Privacy Policy

Effective September 27, 2026. Payment-provider information updated September 28, 2026. Service descriptions clarified September 28, 2026. BlueFriday Limited operates Songlet and is responsible for the personal information described here. Contact us using the details below for access, correction, export, deletion or privacy questions.

Information and purpose

We process your email, sign-in verification records, account identifier, credits and invitation attribution to provide and protect accounts. We process your lyrics, author name, audio/video, generation task identifiers and sharing choices to generate, store and deliver songs. IP-derived rate-limit records and necessary security/service logs help prevent abuse and investigate failures. We do not need your address or payment-card details for the current free service.

Your browser stores your current draft locally so it can survive refreshes. It may be visible to someone using the same browser profile. Cloud saving is a separate action after sign-in. A necessary HttpOnly session cookie keeps you signed in for up to 30 days. Optional advertising measurement is disabled until you choose to allow it in Privacy settings. Essential sign-in and draft storage continue to work if you refuse.

Affiliate applications and optional referral attribution

Updated October 21, 2026. If you apply to the Affiliate Program, we use your account email, name or business name, public website or social profile, promotion plan and accepted terms to review and administer the partnership. We retain review decisions, commission adjustments and payout records for accounting and dispute handling. Payouts are manually reviewed; do not put banking details or sensitive identity documents in the application.

When the program is active, an approved partner link can offer optional first-party referral attribution. Only after you choose Allow referral do we set an HttpOnly referral cookie, valid for up to 30 days. It is separate from advertising consent and does not load a third-party affiliate tracker. Global Privacy Control disables this optional attribution. The first eligible consented referral is attached only when a new account is created. Existing accounts cannot be attributed retroactively. We compare existing account registration details to screen obvious self-referrals.

Use Referral privacy in the footer to remove the referral cookie. Removing it does not erase an attribution already attached to your account or related financial records. Partners see referral counts, anonymous commission references and their payout records, not your email, lyrics or song history. Contact contact@songlet.app for access, correction, deletion or questions about retained records.

Optional measurement and advertising partners

Updated October 28, 2026. With your permission, we use a random first-party measurement identifier for up to 90 days to link visits, verified registration, successful lyric generation, first completed song, trial activation and confirmed subscription payments. We retain a limited campaign source and numeric campaign/ad identifiers, event time and verified purchase total including tax and transaction currency. These measurement records are separate from your lyrics. They expire within 90 days and are removed from the active measurement store when you withdraw permission on this browser.

Only page visits and verified paid subscription purchases are shared with Songlet’s Meta advertising account (Dataset 4176047302639418), and only after your permission and activation of this feature. Registration, lyrics, songs and trial milestones stay in our internal measurement store. Partner Dataset IDs are not enabled. Historical purchases are not backfilled. Meta can receive browser/device information, IP address and its own cookie identifiers under its Privacy Policy. We do not add your email address, lyrics, song media, private share tokens or full campaign URLs to these events. We disable automatic event configuration and do not load the Pixel on private administration, checkout, report or shared-song pages. Measurement is optional and is not a condition of using Songlet.

Choose Essential only or reopen Privacy settings to withdraw. We honor Global Privacy Control for optional tracking. Withdrawal stops future tracking from this browser, removes its active first-party measurement records and attempts to remove Meta cookies set on this domain; it does not retract information already received by Meta or clear unrelated websites’ cookies. You can also manage Meta’s privacy controls. Our local dashboard records attempted browser SDK calls, which do not prove receipt by Meta or attribution to an ad. To prevent repeated purchase attempts across tabs and devices, a purchase is claimed once. A network interruption can therefore leave a purchase unreported. We retain a minimal purchase-event hash, destination and attempt timestamps to prevent replay after other measurement records expire or are deleted; this marker contains no email, lyrics, purchase amount or campaign details. We retain your privacy choice locally for up to 90 days. Restricted backups rotate within 14 days.

Service providers and international processing

Resend processes your email and sign-in message for delivery. Cloudflare supplies DNS and contact-email routing. Vultr hosts the application and stored account/creation data. Volcengine processes the lyrics and selected voice parameters to create music; it receives the submitted lyric content, so do not include sensitive personal details. Author credit is added by Songlet during export. These providers may process information outside your home country under their applicable service arrangements; our music integration sends lyrics through an isolated processing node in mainland China to a China-region API. Generated audio passes through that node before being stored on our application server; temporary audio copies on the processing node are removed after transfer. Email delivery infrastructure may operate in the United States. Contact us for current hosting and transfer details.

We do not sell your personal information or use private songs in public marketing without your permission. We do not train our own models on your private lyrics. Provider processing may include generation, service protection, troubleshooting and legally required retention under their terms. Public share links disclose the chosen author, lyrics and media to anyone possessing the link.

Writing scenes and optional feedback

When you request writing help, we send your selected scene and the brief you choose to OpenAI to generate three texts and lyric drafts. This can include a quoted message and context, recipient and occasion, relationship intent, or brand and product details. Free creation does not call the writing service. Leave out names, contact details and other personal information that is not needed. Input and generated replies are private, stored temporarily to recover a request without generating twice, and removed from the active text-request store within 25 hours. Minimal request identifiers, timestamps, account references and usage records remain to enforce allowances. OpenAI processing and any service-protection retention are governed by its API arrangements. We do not train a model on these messages.

Feedback is optional. A rating alone does not include your original brief or generated text in the review record. If you explicitly choose to include an example, authorized administrators can review the selected scene and original brief, generated candidate, edited text and note. Contributed example content is removed from the active review store within 31 days; rating totals can remain. Choosing not to contribute does not affect generation. Contact us to withdraw a contribution. Restricted backups may retain removed content until their normal rotation. Your browser can retain a separate lyric draft for each scene, including your own words in Free creation. Clear each scene draft or clear site data on shared devices. Making a song keeps the lyrics under the ordinary song retention and sharing rules.

Retention and your choices

We retain accounts, credits, drafts and songs while needed to operate your account, until you delete songs or request account deletion, subject to fraud prevention and legal requirements. For each new song, we retain your permission confirmation, policy and screening versions, provider/model, target duration, and a one-way input hash for the life of the account and as needed for a dispute; this is not a copyright certificate. We do not use private lyrics or report evidence to train our models. Rights-report evidence is restricted to authorized reviewers for up to 24 months after closure; active or unresolved restricted reports may be retained while needed for investigation, and a legal hold can require longer retention. Sign-in codes expire after 10 minutes; necessary security records are minimized. Scheduled operational backups are retained up to 14 days; deleted material may remain in restricted backups until rotation. We do not promise permanent archival storage.

Delete a song or revoke its sharing from your library. Email us to request account deletion, an information copy or correction. We may verify ownership before acting. Minimal credit, abuse or transaction records may need longer retention to prevent repeated free allowances or meet legal duties. We will explain any applicable exception. Previously downloaded copies held by others are outside our control.

We use access restrictions and encrypted transport, but no system can guarantee absolute security. This service is for adults, not children. If you believe a child has submitted personal information, contact us.

Payments and support administration

When checkout is available, FastSpring processes purchases as our payment reseller. To prepare a checkout and deliver purchased generations to the correct account, we send FastSpring internal account and order references, the selected subscription and transaction metadata. It receives the checkout and billing information you provide and processes payment details under its Privacy Statement. Songlet stores an order reference, account reference, plan, amount, currency, payment status and refund records; it does not receive or store your full card details. Authorized administrators can access account and delivery information needed for support, investigate abuse and reconcile credits. Administrative changes are logged.