Legal
Privacy Policy
Last updated 2026-10-31
1. Who is responsible for your data
This policy explains how MakeASong ("we", "us", "our") collects, uses, stores and shares personal information when you use makeasong.io (the "Service"), and the rights you have. We are the controller of the personal information described here. For privacy questions or requests, email support@makeasong.io.
2. Information we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account | Name, email address, profile picture and Google account identifier | Google, when you sign in with Google |
| Your content | Prompts, lyrics, titles, style choices and the songs, cover art and metadata generated for you | You, and the AI models that generate your songs |
| Usage and credits | Requests you make, their status, credit balance and history, library actions such as favorites and deletions | Created as you use the Service |
| Purchases | Plan or pack bought, amount, currency, order and subscription status, country for tax, and the processor's customer and transaction IDs | Our merchant of record when you pay. We do not receive or store full card numbers |
| Technical | IP address, browser and device type, pages visited, approximate location derived from IP, and error logs | Your browser and our hosting providers |
| Support | Messages you send us and our replies | You, when you email us |
3. How we use it
| Purpose | Legal basis (EU/UK) |
|---|---|
| Creating your account, generating, storing and playing your songs, and keeping your library | Performance of our contract with you |
| Processing purchases and subscriptions, keeping credit balances accurate, handling refunds | Performance of contract; legal obligation (tax and accounting records) |
| Customer support and service messages about your account, billing, security or policy changes | Performance of contract; legitimate interests |
| Preventing fraud, abuse and multiple accounts (for example limiting welcome credits per network using a hashed network identifier), and enforcing our Acceptable Use Policy | Legitimate interests in protecting the Service and its users |
| Understanding how the Service is used, in aggregate, to fix problems and improve it | Legitimate interests |
| Complying with law and responding to lawful requests | Legal obligation |
4. Your prompts, lyrics and songs
To make a song, we send your prompt or lyrics and style choices to the third-party AI music generation provider that powers the Service, and receive the finished audio and cover art, which we store for you. Providers process this content only to generate your songs.
We do not use your input or your songs to train AI models, and we do not publish your songs. Songs stay private in your library unless you choose to share them. Automated filters may check prompts and lyrics for content that breaks our Acceptable Use Policy, and we may review flagged content or content reported to us.
7. International transfers
Our providers process data in the United States and other countries that may have different data protection laws from yours. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses offered by those providers.
8. Security
Data is encrypted in transit (HTTPS) and at rest with our hosting providers. Access to production systems is limited to the people who run the Service and protected by strong authentication. Credentials are kept in encrypted secret stores. No system is perfectly secure; if a breach affects your personal information, we will notify you and the relevant authorities as the law requires.
9. How long we keep it
| Data | How long | Then |
|---|---|---|
| Account and library | While your account is open | Deleted within 30 days after you delete your account |
| Songs you delete | Kept in your trash so you can restore them, for up to 30 days | Permanently deleted |
| Purchase, credit and tax records | 7 years after the transaction | Deleted; kept this long to meet tax and accounting law |
| Support emails | 2 years after the conversation ends | Deleted |
| Server and security logs | Up to 90 days | Deleted |
10. Your rights
Depending on where you live (for example under the GDPR, UK GDPR or California law), you have the right to:
- know what personal information we hold and get a copy;
- correct inaccurate information;
- delete your account and personal information;
- receive your data in a portable, machine-readable format;
- object to or restrict processing based on legitimate interests;
- withdraw consent where we rely on it;
- not be discriminated against for exercising these rights.
Email support@makeasong.io from the address on your account. We will confirm your identity and respond within 30 days. You can also download any of your songs from your library at any time. If you are unhappy with our answer, you can complain to your local data protection authority.
11. Children
The Service is for adults aged 18 and over and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email support@makeasong.io and we will delete it.
12. Changes to this policy
We will update this policy when our practices change and show the new date at the top. For material changes we will notify account holders by email or in the app before they take effect.
13. Contact
Privacy and data requests: support@makeasong.io. We reply within 2 business days.
Questions about this document? Email support@makeasong.io — we reply within 2 business days. See also Terms of Service, Refund & Cancellation Policy and Acceptable Use Policy.