Privacy Policy

Last updated: 17 October 2026

This policy explains what we collect, why, and how long we keep it. We have tried to write it in plain English rather than legal boilerplate.

1. The short version

We collect the story you tell us, the photographs you upload, your email address, and basic anonymous usage statistics. We use them to make your song. To measure our own ads, Meta learns when a page is viewed, a checkout starts or a purchase is made (section 3) — never your story, recording, photographs, lyrics, song, name or email. Your recording, photographs and story are stored encrypted in a private vault that no one can browse, are never opened by a person — only by the automated steps that make your song and video — and are deleted 7 days after your song is delivered. The song, its lyrics and the video stay on your private page for a year. You can delete everything sooner with one link on your order page. We never sell your data, and we never put your song page anywhere a search engine can find it.

2. Who looks at your files

Nobody at Serenada opens your photographs, your recording or your story. Only the automated steps that make your song and video use them: turning your recording into text, writing the lyrics, placing each photograph beside the right memory, and making the video. The one exception is if you ask us for help and send us your order link — then we look only at what we need to help you.

3. What we collect

Things you give us

• The voice recordings and the written story you give us about the person the song is for, and the names and details in them.
• Photographs you upload, if you choose to add them (including iPhone HEIC photos). Your browser makes large photographs smaller before sending them when it can. Before a photograph is kept, the location and camera details inside it are removed; a photograph we can't remove them from is deleted, not kept.
• Your choices: who the song is for (Mom, Dad, Partner, Friend or Someone else, if you tap one), occasion (and, for “Something else”, the few words you type), mood, style, language and voice. For a Funny song, the nicknames, running jokes or habits you type in its optional box.
• What you type while reviewing: “Anything we should know?”, a fix to something we heard wrong, “Anything you'd like different?” beside a lyric change, a change in your own words, a new song title, and the note with the free redo. Each is used only for that change or that redo.
• The choices for your video: the closing message, the font, whether the words are shown, and which photographs you take out, add or move.
• Your email address, which you give at the last step before your song is made (at payment, or on a free, family or gift link).
• If you buy a gift, the code and its link. If you make a song with a gift, free-song or family link, that link's code is kept with your order; a family link also checks your email address, because it gives one song per address. If you use “Email me my order link”, the email you type.

Things collected automatically

• Anonymous visit and step counts: how many visits the site gets and which of our links they came through, and how many visits reach each step of the order form (for example picking an occasion, starting a recording, adding photos or opening checkout). Each is counted once per browser session and kept only as a daily total by type of device (phone, tablet or computer), country and the link's name. These contain no names, no email addresses and no content from your story, and no cookie or code that could tell your visits apart from anyone else's.
• Your approximate country, derived from your connection, and your device's time zone. We use them only to choose the prices and currency you see (rupee prices need both an Indian connection and India's time zone), the order of voices, styles and examples, a nearby occasion, whether to ask before Meta's cookie (section 14), and to count the daily totals above by country.
• If you arrived through one of our tracking links (for example the one in our Instagram bio, or “Get their song” in a date reminder), the link's name — such as “instagram” — kept with your order so we know which links bring people. Never who you are, and no cookie.
• If you came through a creator's page (getserenada.com/ followed by their name), the creator's page name is kept with your order so they can be credited for it. Each visit to a creator's page is counted, per day, with nothing about the visitor. The creator sees only counts and amounts — never your name, email, story or song. So that a creator can't earn a commission on their own purchase, an order through a creator's page also keeps a scrambled code made from your connection's address and browser, and — if you pay by card — one made from the card's network, last four digits, issuing country and type as our payment provider reports them (never the card number, the address or the browser themselves). The same card code is kept on an order placed by a creator themselves (by their own email). They are used only for that check.
• To stop anyone hammering the site, a count of requests per visitor for a short while. We keep a scrambled code made from your connection's address, never the address itself, and forget it after a day.
• If something breaks, an error report: what failed, where, and a random order number. Never your name, email, story, lyrics or recording.
• To measure our ads (Meta): Meta's pixel on our public pages tells Meta that a page was viewed, that a checkout was started, and that a purchase was made, with its amount and currency. With it go Meta's own cookie (and the ad-click code when you arrive from a Meta ad), your connection's address and your browser. When you pay, our server tells Meta about the purchase the same way, so it is counted once — only if Meta's pixel has run in your browser; we keep your connection's address, browser and Meta cookie with your order only until that is done, then delete them. In the EU and EEA, the UK and Switzerland — and wherever we can't tell your country — none of this happens unless you tap Accept. It never happens on your private pages (order, song, dates, creator stats) or when you open a private link (a gift, free-song, family, Plus or second-song link, a share-page code, or a reminder with a name in it), never for free, family or test orders, and never includes your name, email, phone, story, recording, photographs, lyrics or song. See “Cookies” below.

