Privacy policy.

When you order a song, we collect:

• Email address — to deliver your song and order updates.
• Story content — the names, story, occasion, style and any details you provide so our composers can write your tribute.
• Payment metadata — Stripe processes your card; we receive only the session ID, the amount paid, and your billing email. We never see your card number.
• Basic analytics — pages visited and session timing via Google Analytics. No personal profiling.

Strictly to fulfill your order and improve the service. Specifically:

• To write and produce the song you commissioned.
• To email you the result, status updates, and refund correspondence.
• To handle support requests when you reply to our delivery email.
• To anonymously analyze homepage and wizard usage so we can improve them.

We do not use your story or your song for any purpose other than crafting and delivering it. We do not sell, rent or trade your data with third parties.

To run Forever Sung we use:

• Stripe — payment processing.
• Supabase — order database and audio storage (EU/US datacenters).
• Resend — transactional email delivery.
• Vercel — website hosting.
• Google Analytics — anonymized usage analytics.

Each sub-processor only receives the minimum data needed for its function (e.g. Stripe gets your card details, Resend gets your email and song link).

Your delivered song and brief are kept indefinitely so you can revisit the share link and re-download the MP3 at any time. You can request deletion at any moment — see Section 6.

Email and order records are retained for 7 years for accounting and tax-compliance reasons (legal obligation).

We use a small number of cookies:

• Essential cookies (session, CSRF) — required for the site to function.
• Locale and currency preference — to remember your settings between visits.
• Anonymized analytics (Google Analytics) — to understand which pages help users most.

No third-party advertising or tracking cookies are used.

You can request, at any time and free of charge:

• A copy of all personal data we hold about you.
• Correction of any inaccurate data.
• Deletion of your data and the song(s) we created for you.
• An export in a portable format.

Email support@foreversung.com from the address used for the order. We respond within 30 days.

All data is transmitted over TLS. Audio backups and the order database live on Supabase with row-level security enforced. Stripe handles all card data with PCI DSS Level 1 compliance — we never see card numbers.

Forever Sung is not intended for users under 16. If you are a parent or guardian and believe a child has used the service, contact us and we will delete their data.

We may update this policy occasionally. Material changes will be posted here with an updated "Last updated" date.

For privacy questions, GDPR/CCPA requests, or anything else: support@foreversung.com.

See also: Terms of Service.