Privacy

Privacy Policy

The company responsible for your data is LCAS Brands Group LLC, 525 Randall Ave, Ste 100-1312, Cheyenne, WY 82001, United States. Contact: [email protected].

1. What we collect

What you type into the questions: your name, your email address, the name of the person the song is for, your relationship, the occasion, the memory you tell us, the phrase that matters and any extra details.

Keep in mind that the memory and those details are personal information about someone else as well as about you. Only write what that person would be comfortable having written down. We use it solely to write the song.

What is collected automatically: IP address, browser and operating system, the page you arrived from, and advertising campaign parameters if you came from an ad (utm_source, fbclid, gclid and similar).

Payment information: handled entirely by Stripe. We never see or store your card number. All we get back is the transaction identifier and its status.

2. What we use it for

• Creating and delivering your song — the main purpose; without this information there is no service.
• Taking payment and preventing fraud — through Stripe.
• Giving you access to your songs — your email is the key you use to get back to them in My songs, and how we answer if you write to us. We do not email the song itself.
• Enforcing the free lyric limit per email address every 24 hours, so the free service stays viable.
• Measuring where sales come from, so we know which ads work. See section 4.

3. Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioral advertising beyond the ad measurement described in section 4. We share it only with the providers the service needs to run:

• Cloudflare — site hosting, database and audio files.
• OpenAI — writing the lyric. Receives your answers, without your email.
• SunoAPI — producing the sung song. Receives the lyric and the style.
• Stripe — payment processing. Receives your email and the amount.
• Meta and Google — ad measurement, only if you arrived from an ad. See section 4.

We may also disclose information when legally required to do so.

4. Advertising and measurement

If you arrive from an ad, we send Meta (Facebook and Instagram) and Google the signal that a purchase happened, so we can measure which campaigns work.

Your email is never sent in the clear: it is first put through a one-way cryptographic function (SHA-256 hash), so it can match the conversion but cannot be read back.

We use our own cookies (_krob_sid, _krob_eid) to recognize your visit and attribute the sale, and Meta cookies (_fbp, _fbc) for the same purpose. You can block or delete them in your browser; the site works without them.

5. How long we keep it

• Unpaid orders: 30 days, after which the link stops working.
• Audio files for paid songs: 90 days from delivery. Download your song and keep it.
• Purchase records: as long as United States tax and accounting rules require.
• Browsing and attribution data: while it is useful for measuring campaigns, then deleted.

6. Your rights

Write to [email protected] from the address you ordered with and you can ask us for:

• Access — a copy of the information we hold about you.
• Correction — fixing anything that is wrong.
• Deletion — erasing your data and your songs, except purchase records we must keep by law.
• Opting out — stopping the use of your data for ad measurement.
• Portability — receiving your data in a readable format.

We answer within 45 days. California residents have these same rights under the CCPA/CPRA — including the right to know what we collect, to delete it, to correct it and to opt out of sale or sharing (we do neither) — and we will never discriminate against you for exercising them. Residents of other states with privacy laws, such as Colorado, Connecticut, Virginia, Texas and Utah, have comparable rights and can use the same address.

7. Where your data is processed

We are a United States company and our providers operate primarily in the United States, so that is where your data is processed, under the contractual commitments we require of each provider.

8. Children

This service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has sent us information, write to us and we will delete it.

9. Security

The whole site runs over HTTPS, audio files are not public — they are served only to whoever paid for the order — and our provider keys are stored encrypted, never in the code.

Getting to your songs. To see your songs in My songs we ask for two things: your email and the name of the person the song was for. Email alone is not enough, precisely so nobody can type someone else's address and read lyrics that are not theirs. We also limit how many attempts can be made.

Still, someone close to you who knows your email and who the song was for could open it. If that worries you — a surprise, for instance — write to us and we will delete the order as soon as you have downloaded it.

No system is perfect. If a breach affected your data, we would tell you.

10. Changes

We may update this policy. The version in force is always the one published here, with its date.

Last updated: September 20, 2026.