Privacy Policy

Last updated: June 2025

SongSmith AI ('we') values your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information through our website and services, including via Google Sign-In and Google Analytics.

Information We Collect

Information via Google Sign-In

  • When you register or log in with your Google account, we receive basic public profile information from Google, which typically includes:
  • Your full name
  • Your email address
  • A link to your profile picture
  • We do not receive or store your Google password.

Data Generated During Service Use

  • Musical content you create and related metadata (e.g., lyrics you input, styles you choose).
  • Platform usage statistics: such as pages you visit, features you use, and time spent.
  • Device and browser information: IP address, browser type, operating system, device model.
  • Log information: including error reports and performance data for diagnostics and service improvement.

Cookies and Tracking Technologies

  • We use cookies and similar technologies to operate and improve our services. This includes session cookies to maintain your login state and Google Analytics to analyze traffic and user behavior. You can manage your cookie preferences through your browser settings.

How We Use Your Information

  • To provide and improve our music generation services.
  • For user authentication and account management.
  • To process payments and manage subscriptions.
  • To send service-related notifications and updates.
  • For customer and technical support.
  • To analyze service usage for product improvement.
  • To prevent fraud and ensure platform security.
  • To comply with legal and regulatory requirements.

Information Sharing

We are committed to not selling your personal information. We only share your information in the following limited circumstances:

  • With your explicit consent.
  • With service providers: We partner with third-party service providers (like Google Analytics) to operate and improve our services. They are only authorized to use your information on our behalf and under our instructions.
  • To comply with legal requirements: We may disclose your information when required by law, court order, or governmental request.
  • To protect legal rights: To protect our rights, property, or safety, and that of our users or the public.
  • Business transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of the transaction.

Third-Party Services

  • Authentication: We use Google as our sole login authentication provider.
  • Website Analytics: We use Google Analytics to help us understand how users interact with our site. Google Analytics collects information and reports website usage statistics without personally identifying individual visitors.
  • Cloud Storage & Computing: Music files and AI models may run on third-party cloud service providers (e.g., AWS, Google Cloud).
These third-party services have their own privacy policies. We recommend you review Google's Privacy Policy for more information.

Data Security

  • Using SSL/TLS encryption for transmitting sensitive data.
  • Employing industry-standard data encryption for storage.
  • Conducting regular security audits and vulnerability scans.
  • Restricting employee access to personal data.
  • Implementing strict data access controls and monitoring.

Data Retention

We retain your personal information only for as long as necessary to provide services. Account data is completely deleted within 30 days of account deletion. Backup data may take an additional 90 days to be completely purged.

Your Rights

  • Access right: view the personal information we hold about you
  • Correction right: update or correct inaccurate information
  • Deletion right: request deletion of your personal data
  • Restriction right: limit certain processing activities
  • Data portability right: obtain your data in a structured format
  • Objection right: object to certain data processing activities

Children's Privacy

Our services are not directed at children under 13 years of age. If we discover we have collected personal information from children under 13, we will immediately delete such information.

International Data Transfer

Your data may be transferred to servers outside your country/region. We ensure such transfers comply with applicable data protection laws and implement appropriate safeguards.

Policy Changes

We may update this Privacy Policy from time to time. Significant changes will be communicated to users via email or website notifications. We recommend regularly reviewing this policy.