Privacy Policy

This policy explains how KeepYourSong ("we") processes personal data when you use KeepYourSong. We are the data controller for this processing. We keep data collection to what the Service needs and do not sell personal data.

• Account data: email address, display name, hashed password, email-verification status, two-factor settings and sign-in timestamps.
• Content you submit: song descriptions, lyrics, titles, style tags, and audio you upload for features such as stem separation.
• Generated material: songs, versions, stems and edits stored in your library, plus job metadata (model used, duration, cost, errors).
• Billing data: PayPal order and subscription identifiers, plan, amounts and dates. We never see or store your card number.
• Technical data: IP address, browser and device type, approximate country, and security logs such as rate-limit and bot-protection results.
• Activity records: a log of key actions on your account (creating, downloading, sharing, publishing, editing, reporting, payments and credit changes) with the time and IP address, used for security, abuse prevention and customer support.
• A random device identifier stored in a cookie, used only to make sure each person receives the free song for new accounts once.
• Support conversations: messages you send us through the chat widget or by email.

• To provide the Service you asked for (contract): accounts, generation, library, downloads, billing and support.
• To keep the Service secure and prevent abuse (legitimate interests): rate limiting, bot detection, fraud and chargeback prevention, content safety checks, and limiting the free song to one per person.
• Public works: songs you publish to the Explore gallery (publishing is on by default when you create a song, and you can turn it off before or after creating) are shown publicly with their title, style, lyrics, cover and your display name. Songs that appear to contain a person's name or a private message are kept private by default.
• Moderation and support: our administrators can view the songs in your library, including prompts and lyrics, to review published works, handle reports and copyright notices, and answer your support requests. Administrator access is logged.
• To improve the product (legitimate interests): aggregated, privacy-preserving analytics.
• To comply with legal obligations: tax and accounting records, responding to lawful requests, copyright notices.
• With your consent, where we ask for it: for example optional marketing emails.

We share personal data only with processors that help us run the Service, under contracts that restrict their use of it:

• Third-party AI cloud providers that process data on our behalf under contract: receive your descriptions, lyrics and audio in order to generate or process songs. Providers may be located in the United States.
• Hosting and storage providers (for example Vercel, our database provider and Cloudflare R2) for the website, database and audio files.
• PayPal for payments; Cloudflare Turnstile for bot protection; Resend for transactional email.
• Umami for analytics. Umami is cookie-free and does not build cross-site profiles; we see page views, referrers, country and the product events listed in our documentation, never your name or email.
• Google Ads for measuring whether our ads lead to sign-ups and purchases. If you arrive from one of our ads and allow advertising cookies, Google sets a cookie that lets us count a sign-up or purchase as coming from that ad. We do not use it for remarketing or ad personalisation, and we do not send Google your name or email.
• Tawk.to for the support chat. When you chat with us, Tawk.to processes your messages and, if you are signed in, your email and display name.

We may also disclose data where required by law, to protect our rights or users' safety, or as part of a merger or acquisition (with notice to you).

We are based in Hong Kong and use providers in the United States and the European Union. Where data leaves your region we rely on the provider's standard contractual clauses or equivalent safeguards.

• Account and library data: for as long as your account exists, and up to 30 days after deletion for backups.
• Billing records: 7 years, as required for tax and accounting.
• Security and server logs: up to 90 days.
• Account activity records (see section 2): up to 12 months.
• Prompts sent to AI providers: handled under each provider's retention policy; our providers are contractually barred from using your prompts to train their models.

Strictly necessary cookies: a session cookie to keep you signed in, a short-lived cookie for bot protection, a language preference cookie, and a random device identifier used to prevent abuse of the free song for new accounts. Our analytics (Umami) does not set cookies.

Advertising measurement cookies (optional): Google Ads cookies that tell us whether a visit from one of our ads led to a sign-up or purchase. In the EU, EEA, UK and Switzerland they are off until you click Accept in the cookie notice; elsewhere they are on unless you click Reject. You can change your choice at any time by clearing this site's data in your browser, which shows the notice again.

Depending on where you live (including the EU/UK GDPR, the California CCPA/CPRA and the Hong Kong PDPO) you may have the right to access, correct, delete or export your personal data, to restrict or object to processing, and to withdraw consent. You can download your songs at any time from your library and request account deletion or a data export by emailing us. We respond within 30 days. You may also complain to your local data protection authority.

KeepYourSong is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

We will notify you of material changes by email or on the website. Questions and requests: KeepYourSong · support@example.com