Privacy Policy

1. Information We Collect

Personal Information You Provide:

• 👤 Account Information: Name, email address, phone number when you create an account
• 🎵 Song Creation Data: Personal stories, memories, relationship details, recipient information, special occasions, musical preferences
• 💳 Payment Information: Billing address, transaction history (processed securely by payment providers)
• 💬 Communication Data: Messages, feedback, revision requests, and support conversations
• 🎭 Sensitive Personal Stories: Emotional memories, personal relationships, family histories shared for song creation

Information Collected Automatically:

• 🌐 Technical Data: IP address, browser type, device information, operating system
• 🍪 Usage Data: Pages visited, time spent, click patterns, shopping cart activity
• 📱 Location Data: General location based on IP address for tax and legal compliance

2. How We Use Your Information

• 🎵 Custom Song Creation: Use your personal stories and preferences to compose personalized songs
• 💳 Payment Processing: Process transactions, prevent fraud, and handle refunds
• 💬 Customer Collaboration: Communicate during the song creation process for revisions and feedback
• 📧 Service Communications: Send order confirmations, delivery notifications, and project updates
• 🎨 Quality Improvement: Enhance our songwriting process and service quality
• 🔍 Analytics: Improve website functionality and user experience
• ⚖️ Legal Compliance: Meet tax, accounting, and regulatory requirements

3. Legal Basis for Processing (GDPR)

• 📝 Contract: Processing necessary to create and deliver your custom songs
• ✅ Consent: For marketing communications, special category data (sensitive stories), and certain cookies
• ⚖️ Legal Obligation: Tax records, accounting, and regulatory compliance
• 🎯 Legitimate Interests: Service improvement, security, and business operations

4. Payment Information & Security

• 🔒 Stripe: Secure payment processing with end-to-end encryption
• 🔒 PayPal: Protected transactions through their secure platform
• 🛡️ SSL Encryption: All data transmitted through HTTPS secure connection
• 💳 Tokenization: Payment tokens used instead of actual card details

5. Digital Product Fulfillment & Third Parties

To create and deliver your custom digital songs, we may share necessary information with:

• 👨‍🎤 Composers & Songwriters: Only the personal stories and details needed for your specific song
• 🎚️ Audio Producers: Technical details for music production and audio engineering
• 📧 Email Delivery Services: For secure digital file distribution and download links
• ☁️ Cloud Storage: Secure storage of song files and project materials
• 📊 Analytics Providers: Google Analytics for website improvement (anonymized data)
• 💬 Communication Tools: Email platforms for project updates and support

6. Data Retention for Digital Products

We retain your information for specific periods to serve you better:

• 📊 Tax & Financial Records: 7 years (Estonian legal requirement)
• 🎵 Song Files & Project Data: Indefinitely for customer access and re-downloads
• 💬 Project Communications: 5 years for quality reference and customer service
• 👤 Inactive Accounts: 3 years after last activity, with notification before deletion
• 📝 Personal Stories & Lyrics: Retained only for active projects and customer archives

7. Your Rights (GDPR & CCPA)

• 👁️ Right to Access: Request copies of your personal data and song project files
• ✏️ Right to Rectification: Correct inaccurate personal or song information
• 🗑️ Right to Erasure: Request deletion of your data (excluding legal financial records)
• ⏸️ Right to Restrict Processing: Limit how we use your personal stories
• 📤 Right to Data Portability: Receive your data in usable format, including song project details
• 🚫 Right to Object: Opt-out of marketing and certain data processing
• 🔍 Right to Know (CCPA): Know what personal information is collected and how it's used
• 💰 Right to Non-Discrimination (CCPA): Equal service and pricing regardless of privacy choices

8. Cookies & Tracking for E-commerce

We use cookies and similar technologies to provide our digital service:

• 🛒 Essential Cookies: Shopping cart functionality, user sessions, and order processing
• 🔐 Authentication Cookies: Login sessions and account security
• 💾 Preference Cookies: Remember your song preferences and project details
• 📊 Analytics Cookies: Google Analytics for website improvement and user experience
• 🎯 Marketing Cookies: Facebook Pixel and Google Ads for advertising (with consent)

9. International Data Transfers

As we work with creative talent worldwide, your data may be transferred internationally with safeguards:

• 🌍 Adequacy Decisions: EU-US Data Privacy Framework compliance
• 📄 Standard Contractual Clauses: With composers and service providers outside EEA
• 🔒 Additional Safeguards: Encryption and data minimization for international transfers
• 📋 Data Processing Agreements: All international composers sign strict data processing agreements

10. Children's Privacy

11. Song Content & Intellectual Property

• 🎭 Confidential Stories: Your personal stories and memories are treated as strictly confidential
• 📄 Content Ownership: We don't claim ownership of your personal stories or the facts shared
• 🎵 Song IP Rights: Final musical composition and recording become your property upon full payment
• 📁 Digital File Storage: High-quality song files stored securely for future access and re-downloads
• 🔒 Project Confidentiality: All song projects are confidential between you and our creative team

12. Data Security for Digital Products

We implement comprehensive security measures for your digital products and data:

• 🔒 Encryption: SSL/TLS for data in transit, AES-256 for data at rest
• 🛡️ Access Controls: Role-based access to sensitive project data and personal stories
• 📧 Secure Communications: Encrypted email and secure file transfer for song deliveries
• 🔍 Regular Audits: Security assessments and penetration testing
• 💾 Secure Backups: Regular encrypted backups of song files and project data

13. Data Breach Procedures

In the unlikely event of a data breach affecting your digital products or personal data, we will:

• 🔔 Notify affected users within 72 hours of discovery
• 📧 Provide clear details of the breach and affected data types
• 🛡️ Take immediate steps to secure systems and prevent further access
• ⚖️ Cooperate fully with regulatory authorities and follow legal requirements
• 🔒 Offer identity protection services if sensitive personal data is compromised

14. Do Not Sell My Personal Information (CCPA)

We do not sell your personal information to third parties. California residents can exercise their CCPA rights by contacting us. We may share data only with service providers essential for creating your custom songs.

15. Digital Product Specifics

Custom Song Creation Process:

• 📝 Story Collection: Personal data collected is strictly limited to what's necessary for your song
• 👥 Collaborator Access: Only essential team members access your project data
• 💾 File Retention: Song files preserved indefinitely for customer access
• 🎨 Creative Notes: Production notes and creative discussions are kept confidential

16. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• 📧 Email notification to registered users 30 days before changes take effect
• 🌐 Posting a prominent notice on our website and in your account dashboard
• 📅 Updating the "Last Updated" date at the top of this policy

Continued use of our services after changes constitutes acceptance of the updated policy.

17. Order Processing & Service Providers

We share your information with third-party providers essential for delivering your custom songs:

• 🛒 E-commerce Platform: WooCommerce/Shopify for order management and processing
• 📧 Email Service Providers: For order confirmations and digital delivery
• 💳 Payment Processors: Stripe, PayPal for secure transaction processing
• 📊 Analytics: Google Analytics for website optimization

18. Special Category Data Processing

Withdrawing Consent: You may withdraw consent for marketing communications or special category data processing by emailing us or using unsubscribe links in our emails.

19. Automated Decision Making

We do not use fully automated decision-making processes that significantly affect you. All song creation involves human composers and professional judgment.

20. Right to Lodge Complaints

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable data protection laws.

Estonian Data Protection Authority: Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
Website: https://www.aki.ee
Address: Tatari 39, 10134 Tallinn, Estonia