Privacy Policy

Last updated: December 2025

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

• Contact Information: Email address
• Order Information: Recipient name, relationship, occasion, and other details needed to create your song
• Story Content: Personal stories, testimonies, memories, and messages you share for song creation
• Payment Information: Processed securely by Stripe; we do not store full card details
• Feedback: Ratings, reviews, and testimonials you provide
• Media Submissions: Video testimonials and photos you choose to upload
• Communications: Emails and messages you send to our support team

1.2 Information Collected Automatically

When you use our service, we automatically collect:

• Device Information: Browser type, operating system, device type
• Usage Data: Pages visited, time spent, click patterns, referral sources
• Location Data: General geographic location based on IP address
• Cookies and Tracking: Session data, preferences, and analytics (see Section 6)

2. How We Use Your Information

We use the information we collect to:

2.1 Provide Our Services

• Create your personalized song based on your story
• Process payments and fulfill orders
• Deliver your song and send order notifications
• Provide customer support
• Process refunds and handle disputes

2.2 Improve and Personalize

• Analyze usage patterns to improve our service
• Develop new features and offerings
• Personalize your experience
• Test and optimize our website

2.3 Marketing and Communications

• Send order-related emails (transactional)
• Send promotional emails about new features or offers (with your consent)
• Send abandoned cart reminders
• Use testimonials and reviews for marketing (with consent or as permitted by our Terms)

2.4 Security and Legal

• Detect and prevent fraud
• Enforce our Terms of Service
• Comply with legal obligations
• Respond to legal requests

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business:

• Stripe: Payment processing
• Supabase: Database and file storage
• Resend: Email delivery
• Vercel: Website hosting
• Analytics providers: Google Analytics, Facebook Pixel, Microsoft Clarity

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

3.4 With Your Consent

We may share your information for other purposes with your explicit consent.

4. Your Story and Song Content

We treat the stories and testimonies you share with special care:

• Your story content is used to create your personalized song
• We do not share your complete story publicly without explicit consent
• Anonymized or aggregated insights may be used to improve our services
• Testimonials and reviews may be used for marketing with your consent
• Video testimonials are subject to our Media Release Agreement

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and fulfill orders
• Comply with legal obligations (e.g., tax records)
• Resolve disputes and enforce agreements
• Maintain business records

Order data is typically retained for 7 years for legal and accounting purposes. You may request deletion of your data as outlined in Section 8.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and session
• Analyze website traffic and usage
• Personalize advertising and marketing
• Prevent fraud and enhance security

Types of Cookies We Use

• Essential Cookies: Necessary for site functionality
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
• Marketing Cookies: Used to deliver relevant ads (Facebook Pixel)
• Session Recording: Help us understand user behavior (Microsoft Clarity)

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect site functionality.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure payment processing through Stripe (PCI-DSS compliant)
• Access controls and authentication
• Regular security assessments

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal requirements)
• Opt-out: Unsubscribe from marketing emails at any time
• Data Portability: Request your data in a portable format

To exercise these rights, contact us at hello@testimonysong.com.

8.1 Marketing Communications

You can opt out of marketing emails by:

• Clicking the "Unsubscribe" link in any marketing email
• Contacting us directly at hello@testimonysong.com

Note: You will continue to receive transactional emails related to your orders.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

10. Children's Privacy

Our service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will delete it promptly.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access, rectify, and erase your data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Our legal bases for processing include: contract performance, legitimate interests, consent, and legal compliance.

13. Third-Party Links

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending an email notification for material changes

15. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

• Email: hello@testimonysong.com
• Subject Line: Privacy Inquiry

We will respond to your inquiry within 30 days.