Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you use our service, such as the prompts, names, and preferences you enter to generate a song. When you make a purchase, payment information is collected by our secure payment processor (Creem) and is not stored on our servers.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, specifically to generate personalized birthday songs. We may also use it to communicate with you about your orders or respond to your inquiries.

3. Data Sharing and Storage

We do not sell your personal information. We may share necessary data with third-party service providers (such as AI generation APIs and payment processors) strictly for the purpose of operating our service.

4. Cookies

We may use cookies and similar tracking technologies to track the activity on our service and hold certain information, ensuring a smooth user experience.

5. Data Security

Your data is stored on Cloudflare's global infrastructure, including Cloudflare D1 (database) and Cloudflare R2 (object storage), both of which are protected by Cloudflare's enterprise-grade security controls including encryption at rest and in transit (TLS 1.2+). Access to production data is restricted to authorised personnel only and is protected by role-based access controls.

While we take reasonable technical and organisational measures to protect your information, no method of transmission over the internet is 100% secure. If you have reason to believe your information has been compromised, please contact us immediately at [email protected].

6. Your Data Rights

You have the following rights regarding your personal data. To exercise any of them, please email [email protected]. We will respond within 30 days.

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete personal data.
• Deletion — request that we delete your personal data, subject to any legal obligations we may have to retain it.
• Account deletion — to delete your account and all associated data, email us with the subject line "Delete My Account". We will process the request within 7 business days.

7. Contact Us

If you have any questions about this Privacy Policy, you can contact us at [email protected].