Privacy Policy

The short version

• You tell us about a kid, we write them a song.
• We don't run a database. We never sell your information.
• Your info is used only to write the song and email it back to you.
• To make the song we rely on a few trusted tools: Resend (email delivery), Vercel (hosting), Suno (music generation), and Anthropic's Claude (lyric drafting).

What we collect

When you fill out the order form, we collect:

• About the recipient: first name, phonetic pronunciation, age, pronouns, personality details, favorites (shows, books, foods, colors, activities, places, phrases), and names of family members, pets, and friends the buyer chooses to include.
• About you (the buyer): your name, email address, desired delivery date, and how you heard about us.

Your card number is collected and processed by Stripe, our payment processor — we never see or store your full card details. While the order is being processed (typically a few seconds), the order details ride along on the payment record as metadata so the order stays linked to the payment end-to-end. As soon as the order is received on our side, the detailed information is automatically cleared from Stripe — only minimal recovery info (your contact email, song type, delivery date) remains on the payment record. See “Who we share it with” below for more.

How we use it

We use your information only to:

• Write lyrics and produce the song you ordered.
• Send you an order confirmation.
• Deliver the finished song by your chosen date.
• Respond to any questions you send us.

We never use your information for marketing, advertising, or to train machine-learning models of our own.

Who we share it with

We use a small number of trusted third-party services to operate Songaroo. When you submit the form, your information is transmitted through or provided to:

• Vercel (United States) — hosts the website and runs our server-side code that processes form submissions. Your form data passes through Vercel's servers transiently while the order is being processed; Vercel does not persistently store the form content. Request metadata (URL, status, timing) is retained briefly in Vercel's operational logs. Vercel Privacy Policy
• Stripe (United States) — processes the payment. We never see or store your full card number. The order details transit through Stripe briefly (attached as metadata to the payment record) so we can reliably match the payment to the order, but the detailed content (recipient info, story, family info, favorites) is automatically cleared from Stripe as soon as the order is received on our side — usually within seconds. The payment record itself retains only minimal recovery info: your contact email, song type, and requested delivery date. Stripe Privacy Policy
• Resend (United States) — delivers the order notification and your confirmation email. Resend stores delivered email content in its logs for approximately 7 days for deliverability debugging. Resend Privacy Policy
• Suno (United States) — AI music-generation service we use to produce the song audio. To create the track, we share the song's musical-style details and a lyrical summary. We do not share your contact information with Suno. Suno Privacy Policy
• Anthropic / Claude (United States) — AI assistant we use to draft lyrics. The recipient's personality details and favorites may be processed by Anthropic's Claude model to generate lyric drafts. We do not share your contact information with Anthropic. Anthropic Privacy Policy
• Google Analytics (United States) — measures site traffic across every visitor (not just form submitters). Sets a small number of cookies in your browser so Google can recognize returning sessions and assign each device a pseudonymous identifier. We use the resulting reports to see where visitors come from, which pages get attention, and where in the order flow people drop off — so we can improve the experience over time. We do not enable Google's ad personalization features and we do not link analytics data to anything you submit on the form. Google Privacy Policy

Beyond these operational tools, we do not share your information with advertisers, marketers, or any other third party. We never sell it.

Where the data lives

Songaroo does not operate its own database. The only persistent copies of your order details live in:

• The order notification email in the business owner's inbox, used to fulfill your order.
• Email delivery logs at Resend, typically purged after ~7 days.
• The Stripe payment record, which retains only minimal recovery info (your contact email, song type, and requested delivery date) — the detailed order content is auto-cleared immediately after processing. Stripe holds the payment record itself for the long term per their standard policy (typically around 7 years for tax and compliance reasons).

Beyond the order details above, we use Google Analytics 4 to understand site traffic, which sets a small number of cookies in your browser so Google can recognize returning sessions and assign each device a pseudonymous identifier. Reports we view are aggregated; we don't see individual visitor identities. Full disclosure under “Who we share it with” above.

About information concerning children

Songs are often made for children, but the information is provided by the purchasing adult, not by the child. We do not knowingly collect information directly from children under 13. If you believe a child submitted information to us, email songaroomusic@gmail.com and we will delete it promptly.

A parent or legal guardian may, at any time, request to review the information we hold about their child, ask us to correct it, or ask us to delete it. We will honor these requests within 15 days of receiving them. Email us at songaroomusic@gmail.com from the email address used to place the order, or include enough detail for us to locate the order if you're contacting us from a different address.

Your rights

You can request at any time that we:

• Send you a copy of the information we have about your order.
• Correct information you provided.
• Delete your order details (removing the emails from our inbox, clearing the residual recovery info from the Stripe payment record, and requesting Resend purge its logs). The detailed order content is already auto-cleared from Stripe immediately after processing; the payment record itself must be retained for tax and compliance reasons.

To make any of these requests, email songaroomusic@gmail.com.

International transfers

Our service providers are based in the United States. If you are outside the US, your information will be transferred to and processed in the US as part of providing the service.

Security

We use HTTPS encryption in transit, DMARC-authenticated email, and trusted service providers. No method of electronic transmission is 100% secure, but we take reasonable steps to protect your information.

Changes

If we change this policy, we will update the “Last updated” date above. Material changes will be noted on the site.

Contact

Questions? Email songaroomusic@gmail.com or reply to any email we've sent you.