Your song as an example — only if you say yes

• Once your song is ready, your order page asks “May we share your song as an example?” It is off unless you tick it, and you can untick it any time. We keep your answer and the date you gave it. We never use a song as an example without it, and if you untick it we stop using it for anything new.
• Your order page also has “How did they react?”, where you can write one line about it and, if you like, your first name; the “Your song is ready” email links to it. We keep what you write, the name and the date. We show your line on our site only if you tick “May we show this line on our site, with your first name, the occasion and that you bought it?” — with only those: the first word of the name you gave, the occasion (such as “Birthday”; a festival only by its name) and “Verified buyer”, never your email, the person it's for, or anything else. On our homepage, lines appear only once at least 3 people who bought a song have ticked it, marked “Verified buyer” — only for a song paid for with our payment provider (never a free, gift or family-link song), and only exactly as you wrote it: when you save your line we keep a sealed fingerprint of it, so a line changed by anyone but you is never shown. We may leave any line out (for example one that names someone or gives contact details). It is off unless you tick it, you can untick it or change your line any time, and “Delete everything now” removes it.

“Their dates” — only if you use it

• If you save dates on your private dates page (the days of the people you love), we keep exactly what you type there: a name, who they are to you, the occasion, the day and month, and the year if you give one. We use it for one thing only: to email you a reminder 7 days and 2 days before each date. Never for anything else, never shared, never used in marketing.
• Every reminder has a “Stop these reminders” link, for that date or for all of them (it opens a page with a Stop reminders button; your mail app's own Unsubscribe works too), and “Delete all my dates” on the page removes every date at once. Your dates are kept until you delete them.
• If you tick “Email me a reminder a week before … next year” on your order page, we save that day on your dates page (the name, who they are, the occasion, the day and month) with the time you ticked it and the exact words you ticked, and send you one reminder a week before it the next year — then no more for it. It is off unless you tick it; unticking it, “Stop these reminders” in the email, your mail app's Unsubscribe, or deleting the date on your dates page stops it.

Things we never see

• Your card, wallet or UPI details. Payment is handled entirely by Dodo Payments; we never receive or store card numbers or payment account details. We only learn whether a payment went through, the amount and currency, and Dodo's own reference numbers for the payment and for you as its customer.

4. The emails we send

Only about your order, and only these: your order link when you pay; “Your lyrics are ready to read”; a reminder 2 days and 7 days after payment if the lyrics are still waiting (then no more); “Your song is ready”; “Your video is ready”, only if your video took longer than usual; and, three days after your song is ready, one email asking “How did they react?”, only if you haven't already told us — never a follow-up. After your song is ready, two short emails reminding you to download and keep it — about 2 hours and about a day later — each with a one-click way to stop them. If a refund can't be paid straight away, one email saying “Your refund is on its way”. Plus the order links you ask for, the 4-digit code for your song's page if someone taps “Forgot code?” on it, and date reminders if you save dates or tick “Email me a reminder … next year”. No newsletters, no offers, no mailing lists: date reminders come only if you ask for them, and every date reminder and every “save your song” email has a one-click way to stop it.

