What we keep, and how to make us forget it.

The controller of your personal data is SpecialSong Ltd. Write to [email protected] about anything on this page.

• Your answers to the questionnaire, including the recipient’s first name and how it is pronounced, and the names that sign the song.
• One email address, so we can send the link to the song. Marketing email is a separate, unticked box.
• If you buy: your order, the files, the gift page (note, photo, delivery time, the recipient’s email or phone number if you add one), the recipient’s reaction if they leave one and, if you add them, the photos for the lyric video’s pictures and the pictures drawn from them.
• Technical basics: your connection address and a session id, used for the daily preview limits and for counting which steps people finish. No advertising trackers.

We write the lyrics from your answers, send the lyrics to an AI music provider to record them, run an automatic check that the name and every line were sung, and deliver the result to you. The provider receives the lyrics and the style; it does not receive your email or the recipient’s contact details. The automatic check judges the recording, never you, and makes no decision about you. If you add photos for the lyric video, they go to an AI image service that draws the pictures from them; it receives the photos, your note and a few words about the song (the recipient’s first name, the occasion, a line of the lyrics), never your email, and you see every picture before the video renders. Upload photos of other people only with their permission.

• Writing, recording, delivering and fixing the song you asked for, and the transactional email about it (it is ready, it has been played, how did it land): because you asked us to, and to perform our contract with you.
• Keeping order and payment records: because tax law requires it.
• Preview limits, abuse and fraud checks, and counting which steps people finish: our legitimate interest in keeping free previews possible and the site working.
• Marketing email: only with your consent (the unticked box). Withdraw it any time with the one-click unsubscribe in every message.

What you tell us about the person the song is for is used only to write their song; that is why the email form asks you to confirm you may share it.

Stripe, for payment; we never see your card number. The AI music provider, for the lyrics and style only. An AI image service, for the lyric video’s pictures, only if you add photos for them. Our hosting and storage providers, to run the site and keep your files. Our email provider, to send the emails above. An SMS provider, only if you choose to text a gift link. Each of them handles the data only on our instructions. Nobody else, and nothing is sold.

The song, the lyrics and the gift page are private to their links. We do not publish them, use them in marketing, or show a reaction unless the recipient ticked the box allowing it.

The providers above process data in the European Union, the United States and elsewhere. Where personal data leaves the European Economic Area, the transfer is covered by a European Commission adequacy decision, by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

An unfinished brief

Seven days in your browser, thirty days on our side, then deleted.

A song you have not bought, with its answers and lyrics

Thirty days, so the preview link works, then deleted.

Your email, if you have not bought

Thirty days after your last song; until you unsubscribe if you ticked the marketing box.

A purchased song, its files, its page, the gift page, any reaction, and the photos and pictures for the lyric video if you add them

For as long as you want them: the files are yours and should not expire. Ask us to erase them any time.

Order and payment records (amount, date, Stripe reference, your email)

Seven years, because tax law requires it. Kept even after an erase request, with the email anonymised 30 days after it, and used for nothing else.

Support messages

Two years after the last reply.

Connection address and session id

Thirty days for the preview limits, after that only counts that identify nobody.

Enter the email you used and we send it a confirm link; nothing is deleted before you press the button it opens. Then every brief, lyric sheet, preview and unpaid song tied to it goes, with the email itself. Paid orders and their files stay so your purchase keeps working, and the email on them is anonymised after 30 days. The order and payment records tax law makes us keep stay, for that purpose only, until their seven years are up. To delete purchased files too, write to us from that address.

You can ask for a copy of what we hold, in a format you can take elsewhere; ask us to correct it, delete it or stop using it; object to a use based on our legitimate interest; and withdraw a consent you gave, at any time. Write to [email protected] or use the contact page; we answer within thirty days, usually within one.

If you think we got it wrong, you can complain to the data protection authority where you live (in the UK, the ICO). We would rather hear from you first.

This policy is version 2026-10-15, the same date as the terms. When it changes we publish the new version here under a new date, and tell you by email first if the change affects how we use what you already gave us.