Privacy Policy

The data controller for your personal data is MF Brothers LLC (Delaware, United States), operator of Gift That Song. For any privacy inquiries, you can email us at hi@giftthatsong.com.

We collect information you provide directly when you:

• Complete the personalized song order form.
• Upload photos for your video.
• Make a payment.
• Contact us by email or other channels.

2.1 Information you provide

• Name of the song recipient
• Relationship with the recipient
• Your story, dedication, and lyrics customization
• Special occasion (optional)
• Musical preferences (genre, mood, voice type)
• Photos you upload for the video (optional)
• Deadline (optional)
• Your email address
• Payment information (processed by our payment providers)

2.2 Information we collect automatically

• Device and browsing data (IP address, browser type, operating system)
• Pages visited, events, and interactions on the site
• Cookie identifiers and similar technologies (see Section 7)

We use the information collected to:

• Create and deliver your personalized song and video.
• Process your payment.
• Communicate with you about your order and provide support.
• Operate, measure, and improve our Service and advertising.
• Prevent fraud and comply with legal obligations.

When European or UK law applies to you, we process your data on the following bases:

• Contract performance: to create and deliver your order.
• Consent: for non-essential cookies, marketing, and personalized advertising.
• Legitimate interest: to improve the Service, measure performance, and prevent fraud.
• Legal obligation: to comply with accounting, tax, and legal requirements.

We do not sell or rent your personal information. We share it only with providers that help us operate the Service, and when required by law. These providers process data on our behalf under confidentiality obligations:

Categories of providers we work with:

• Payment processing: Stripe and local payment providers.
• AI music and text generation: artificial intelligence providers.
• Hosting and infrastructure: Amazon Web Services (storage and video rendering).
• Transactional email and newsletter: Resend.
• Analytics and advertising: Google (Analytics, Ads, Tag Manager) and Meta (tracking pixel).
• Music distribution (only if you purchase that add-on): distribution partners to streaming platforms.

We may also disclose information when required by law, court order, competent authority, or to protect our rights.

We operate from the United States and use providers located in different countries. Therefore, your information may be transferred and processed outside your country of residence, including the United States. Where applicable, we apply safeguards required by law (for example, standard contractual clauses) to protect such transfers.

We use cookies and similar technologies to:

• Essential: operate the site and order process.
• Analytics: understand how the site is used (for example, Google Analytics).
• Advertising and measurement: measure and optimize campaigns (for example, Meta pixel and Google Ads).

You can manage your preferences through the consent banner (when available) and your browser settings. Blocking certain cookies may affect site functionality.

We implement technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest.
• Restricted access to personal information.
• Regular system monitoring.
• Staff training on data privacy.

No system is 100% secure; we cannot guarantee absolute security of information.

We retain your personal information for as long as necessary to:

• Fulfill the purposes described in this policy.
• Comply with legal, accounting, and tax obligations.
• Resolve disputes and enforce our agreements.

When no longer necessary, we securely delete or anonymize it.

Depending on your country of residence (for example, under GDPR in the EU, UK GDPR in the United Kingdom, Law 1581 of 2012 in Colombia, LGPD in Brazil, or U.S. state laws), you may have the right to:

• Access your personal information.
• Correct inaccurate information.
• Request deletion of your information.
• Object to or restrict processing.
• Request data portability.
• Withdraw your consent at any time (without affecting the lawfulness of prior processing).

To exercise these rights, email us at hi@giftthatsong.com. You may also file a complaint with the data protection authority in your country.

The Service is not directed at minors. We do not knowingly collect data from minors without parental consent. If you believe a minor provided us data, contact us to delete it.

Your order may include data and images of other people (for example, the gift recipient). You are responsible for obtaining their consent to share that information with us to create the song and video.

We may update this Privacy Policy from time to time. We will notify you of significant changes by publishing the new version on this page with its update date.