Privacy Policy

Song My Story ("we", "us") writes and produces custom personalised songs ordered through songmystory.com. We are the data controller for the personal information described in this policy. For any privacy question, or to exercise your rights, contact us at hello@songmystory.com.

• Account details — your name, email address and optional phone number when you create an account or sign in with Google.
• Song Idea Quiz answers — the six answers you give, plus the package we recommend.
• Story questionnaire — the personal stories, memories, names, dates and preferences you submit so a song can be written for you.
• Order information — package chosen, price, currency, order status, delivery notes and the finished files we produce for you.
• Enquiry details — name and email if you ask us to save a song idea for later.
• Technical data — an approximate country from your connection so we can show prices in your local currency, plus basic security and error logs.

We do not see or store your card number. Card details are entered directly with our payment processor.

• To perform our contract with you — creating your account, writing and delivering your song, handling payment, and providing your dashboard and private reveal page.
• Legitimate interests — keeping the service secure, preventing fraud, improving the site, and following up on an unfinished order.
• Consent — optional marketing emails, and publishing a testimonial or song sample where you have given us permission. You can withdraw consent at any time.
• Legal obligation — keeping tax and transaction records.

Payments are processed by Stripe. When you check out, Stripe collects and processes your card and billing details as an independent controller under its own privacy policy. We receive only a payment confirmation, the amount, the currency and a transaction reference. Stripe uses your data for payment processing, fraud prevention and legal compliance.

Our database, authentication and file storage run on managed cloud infrastructure (Supabase, hosted on secure data-centre providers). Data is encrypted in transit and at rest. Song files, artwork and lyric sheets are held in a private storage bucket and are only reachable through short-lived signed links generated for you or for the recipient of a gift reveal link you choose to share.

Some providers operate outside the UK, EU and Australia. Where personal data is transferred internationally we rely on Standard Contractual Clauses or an equivalent safeguard.

We never sell your data. We share it only with service providers who help us run the business: our hosting and database provider, our payment processor, our email delivery provider, and, where relevant to your package, digital music distribution partners who publish your song to streaming platforms. Each is bound by contract to protect your data. We may also disclose data where the law requires it.

Account and order records are kept for as long as your account is open and for up to seven years afterwards where tax law requires. Song files and questionnaire answers are kept so you can re-download your song; ask us and we will delete them sooner. Enquiry details are deleted after two years of inactivity.

If you are in the UK, EU or a comparable jurisdiction, you can request access to your data, correction, deletion, restriction, a portable copy, or object to processing based on legitimate interests. Email us and we will respond within one month. You also have the right to complain to your local data protection authority.

The service is not intended for children under 16. A song can of course be written about or for a child, but the account and the order must be placed by an adult.

We use only what the site needs to work: a secure sign-in session, your chosen currency, and our payment processor's fraud-prevention scripts on the checkout page. We do not run advertising trackers.

If we make a material change to this policy we will update the date above and, where appropriate, tell you by email.