Dodo Payments, which runs the checkout, sends your receipt. If you start the checkout and leave before paying, it may also send you a reminder to finish.

If you reply — with a line, or with a video of the moment — we read it and keep it with your order. We never share a reply or a video anywhere without asking you first.

5. Why we use it

• To create and deliver your song. This is necessary to perform our contract with you.
• To send you your song and the emails above, and to reply to yours.
• To detect abuse and prevent fraud.
• To understand, in aggregate, where people get stuck on the site so we can improve it. We do this from our own order records and visit and step counts; we use no analytics service.

6. How long we keep it

7. Who we share it with

We use a small number of service providers. Each receives only what it needs, only to do its part:

• Dodo Payments — payment processing and merchant of record: it sells the order to you, takes the payment, handles sales tax, VAT and GST, and sends your receipt. Receives your email address, the name, country and postcode you type at checkout, your payment details (entered on its own page, never ours), what you are buying and the price, a share-page code if you used one, and a random order number so the payment can be matched to your order. For Serenada Plus it also runs the page where you manage or cancel your plan. Dodo Payments handles this under its own privacy policy as well.
• Supabase — our database and file storage. Holds your order, your files and everything in section 3, stored encrypted.
• Vercel — hosts the website and runs the steps that make your song. Everything you send passes through it on its way to storage; it keeps short-lived technical logs (such as your connection's address), not your files.
• Railway — the machine that makes your video. Receives your photographs, the song, the lyrics and your video choices for the length of one render, then deletes them from that machine. On that machine it finds where the faces are in each photograph, so a slow zoom never cuts a face off and the words don't sit on one. It only finds where a face is — it never works out who anyone is — and nothing about the faces is kept.
• ElevenLabs — speech-to-text and music. Receives your recording (to turn it into text), the lyrics and the style (to make the music), and each finished version (to check every line was sung and to time the words on the video).
• Anthropic — its Claude models write and check the lyrics. Receives the text of your story and your notes (to find the memories, write the lyrics, check them against your story — one model looks for mistakes and another compares a rewrite with the first draft — and suggest a music style and voice), smaller copies of your photographs (to describe each one, pick the best for the video and place it beside the right memory), a few small still pictures of your finished video (to check that no words cover a face and nothing looks broken — only a short list of fixed problem codes is kept), and the redo note (turned into a few words about the sound), all after you pay — with one exception: if you tap “Show me a first draft” before paying, your answers in the story step (and anything else you typed there) and your options are sent to write a verse and chorus. We keep neither that draft nor what was sent for it: only that a draft was asked for, when, whether it worked (a short fixed code if not), how long it took, what it cost, which model wrote it, its language and how long the story was, and — for that day's limit of two drafts — a scrambled form of your connection's address and of your browser visit, gone within 3 days.
• Anthropic, for emails to us — emails you send to hello@getserenada.com arrive in our Gmail inbox and may be read and sorted by Anthropic's Claude AI assistant, which only writes draft replies: a person reads every reply before it is sent. This runs under our own Claude subscription account, not the Anthropic API key the website uses to make songs, so these emails fall under that account's terms and privacy settings rather than the commercial terms in section 8.
• Resend — sends our emails. Receives your email address and each email we send you, which includes your private links and the name of the person the song is for.
• Sentry — error reports. Receives what broke, where, and a random order number — no names, emails, stories, lyrics or recordings.
• Meta (Facebook and Instagram) — measures our ads. Receives only what section 3 lists under “To measure our ads”: page views, checkout starts and purchases with the amount and currency, its own cookie and ad-click code, your connection's address and your browser. Meta handles this under its own privacy policy as well.

We do not sell your personal information. The only information an advertising company receives is what Meta receives to measure our ads, above — never your story, recording, photographs, lyrics, song, name or email.

