Privacy Policy

1. Introduction

SongSake LLC (“SongSake,” “we,” “us,” or “our”) is a Minnesota limited liability company that operates the website songsake.com (the “Site”) and provides personalized AI-generated song creation services (the “Service”). This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit the Site or use the Service.

We understand that the information you share with us is deeply personal. Our Service asks you to share stories, memories, names, relationships, and emotional details about your life and the lives of people you care about. We take this responsibility seriously and are committed to protecting your privacy with the care your stories deserve.

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our privacy practices, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

Account Information. When you create an account, we collect your name, email address, and authentication credentials. If you sign in using a third-party authentication provider (such as Google), we receive your name and email address from that provider.

Story Data. When you use our Story Wizard to create a personalized song, you voluntarily provide us with detailed personal narratives, which may include: names and identifying details of yourself and others (including the gift recipient); descriptions of personal relationships (family, romantic, friendship); memories, anecdotes, and life events; descriptions of places, dates, and significant occasions; emotional context and sentiment preferences; health-related information (if you choose to include it in your story); religious or spiritual references (if you choose to include them); and other sensitive personal details you choose to share.

Payment Information. When you make a purchase, your payment card details are collected and processed directly by our payment processor, Stripe, Inc. We do not receive, access, or store your full credit card number. We receive only a transaction confirmation, the last four digits of your card, and the billing address for tax calculation purposes.

Communications. When you contact us via email ( support@songsake.com or legal@songsake.com), we collect the content of your message, your email address, and any attachments you send.

Referral Program Data. If you participate in our referral program, we collect your PayPal email address for payout purposes, your referral activity data, and tax identification information if required for IRS reporting (Form 1099-NEC).

2.2 Information Collected Automatically

When you visit the Site, we automatically collect certain technical information, including:

• Device information: browser type and version, operating system, device type, and screen resolution.
• Usage data: pages visited, time spent on pages, click patterns, referring URLs, and navigation paths.
• Network information: IP address, approximate geographic location derived from IP address, and internet service provider.
• Cookies and similar technologies as described in Section 8 of this Policy.

2.3 Information from Third-Party Sources

We may receive limited information about you from third-party services we use, including authentication providers (e.g., Google sign-in), analytics services, and payment processors (Stripe transaction confirmations).

3. How We Use Your Information

We use the information we collect for the following specific purposes:

Service Delivery

• To generate personalized song lyrics from your Story Data using our AI content generation provider.
• To generate song audio from lyrics using our AI music generation provider.
• To deliver completed songs and gift materials to you and your designated recipients.
• To process payments through Stripe.
• To manage your account and order history.
• To send transactional emails (order confirmations, delivery notifications) via our email service provider.

Service Improvement

• To analyze usage patterns and improve the user experience (in aggregate, de-identified form).
• To diagnose technical problems and maintain system security.
• To develop new features and optimize existing functionality.

Legal and Compliance

• To comply with applicable laws, regulations, and legal processes.
• To enforce our Terms of Service.
• To protect the rights, safety, and property of SongSake, our users, and the public.
• To process and report referral program earnings for tax compliance (IRS Form 1099-NEC).

Communications

• To respond to your customer support inquiries.
• To send you service-related announcements.
• To send marketing communications, but only with your express opt-in consent, and you may opt out at any time.

4. How We Share Your Information

4.1 Service Providers (Data Processors)

We share your information with the following third-party service providers who process data on our behalf:

To request the identity of a specific service provider processing your data, contact us at privacy@songsake.com.

4.2 Gift Recipients

When you create a song as a gift, we share the completed song, the gift presentation materials, and the gift message you provide with the designated gift recipient. We do not share your raw Story Data with the recipient.

4.3 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request.

4.4 Business Transfers

If SongSake is involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information for other purposes with your express, informed consent.

5. Data Retention

We retain your information for the following periods:

• Account information: Retained for as long as your account is active and for twelve (12) months after account deletion.
• Story Data: Retained for up to twelve (12) months after delivery to support customer service inquiries. After this period, Story Data is deleted or de-identified.
• Generated Songs: Retained for as long as your account is active. After account deletion, song files are deleted within ninety (90) days.
• Payment records: Transaction records are retained for seven (7) years as required by tax and financial regulations.
• Referral program records: Retained for seven (7) years after your last payout for tax compliance purposes.
• Technical and usage data: Retained for up to twenty-four (24) months in aggregate, de-identified form.

