Privacy Policy
This Privacy Policy explains how 
("SongReveal", "we") collects, uses and protects your personal information when you use songreveal.com (the "Service").
1. Data we collect
From you, when you place an order
- Your email address (so we can deliver the song).
- The brief: names, occasion, memories, song style, language, and any other details you choose to share.
- Your edits to the lyrics, if you use the lyric editor.
- Optional feedback after delivery.
Automatically, when you visit the site
- Standard server logs: IP address, user agent, referrer, request timestamps. These are kept for up to 30 days for security and abuse prevention.
- Anonymous usage events (page views, button clicks) so we can improve the product.
From our payment processor
- Order metadata from Lemon Squeezy: order ID, country, payment status, last four digits of the card. We do not see or store full card numbers.
2. Why we use it
- To generate, edit and deliver your song.
- To send delivery emails and order receipts.
- To answer support requests.
- To detect fraud and enforce our Terms of Service.
- To improve the quality of generated lyrics and audio (in aggregated, non-identifying form).
3. Sub-processors
We share the minimum amount of data needed with the following providers:
- Lemon Squeezy, LLC — payment processing.
- OpenAI / Anthropic — language models for lyric generation. We send your brief; we do not send your email or payment data.
- Suno / Mureka (KIE.AI) — audio rendering. We send the lyric text and style metadata; no personal contact info.
- Email delivery provider — to send transactional emails (preview ready, song delivered, receipt).
- Cloud hosting provider — to run the site and store generated files.
We do not sell or rent your personal data to anyone, and we do not use your data for advertising profiles.
4. How long we keep it
- Order data and generated songs: up to 24 months from the order date, so you can re-download.
- Server logs: up to 30 days.
- Brief content used for product improvement: anonymised after 90 days.
- You can ask us to delete your data sooner — see "Your rights" below.
5. Your rights
Subject to applicable law (including the EU GDPR, UK GDPR and CCPA), you have the right to:
- access the personal data we hold about you;
- correct it;
- request deletion;
- request a portable copy;
- object to certain types of processing;
- withdraw consent at any time, where we rely on consent.
To exercise any of these rights, email 
. We respond within 30 days.
6. Cookies
We use a small number of strictly necessary cookies to keep you signed into your order and to remember the preview state. To understand how the site is used and to improve it, we run first-party analytics on our own self-hosted infrastructure, including product analytics and session recording; this may capture page views, clicks, navigation, and the text you enter into the song brief. Password fields are never recorded, and payment is entered on our payment provider's domain and is not captured. We also use Google Ads conversion tracking to measure our advertising. We do not sell your personal data.
7. Children
The Service is not intended for users under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal data from children. If you believe a child has used the Service without parental consent, please email us and we will delete the data.
8. International transfers
Our infrastructure and some of our sub-processors are located in the United States and the European Union. By using the Service you consent to your data being transferred and processed in those regions, with the safeguards described in this policy.
9. Security
We use HTTPS for all traffic, encrypted storage for generated audio, scoped database access and standard hardening practices. No system is perfectly secure, but we follow industry-standard protections proportional to the type of data we hold.
10. Changes
If we change this Privacy Policy materially, we will update the "Last updated" date and, where appropriate, send a notice by email.
11. Controller and contact
- Data controller