Privacy Policy

1. Who we are

GetYourSong ("we," "us," "our") is a music analysis SaaS product. This Privacy Policy explains how we collect, use, and protect your information when you use our website (getyoursong.app) and applications.

2. Information we collect

Account information: When you sign up, we collect your email address and (optionally) your name. If you sign in via Google OAuth, we receive your name, email, and profile picture from Google.

Usage data: We log the songs you analyze (title and artist text only — never audio recordings), the prompts you generate, and basic interaction events (clicks, page views) for product improvement.

Audio files: If you upload an audio file for analysis, it is processed in your browser only — we never receive or store the audio. We only receive the extracted measurements (BPM, key, energy).

Payment information: Handled entirely by Stripe. We never see or store your card details. We only receive a Stripe customer ID and subscription status.

Cookies: We use essential cookies (session, auth) and a single privacy-friendly analytics cookie (Plausible). No third-party advertising trackers, ever.

3. How we use your information

• To provide the service (analyze songs, generate prompts, manage your account)
• To process payments via Stripe
• To send essential transactional emails (account confirmations, billing receipts)
• To improve the product based on aggregate, anonymized usage patterns
• To respond to support requests

We do not use your data to train AI models. We do not sell or rent your data to anyone.

4. AI processing

Song analysis is powered by Anthropic's Claude API. When you submit a song for analysis, the title and artist are sent to Anthropic for processing. Anthropic does not retain this data for training. Read Anthropic's privacy policy.

5. Data sharing

We share data only with these service providers, exclusively to operate the service:

• Vercel — hosting and deployment
• Anthropic — AI analysis (Claude API)
• Stripe — payment processing
• Plausible — privacy-friendly analytics (no personal data)
• Resend / Postmark — transactional email

6. Your rights

Under GDPR, CCPA, and similar laws, you have the right to:

• Access the data we hold about you
• Request correction or deletion of your data
• Export your data in a portable format
• Object to processing or withdraw consent

Email privacy@getyoursong.app to exercise any of these rights. We respond within 30 days.

7. Data retention

We retain your account data and analyses for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days, except where required by law (e.g., billing records kept for 7 years for tax purposes).

8. Security

We use industry-standard encryption (TLS 1.3 in transit, AES-256 at rest), restrict access to authorized personnel only, and undergo regular security reviews. No system is 100% secure, but we take reasonable precautions.

9. Children

GetYourSong is not intended for users under 16. We do not knowingly collect data from anyone under 16. If you believe a minor has created an account, contact us and we'll delete the account.

10. International transfers

Our servers are located in the United States. By using GetYourSong, you consent to transferring your data to the US. We use Standard Contractual Clauses for EU/EEA data transfers.

11. Changes to this policy

We may update this policy occasionally. Material changes will be communicated via email at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

Privacy questions? Email privacy@getyoursong.app.