Privacy Policy

1. Who We Are

SongStudio is operated by Davenport Estates, 5 Bradford Square, London E1 0SG, United Kingdom. For any privacy-related queries, contact us at [email protected].

SongStudio ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains what personal data we collect, how we use it, and your rights in relation to it.

2. What Data We Collect

We may collect and process the following personal data:

• Account data: Name, email address and password when you create a SongStudio account.
• Payment data: Payment is processed securely by Stripe. We do not store your card details. We receive confirmation of payment and your email address from Stripe.
• Song creation data: Information you provide when creating a personalised song (names, occasions, messages, preferences).
• Voice session data: Audio you provide during song creation sessions may be processed to generate your personalised song experience.
• Usage data: Pages visited, time spent, browser type, IP address and device information collected via cookies and analytics tools.
• Communications: Emails you send us and our responses.

3. How We Use Your Data

We use your personal data to:

• Create and manage your SongStudio account
• Process your song orders and deliver your personalised songs
• Process payments via Stripe
• Send transactional emails (order confirmations, delivery notifications)
• Improve our website and services through analytics
• Comply with legal obligations
• Display relevant advertisements via Google AdSense

4. Google AdSense & Advertising

We use Google AdSense to display advertisements on our website. Google AdSense uses cookies to serve ads based on your prior visits to our website and other websites on the internet.

Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the internet. You may opt out of personalised advertising by visiting Google Ads Settings.

For more information on how Google uses data when you use our site, visit: How Google uses data.

5. Cookies

We use cookies and similar tracking technologies to enhance your experience on our site. These include:

• Essential cookies: Required for the site to function (authentication, session management).
• Analytics cookies: Help us understand how visitors use our site.
• Advertising cookies: Used by Google AdSense to serve relevant advertisements.

For full details, see our Cookie Policy.

6. Legal Basis for Processing

We process your personal data under the following legal bases (UK GDPR):

• Contract: Processing necessary to fulfil your song order or account.
• Legitimate interests: Analytics, fraud prevention, improving our services.
• Consent: Marketing communications and advertising cookies (where required).
• Legal obligation: Compliance with applicable laws.

7. Data Sharing

We do not sell your personal data. We may share it with:

• Stripe: Payment processing
• Supabase: Authentication and data storage
• Google: Analytics and advertising (AdSense)
• AI music generation providers: To create your personalised song

All third parties are required to handle your data securely and in accordance with applicable data protection law.

8. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Account data is retained for the duration of your account. Song creation data is retained for 12 months. Payment records are retained for 7 years as required by UK law.

9. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. All data is transmitted over HTTPS.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of our services after changes constitutes acceptance.

12. Contact Us

For any questions about this Privacy Policy, contact: