Privacy Policy
Last updated: 19 September 2026
This policy explains what we collect, why, and how long we keep it. We have tried to write it in plain English rather than legal boilerplate.
1. The short version
We collect the story you tell us, the photographs you upload, your email address, and basic anonymous usage statistics. We use them to make your song. Your original recording is deleted after 30 days, and your photographs and video after 12 months. We never sell your data, and we never put your song page anywhere a search engine can find it.
2. What we collect
Things you give us
- The voice recording or written story you provide about the person the song is for.
- Names and details you include in that story.
- Photographs you upload, if you choose to add them.
- A voice sample, if you choose to have the song sung in your own voice.
- Your email address, collected at payment.
- Your choices: occasion, style, language, voice.
Things collected automatically
- Anonymous usage events: pages viewed, buttons tapped, how long a recording was, whether an order completed. These contain no names, no email addresses and no content from your story.
- Your approximate country, derived from your connection, used only to show the right prices and voices.
Things we never see
- Your card details. Payment is handled entirely by Lemon Squeezy; we never receive or store card numbers.
3. Why we use it
- To create and deliver your song. This is necessary to perform our contract with you.
- To send you your song and reply to your emails.
- To detect abuse and prevent fraud.
- To understand, in aggregate, where people get stuck on the site so we can improve it.
4. How long we keep it
5. Who we share it with
We use a small number of service providers. Each receives only what it needs:
- Lemon Squeezy — payment processing and merchant of record. Receives your email and payment details.
- Supabase — secure database and file storage. Holds your order and files.
- Vercel — website hosting.
- ElevenLabs — speech-to-text and music generation. Receives your recording and lyrics.
- Anthropic — lyric writing. Receives the transcript of your story.
- PostHog — anonymous usage analytics. Receives no personal data and no content.
We do not sell your personal information, and we do not share it for advertising.
6. Your private song page
Your song lives at a long, random web address that cannot be guessed. We instruct search engines not to index it, we serve the audio and images through links that expire, and link previews show only a generic message with no name, photograph or lyric.
You can also set a 4-digit code on the page if you want an extra layer.
Anyone you send the link to can open it. Send it carefully.
7. Your rights
Depending on where you live, you may ask us to:
- Give you a copy of the personal data we hold about you.
- Correct it if it is wrong.
- Delete it.
- Stop using it for a particular purpose.
Email hello@getserenada.com and we will respond within 30 days. We may need to confirm your identity first.
Indian residents have these rights under the Digital Personal Data Protection Act, 2023. Residents of the UK and EEA have them under the UK GDPR and GDPR. California residents have rights under the CCPA, including the right to know and delete, and we confirm we do not sell personal information.
8. Children
Serenada is not for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has used the service, email us and we will delete the data.
9. Where your data is held
Our servers are located in the United States. Our service providers may process data in the United States and the European Union. Where data is transferred out of the UK or EEA, our providers rely on standard contractual clauses.
10. Security
Files are stored in a private bucket and served only through short-lived signed links. Access is limited to what the service needs to run. No system is perfectly secure, but we do not keep what we do not need, which is the strongest protection available.
11. Changes
We will post any changes here and update the date at the top.