Privacy Policy

Effective September 27, 2026. BlueFriday Limited operates Songlet and is responsible for the personal information described here. Contact us using the details below for access, correction, export, deletion or privacy questions.

Information and purpose

We process your email, sign-in verification records, account identifier, credits and invitation attribution to provide and protect accounts. We process your lyrics, author name, audio/video, generation task identifiers and sharing choices to generate, store and deliver songs. IP-derived rate-limit records and necessary security/service logs help prevent abuse and investigate failures. We do not need your address or payment-card details for the current free service.

Your browser stores your current draft locally so it can survive refreshes. It may be visible to someone using the same browser profile. Cloud saving is a separate action after sign-in. A necessary HttpOnly session cookie keeps you signed in for up to 30 days. There are no advertising trackers in this release.

Service providers and international processing

Resend processes your email and sign-in message for delivery. Cloudflare supplies DNS, HTTPS edge services and contact-email routing. Vultr hosts the application and stored account/creation data. Volcengine processes the lyrics and selected voice parameters to create music; it receives the submitted lyric content, so do not include sensitive personal details. Author credit is added by Songlet during export. These providers may process information outside your home country under their applicable service arrangements; our music integration sends lyrics through an isolated processing node in mainland China to a China-region API. Generated audio passes through that node before being stored on our application server; temporary audio copies on the processing node are removed after transfer. Email delivery infrastructure may operate in the United States. Contact us for current hosting and transfer details.

We do not sell your personal information or use private songs in public marketing without your permission. We do not train our own models on your private lyrics. Provider processing may include generation, service protection, troubleshooting and legally required retention under their terms. Public share links disclose the chosen author, lyrics and media to anyone possessing the link.

Retention and your choices

We retain accounts, credits, drafts and songs while needed to operate your account, until you delete songs or request account deletion, subject to fraud prevention and legal requirements. Sign-in codes expire after 10 minutes; necessary security records are minimized. Operational backups are retained up to 14 days once scheduled backups are enabled; deleted material may remain in restricted backups until rotation. We do not promise permanent archival storage.

Delete a song or revoke its sharing from your library. Email us to request account deletion, an information copy or correction. We may verify ownership before acting. Minimal credit, abuse or transaction records may need longer retention to prevent repeated free allowances or meet legal duties. We will explain any applicable exception. Previously downloaded copies held by others are outside our control.

We use access restrictions and encrypted transport, but no system can guarantee absolute security. This service is for adults, not children. If you believe a child has submitted personal information, contact us.