Privacy Policy

This Privacy Policy describes how Songs AI ("Songs AI", "we", "us", or "our") collects, uses, and protects your personal information when you use our website and services.

Effective Date: May 2026

Information We Collect

We collect information that you provide directly to us, including:

Account information: email address, name, and profile picture (when signing in via Google or other social login providers).
Payment information: processed securely by our third-party payment provider (Stripe). We do not store your full credit card details on our servers.
Content you create: song descriptions, lyrics, generated music, and other content created through our services.
Communications: any correspondence you send to us via email or our contact forms.

We also collect certain information automatically:

Usage data: pages visited, features used, and interactions with the service.
Device information: browser type, operating system, IP address, and general location (country/region level).
Cookies and similar technologies: for session management, authentication, analytics, and improving your experience.
Referral data: UTM parameters and referral source to understand how you found us.

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our AI music generation services.
Process transactions and manage your account and credits.
Authenticate your identity and secure your account.
Send you transactional emails (login links, purchase confirmations) and, with your consent, marketing communications.
Analyse usage trends to improve our platform and user experience.
Detect and prevent fraud, abuse, and security incidents.
Comply with legal obligations.

Your Content and Creations

Songs, lyrics, and other content you generate using Songs AI are yours. We do not claim ownership over your creations.

Your song descriptions, lyrics, and generated outputs are not shared publicly and are not used to train or fine-tune AI models. What you create stays private to your account.

Third-Party Services and Integrations

We use in-house AI models and trusted third-party service providers to operate our platform:

Authentication: Google OAuth (and in the future, Apple Sign In) for social login. When you sign in with Google, we receive your name, email, and profile picture from Google in accordance with their privacy policy.
Payments: Stripe for secure payment processing.
Lyrics writing: In-house fine-tuned AI models (OpenAI, Google).
AI Music Generation: in-house built AI models and reputable, licensed AI providers (like Google) for music generation. We only partner with providers who respect copyright and intellectual property rights.
Hosting and Infrastructure: cloud hosting providers for data storage and content delivery.
Analytics: anonymised analytics to understand usage patterns.

In the future, we may offer optional integrations such as publishing content directly to platforms like YouTube. Any such integration will require your explicit consent and authorisation before we access or act on your behalf on any third-party platform. You will be able to revoke access at any time.

Social Login (Google, Apple)

When you choose to sign in using a social login provider (e.g., Google), we receive limited profile information as described above. We only request the minimum scopes necessary for authentication (openid, email, profile). We do not access your contacts, calendar, drive, or any other private data from your Google account unless you explicitly authorise a specific integration.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you request account deletion, we will remove your personal data within 30 days, except where we are legally required to retain it (e.g., financial transaction records).

Generated content (songs, lyrics) associated with your account will also be deleted upon account deletion.

Data Security

We implement industry-standard security measures to protect your personal information, including:

HTTPS encryption for all data in transit.
Secure, hashed password storage (Argon2id).
Regular security audits and monitoring.
Access controls limiting who can access your data.

Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: request a copy of the personal data we hold about you.
Rectification: request correction of inaccurate data.
Erasure: request deletion of your personal data ("right to be forgotten").
Portability: request your data in a portable format.
Objection: object to certain processing of your data.
Withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please contact us using the contact information at the bottom of our website.

Children's Privacy

Our services are not directed to children under the age of 13 (or applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

International Data Transfers

Your information may be processed and stored in countries other than your own. We ensure appropriate safeguards are in place for any international data transfers in compliance with applicable data protection laws.

Cookies

We use cookies for:

Essential cookies: required for authentication, session management, and security.
Analytics cookies: to understand how our service is used and improve it.
Preference cookies: to remember your settings and preferences.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the service.

Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. We encourage you to review this page periodically.

Policy last updated: May 2026

For questions about this Privacy Policy, please contact us using the contact page at the bottom of our website.