Privacy policy

What we collect

• Song details: the recipient's first name and how to pronounce it, your relationship, the occasion, style choices, the stories and message you type, your name if you sign the song, and an optional gift date.
• Contact details: your email address, which we need to send you the preview and the song.
• Payment: handled by Stripe. We never see or store your card number. We keep the order record (what you bought, when, how much, and Stripe's reference).
• Technical data: a random session identifier, a hashed version of your IP address, your browser type, country, pages viewed, and which steps of the quiz you completed. We use this to make the service work, prevent abuse, and understand where people drop off.
• Advertising data: if you arrived from an ad and, where required, accepted cookies, we use the Meta Pixel and Meta's Conversions API to measure whether our ads work. We send Meta event names (for example "started the quiz", "purchased") with a hashed email and standard browser identifiers. We never send your song details, stories, or the recipient's name to advertising platforms.

Why we use it

To make your song, deliver it, support you, send you the emails described below, keep the service safe, and measure our advertising. Our legal bases, where that applies, are performance of a contract (making your song), legitimate interests (security, analytics, improving the service), and consent (cookies and marketing emails where consent is required).

Emails

We send transactional emails you need (your preview link, your purchased song, a note if something goes wrong). We also send a short series of follow-ups about the song you made and, after purchase, a note asking how it went. Every follow-up has a one-click unsubscribe, and you can reply to any email to be removed. Visitors in the EU and UK only receive follow-ups if they opt in.

Who processes data for us

• Vercel (hosting) and Supabase (database and file storage, United States).
• Treblo (music generation, "Powered by Treblo"). Receives the lyrics prompt, including the recipient's first name and the details you shared. Treblo does not use this to train its models and does not publish it.
• Stripe (payments) and Resend (email delivery).
• Meta (ad measurement), only as described above.

We do not sell personal information and do not share it with anyone else except where the law requires.

Cookies

We use a session cookie to keep your quiz answers attached to you, a consent cookie to remember your choice, and, where you've allowed it, Meta's advertising cookies. Visitors in the EU and UK see a cookie banner and can reject advertising cookies; the site works the same either way.

How long we keep things

• Unpurchased previews, the song details behind them, and the audio: deleted 30 days after the preview expires (previews last 14 days).
• Purchased songs and the details behind them: kept while your song page is live, at least two years from purchase, so you can come back for your files and revisions.
• Order records: kept as long as tax and accounting law requires.
• Email address and send history: until you unsubscribe or ask us to delete it.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to our use of it, or withdraw consent at any time by emailing hello@hugsongs.com. We will respond within 30 days. If you are in the EU or UK you can also complain to your data protection authority. If you are in California you have the rights described in the CCPA; we do not sell or share personal information for cross-context behavioral advertising beyond the ad measurement described above, and you can opt out of that by rejecting cookies.

Children

HugSongs is for adults. Songs can be about children (a daughter, a grandson), but we don't knowingly collect personal information from anyone under 16 as a user.

Changes and contact

We will post updates here with a new date. HugSongs is operated by [legal entity name], [address]. Contact: hello@hugsongs.com.