Privacy Policy

What we collect

Account information: your email address, name, and password (stored as a salted hash, never in plain text).

What you submit in a session: voice recordings, photos, and written notes, plus the lyrics and songs generated from them.

Payment records: which plan you bought, the amount, currency, and gateway (Stripe or iPaymu), and that gateway's own reference for the transaction. We do not receive or store your full card number — that goes directly to the payment processor.

Usage events: things like when a session started, when a song finished, and which plan limits were hit — used to run and improve the service, described further below.

Technical data: your IP address (via Cloudflare, which sits in front of every request), and a small set of cookies described in "Cookies" below.

Recordings of other people

Voice recording is gated behind a screen that asks you to confirm everyone in the recording has agreed to be recorded. That confirmation is yours to give, not ours to verify — if a recording includes someone else's voice, you are responsible for having their permission before you record them, under whatever law applies to you (this varies by country and sometimes by state or province). We rely on your confirmation and do not independently check it.

How we use it

To run the actual product: your recordings and photos are sent to third-party AI providers to transcribe, analyze, and turn into lyrics and a finished song, then the result is sent back to you.

To run your account: enforcing your plan's limits, billing, and support if you contact us.

To improve the service: usage events help us see where the product is confusing or breaking, and are recorded without needing to replay your actual recordings or photos.

Who we share it with

AI providers that power the pipeline: a transcription provider, a lyrics/analysis provider, and a music-generation provider. Which specific providers are active can change as the service improves.

Payment processors: Stripe for card payments in US dollars, iPaymu for Rupiah payments in Indonesia.

Infrastructure providers: Cloudflare, which sits in front of the service for every request.

We do not sell your personal data, and we do not share your recordings, photos, or generated songs with anyone for advertising purposes.

How long we keep it

Recordings, photos, notes, and generated songs are kept for a number of days set by your plan, then deleted automatically — this runs daily, not on request. Higher plans keep things longer; the exact number for your plan is shown in Settings.

Deleting your account (Settings → Danger zone) deletes all of the above immediately and permanently, along with your account itself. This cannot be undone once confirmed.

Your rights

You can delete your account yourself at any time from Settings, which erases everything described above. If you want a copy of your data before deleting it, or believe something we hold about you is wrong, contact us at the address below.

Cookies

A session cookie that keeps you signed in, a CSRF cookie that protects form submissions, and a cookie that remembers your chosen language (English or Bahasa Indonesia). None of these are used for advertising or cross-site tracking.

Security

Connections to the service are encrypted (HTTPS). Recordings, photos, and generated songs are served only to the account that owns them, never at a guessable or public URL.

Age requirement

SnapSong is not directed at, and should not be used by, anyone under 18.

Changes to this policy

If this policy changes in a way that matters, the date and version at the top of this page will change. Continuing to use SnapSong after that means you accept the update.

Contact

Questions about this policy: [email protected]