Privacy Policy of Personalised Song

1. Responsibility and contact

The operator of Personalised Song at https://personalisedsong.nz is responsible for personal information handled through this service. The website address is not a claim of a New Zealand establishment.

For privacy questions, access, correction or deletion requests, contact [email protected]. We may verify your connection to an order before disclosing or changing records.

2. Information we process

We process the contact details you provide, your story and any names or personal details within it, language and creative choices, order and payment status, support correspondence, generated lyrics and media, uploaded photographs, and personalised page text. Technical records may include IP address, browser/device information and diagnostic logs.

Stripe handles payment details; we do not store full card information. Information needed to create, charge for and deliver an order is necessary for those functions.

3. Why we use information

We use information to fulfil orders, create lyrics and recordings, process payments, deliver and maintain Song Pages, provide optional versions and karaoke, personalise pages, answer questions, resolve complaints, meet legal obligations and secure the service. Authorised administrators can access records needed for these tasks. We do not sell personal information.

4. Information about other people

Only include information about a recipient, family member or friend that is relevant and that you are entitled to share. Avoid unnecessary sensitive details. The operator remains responsible for applicable requirements concerning indirect collection and notification, including any relevant exceptions under New Zealand privacy law.

5. Providers and overseas processing

Providers used to operate the service include OpenAI for lyrics, KIE for music generation, Stripe for payments, Resend for transactional email, Supabase for order records, and Cloudflare R2 and hosting infrastructure for files and delivery. Some providers have independent payment, security or legal purposes.

Information may be processed or stored outside New Zealand. Overseas processing and disclosure must meet applicable requirements of the Privacy Act 2020, including information privacy principle 12 where it applies. Processing solely by an agent on our behalf is distinct from disclosure for a provider's own purposes. We do not claim that data stays in New Zealand or that all provider arrangements have identical protections.

6. How long we keep information

We retain records and files as needed to fulfil orders, maintain Song Pages, handle support and complaints, meet legal obligations and manage claims. There is no universal automatic expiry for all orders or MP3 files, and page hosting is not guaranteed indefinitely.

You can request deletion at [email protected]. Requests are assessed against lawful retention needs; some records may need to be retained for legal or accounting reasons. We do not promise a fixed deletion period that the service does not implement.

7. Song Pages and sharing

A Song Page is accessible to anyone holding its unique link and may display lyrics, the photograph, title and dedication. It is marked not to be indexed, but it is not password-protected. The original form and your email address are not shown there.

Link holders can use available page-personalisation controls. Share the link thoughtfully; removing a page cannot recover recordings or images already saved by other people.

8. Browser storage and statistics

Local storage can hold an unfinished order or display settings. Session storage can hold visit attribution, such as campaign parameters, a referring page without its query parameters and the landing page; this may be attached to an order.

The network supports cookieless Umami visit and order-step statistics where configured on live sites, and order-linked playback counts. We do not add advertising-tracking cookies. Stripe may use its own security technologies and cookies. Administrative access is authenticated; no internet service can guarantee absolute security.

9. Your rights and messages

You may ask to access or correct information we hold about you, or raise a privacy complaint, at [email protected]. Requests are handled under applicable law and its time limits and exceptions. You may also contact the New Zealand Office of the Privacy Commissioner at privacy.org.nz. Deletion is subject to lawful retention requirements.

Order delivery, status and support emails are transactional, not a newsletter subscription. Buying a song is not consent to unrelated marketing; any commercial marketing must meet applicable consent, sender-identification and unsubscribe requirements.

10. Changes to this policy

We may update this policy when the service or legal requirements change. The current version and its date are shown on this page.