On your own device: while you are filling in the page, your browser remembers what you have typed and chosen — your story, your email address and your options — so a refresh, a locked phone or a tab your phone closes in the background does not lose your work. This stays in your browser. It is not a cookie, and it is not sent anywhere until you place your order — or until you ask for a first draft, when only your story answers and options are sent, to write it. A draft you read stays in this tab until you close it. It also remembers, for 30 days, the name of the tracking link or creator's page you came through, so the right link is credited, and, until you close the tab, which form steps it has already counted, so none is counted twice. Clearing your browser data removes it.

8. AI and training

Your song is made with AI services: Anthropic writes and checks the lyrics, describes the photographs and checks the finished video; ElevenLabs turns your recording into text and makes the music. Neither trains its models on what you give us. Under Anthropic's commercial terms, what we send isn't used to train its models. We have opted out of ElevenLabs using it to train its models (since 24 September 2026); under its terms, what we send from then on is used only to provide the service. We don't train any AI of our own on your story, your photographs or your song, and Supabase, Vercel, Railway and Resend only store, run or deliver it. Sentry and Dodo Payments never receive your story, recording or photos, so neither can train on them.

9. Your private song page

Your song lives at a long, random web address that cannot be guessed. We instruct search engines not to index it, we serve the audio and images through links that expire, and link previews show only a generic message with no name, photograph or lyric.

You can also set a 4-digit code on the page if you want an extra layer.

Anyone you send the link to can open it. Send it carefully. If you change your mind, “Delete everything now” on your order page removes the song and the page for good, and the link then says the song has been removed.

10. Your rights

Depending on where you live, you may ask us to:

• Give you a copy of the personal data we hold about you.
• Correct it if it is wrong.
• Delete it. (“Delete everything now” on your order page and “Delete all my dates” on your dates page do this without writing to us. Both wait 10 minutes after you confirm, so a mistake can be undone; then they are gone.)
• Stop using it for a particular purpose.

Email hello@getserenada.com and we will respond within 30 days. We may need to confirm your identity first.

Indian residents have these rights under the Digital Personal Data Protection Act, 2023. Residents of the UK and EEA have them under the UK GDPR and GDPR. California residents have rights under the CCPA, including the right to know and delete, and we confirm we do not sell personal information. The information Meta receives to measure our ads (section 3) may count as “sharing” under California law. To opt out, block Meta in your browser (its settings, or a tracker blocker): our server reports a purchase to Meta only when Meta's pixel has run in your browser, so Meta then receives nothing from us.

11. Children

Serenada is not for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has used the service, email us and we will delete the data.

12. Where your data is held

Our servers are located in the United States. Our service providers may process data in the United States and the European Union. Where data is transferred out of the UK or EEA, our providers rely on standard contractual clauses.

13. Security

Your files are stored encrypted by our storage provider (Supabase), in a private store with no public access that cannot be listed or browsed, and are sent only over encrypted connections. They are served only through links that stop working after a few hours. Before a photograph is kept, the location and camera details inside it are removed. Your order page opens only with its own long random link, and every part of the site limits how often it can be asked for something, so links and codes cannot be guessed. No system is perfectly secure, but we do not keep what we do not need, which is the strongest protection available.

14. Cookies

Serenada itself sets no cookies to follow you. The only ones are Meta's: _fbp, and _fbc when you arrive from a Meta ad, set by Meta's pixel on our public pages to measure our ads (section 3). They last up to 90 days. In the EU and EEA, the UK and Switzerland — and wherever we can't tell your country — they are set only after you tap Accept on the small notice at the top of the page (“We use a Meta cookie to measure our ads.”, with Accept and Decline side by side); your answer — Accept or Decline — is remembered in your browser (not in a cookie), and clearing this site's data asks you again. Elsewhere they are set once the page has loaded; you can block them in your browser's settings, and the site works just the same.

15. Changes

We will post any changes here and update the date at the top.

16. Contact

hello@getserenada.com

Terms · Privacy · Refunds · Contact