6. Gift Recipient Privacy

SongSake recognizes that gift recipients are individuals whose personal information may be included in a Generated Song without their direct knowledge or consent at the time of song creation. We address this as follows:

• Limited data collection: We collect only the recipient's email address or other delivery information provided by the gift purchaser.
• Embedded personal information: The Generated Song may contain personal information about the recipient that was provided by the gift purchaser. This information is embedded in the song content, not stored separately as structured data.
• Recipient rights: Gift recipients may contact us at privacy@songsake.com to request information about what data we hold related to them, to request deletion of their delivery information, or to request removal of a Generated Song containing their personal information.
• No marketing to recipients: We will not use gift recipient contact information for marketing purposes unless the recipient independently creates an account and opts in.
• Purchaser responsibility: Gift purchasers represent that they have a genuine personal relationship with the recipient and a good-faith basis for sharing the recipient's personal details.

7. Children's Privacy

The Service is not intended for children under the age of eighteen (18). We do not knowingly collect personal information from children under 18. We recognize that Story Data submitted by adult users may reference children. References to children within Story Data provided by an adult user are treated as the adult user's own content submission.

If we become aware that we have inadvertently collected personal information directly from a child under 13 in violation of COPPA, we will delete that information promptly. Contact us at privacy@songsake.com.

8. Cookies and Tracking Technologies

We use the following types of cookies:

• Strictly necessary cookies: Required for the Site to function properly. These cookies cannot be disabled.
• Functional cookies: Remember your preferences and settings. You may disable these in your browser settings.
• Analytics cookies: Help us understand how visitors interact with the Site. You may opt out of analytics cookies.

We do not use advertising or tracking cookies. We do not serve third-party advertisements on the Site and do not use cookies to track you across other websites.

9. Your Privacy Rights

SongSake is committed to honoring privacy rights regardless of whether we are technically required to do so based on revenue or data processing volume thresholds.

9.1 Rights We Honor for All Users

• Right to Know/Access: You may request confirmation of whether we process your personal information and obtain a copy.
• Right to Deletion: You may request deletion of personal information, subject to legal exceptions.
• Right to Correction: You may request correction of inaccurate personal information.
• Right to Data Portability: You may request a copy in a structured, machine-readable format.
• Right to Opt Out of Sale: We do not sell personal information.
• Right to Opt Out of Targeted Advertising: We do not use your personal information for targeted advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising privacy rights.

9.2 State-Specific Rights

California Residents (CCPA/CPRA): You have the right to know, delete, correct, opt out of sales/sharing, and limit use of sensitive personal information. Contact privacy@songsake.com. We will respond within 45 days.

Minnesota Residents (MCDPA): You have the right to access, correct, delete, and obtain portable copies of your personal data; opt out of targeted advertising, data sales, and profiling. The MCDPA's 30-day cure period expired January 31, 2026.

Virginia, Colorado, Connecticut, Oregon, Montana, Texas, Delaware, New Hampshire, New Jersey, Maryland, Indiana, Kentucky, Rhode Island, and Other State Residents: Similar rights to access, correct, delete, and obtain portable copies.

Universal Opt-Out Mechanisms: We recognize and honor universal opt-out preference signals (such as the Global Privacy Control) as required by applicable state laws.

9.3 How to Exercise Your Rights

Email privacy@songsake.com with subject line “Privacy Rights Request.” Include your name, email address associated with your account, the specific right you wish to exercise, and your state of residence. We will acknowledge within ten (10) business days and respond within thirty (30) to forty-five (45) days.

10. Data Security

We implement commercially reasonable safeguards including:

• Encryption in transit (TLS)
• Encryption at rest
• Access controls
• Secure authentication mechanisms
• Payment security via Stripe (PCI DSS)
• Email security (SPF, DKIM, DMARC)
• Regular security reviews

No system is completely secure. In the event of a data breach, we will notify you and applicable regulatory authorities as required by law.

11. Data Breach Notification

In the event of a security breach, SongSake will:

• Investigate promptly.
• Notify affected individuals as required by applicable state and federal laws.
• Notify applicable regulatory bodies.
• Provide information about the breach and protective steps.

12. International Data Considerations

The Service is operated in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. We do not specifically target users in the European Economic Area, United Kingdom, or other jurisdictions with comprehensive data protection laws.

13. Do Not Track Signals

We do not currently respond to DNT browser signals. However, we do recognize and honor Global Privacy Control (GPC) signals and other universal opt-out mechanisms as required by applicable state law.

14. Third-Party Links and Services

The Site may contain links to third-party websites. This Privacy Policy does not apply to third-party sites. We encourage you to read the privacy policies of any third-party websites you visit.

15. Data Minimization

SongSake is committed to collecting only the personal information reasonably necessary to provide the Service. We continuously review our data collection practices to ensure we are not collecting more information than needed.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. For material changes, we will:

• Post the updated Policy with a new “Last Updated” date.
• Send email notification at least thirty (30) days before changes take effect.
• Provide a summary of key changes.

Material changes to our data practices will not be applied retroactively without your affirmative consent.

17. Contact Information