Legal

Privacy Policy

Effective date: May 1, 2026  ·  Last updated: May 1, 2026

Contents
  1. Information we collect
  2. How we use your information
  3. AI songwriting and your data
  4. Third-party services
  5. Data retention
  6. Your rights
  7. California residents (CCPA/CPRA)
  8. EU and UK residents (GDPR)
  9. Children's privacy
  10. Cookies and tracking
  11. Data security
  12. Changes to this policy
  13. Contact us

Plain English summary: We collect only what we need to create your song and deliver it. We use your story details to generate your song using AI technology. We do not sell your personal information to anyone. We do not use your story to train AI models. Your data is yours.

This Privacy Policy describes how Storied Song ("Storied Song," "we," "us," or "our") collects, uses, and protects information about you when you visit storiedsong.com and use our custom song creation service. By using our website or placing an order, you agree to the practices described in this policy.

01

Information We Collect

Information you provide directly

When you place an order or contact us, we collect:

Information collected automatically

When you visit our website, we may automatically collect:

We use Cloudflare Web Analytics for this purpose, which is privacy-preserving and does not use cookies or track individuals across websites.

02

How We Use Your Information

We use the information we collect solely to:

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We do not send unsolicited marketing emails. The only emails you will receive from us are those directly related to your order.

03

AI Songwriting and Your Data

Storied Song uses advanced AI songwriting technology to create original songs from the story details you provide. In the interest of full transparency:

How your story is used

The personal details, memories, and descriptions you share in our order form are used exclusively to generate your custom song. This information is passed to our AI songwriting system as input for your specific order and is not retained for any other purpose once your song has been delivered.

AI-generated content disclosure

Every song created by Storied Song is generated using AI technology. Our system produces original lyrics and musical compositions based on your inputs. We are transparent about this in our service description and do not represent AI-generated songs as being written by human songwriters.

We do not train AI on your data

Your personal story, memories, and order details are never used to train, fine-tune, or improve any AI model — whether ours or any third party's. Your story belongs to you.

AI and automated decision-making

Our AI system generates creative content (your song) based on your inputs. It does not make any decisions about your eligibility for services, pricing, or access. All customers receive the same service at the same published prices regardless of the content they submit.

04

Third-Party Services We Use

We work with the following trusted third-party service providers. Each has their own privacy policy governing how they handle data:

We do not share your personal information with any other third parties unless required to do so by law.

05

Data Retention

We retain your order information — including your name, email address, and story details — for up to 12 months from the date of your order. This allows us to:

After 12 months, your order details and story information are permanently deleted from our systems. Your email address may be retained for legal and financial record-keeping purposes for up to 7 years, consistent with standard accounting practices.

You may request earlier deletion of your personal data at any time by emailing us at hello@storiedsong.com. We will fulfill deletion requests within 30 days, except where retention is required by law.

06

Your Rights

Regardless of where you are located, you have the following rights regarding your personal information:

To exercise any of these rights, email us at hello@storiedsong.com with the subject line "Privacy Request." We will respond within 30 days.

07

California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you additional rights.

Categories of personal information we collect

We do not sell or share your personal information

Storied Song does not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising. Because we do not sell or share your data in these ways, no opt-out mechanism is required — but we provide one anyway: email hello@storiedsong.com with "Do Not Sell My Data" in the subject line and we will confirm that your data has not been and will not be sold.

AI and automated decision-making disclosure (California)

Under California's AI transparency requirements, we disclose that Storied Song uses AI technology to generate creative content (your custom song) based on the personal information you provide. This AI system does not make decisions that significantly affect your legal rights, financial standing, employment, housing, or access to services. It generates creative outputs (song lyrics and music) from your inputs only. You have the right to receive information about this AI processing and to contact us with questions.

Your California rights

To submit a California privacy request, email hello@storiedsong.com with "California Privacy Request" in the subject line. We will verify your identity and respond within 45 days.

08

EU and UK Residents (GDPR)

If you are located in the European Union, European Economic Area, or United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR applies to your personal data.

Legal basis for processing

International data transfers

Storied Song operates from the United States. If you are accessing our service from the EU or UK, your personal data will be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) and adequacy decisions where applicable to ensure your data receives appropriate protection during international transfers.

Your GDPR rights

In addition to the rights listed in Section 6, EU/UK residents have the right to lodge a complaint with their national supervisory authority. For EU residents, the relevant authority is the data protection authority in your country of residence. For UK residents, the relevant authority is the Information Commissioner's Office (ICO) at ico.org.uk.

Right to object to AI processing

Under GDPR Article 22, you have rights related to automated decision-making. Our AI system creates creative content and does not make automated decisions that produce legal or similarly significant effects on you. If you have concerns about how your data is processed by our AI system, please contact us and we will address them.

09

Children's Privacy

Storied Song is not directed at children under the age of 13 (or 16 in the EU/UK). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information without parental consent, please contact us immediately at hello@storiedsong.com and we will delete that information promptly.

While Storied Song does offer lullabies and children's songs as a product, these are ordered by adults on behalf of children. The personal information collected relates to the adult placing the order, not the child.

10

Cookies and Tracking

Storied Song uses Cloudflare Web Analytics, which does not use cookies and does not track individual visitors across websites. It collects only aggregate, anonymized data about page visits.

We do not use advertising cookies, third-party tracking pixels, or behavioral analytics tools that identify individual users. We do not participate in cross-site tracking or targeted advertising networks.

Stripe, our payment processor, may set cookies necessary for payment security and fraud prevention. These are essential cookies and cannot be disabled without preventing the checkout process from functioning.

11

Data Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These include:

No method of transmission over the internet is 100% secure. While we do everything reasonably possible to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights or freedoms, we will notify you and the relevant authorities as required by applicable law.

12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page.

For significant changes, we will notify active customers via the email address associated with their most recent order. Your continued use of Storied Song after changes are posted constitutes your acceptance of the updated policy.

13

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your data is handled, please contact us:

Storied Song

hello@storiedsong.com

We respond to all privacy requests within 30 days.