipient name, relationship, occasion, genre preferences, personal stories, and other details you provide to personalize your song
Payment information: processed securely by Stripe — we never store your card number, expiration date, or CVC on our servers
Communications: any emails or messages you send to our support team

Information collected automatically

Usage data: pages visited, features used, time spent on the site
Device information: browser type, operating system, screen resolution
Analytics data: collected via Google Analytics to understand how our service is used
Cookies: session cookies to keep you logged in and remember your song creation progress

3. How We Use Your Information

We use your information to:

Create your song: your song details are used to generate a personalized song tailored to your specifications
Process payments: your email and payment information are used to complete transactions via Stripe
Deliver your order: we email you when your song is ready and provide a shareable link
Provide support: respond to your questions, remake requests, and feedback
Improve our service: analyze usage patterns to enhance the song creation experience
Send transactional emails: order confirmations, delivery notifications, and account-related messages
Marketing communications: with your consent, we may send occasional updates about new features or promotions — you can unsubscribe at any time

4. How We Share Your Information

We do not sell your personal data. We share information only with:

Stripe: our payment processor, to securely handle transactions
ElevenLabs: our AI music generation provider, which receives song creation details (not your personal contact information) to produce your song
Email service provider: to deliver transactional emails about your order
Analytics providers: Google Analytics receives anonymized usage data
Cloud hosting: our infrastructure providers store data securely

We may also disclose information if required by law or to protect the rights, safety, or property of MadeYouASong, our users, or the public.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

SSL/TLS encryption for all data in transit
Encrypted storage for sensitive data at rest
Payment processing handled entirely by Stripe (PCI DSS compliant)
Access controls limiting who can view personal data

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfill the purposes described in this policy. Specifically:

Account data: retained while your account is active
Song data and audio files: retained indefinitely so you can access your songs at any time
Payment records: retained as required for tax and legal compliance

You may request deletion of your account and personal data at any time (see Your Rights below).

7. Cookies

We use the following types of cookies:

Essential cookies: required for the site to function (session management, CSRF protection)
Analytics cookies: Google Analytics cookies to understand site usage (can be blocked by your browser)

You can control cookies through your browser settings. Disabling essential cookies may prevent the site from functioning properly.

8. Your Rights

You have the right to:

Access: request a copy of the personal data we hold about you
Correction: request correction of inaccurate personal data
Deletion: request deletion of your personal data and account
Portability: request your data in a portable format
Objection: object to processing of your data for marketing purposes

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Children's Privacy

Our Service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: [email protected]