Privacy Policy

Introduction

This Privacy Policy explains how GiftNote ("we", "us", "our") collects, uses, stores, and shares your personal information when you visit giftnote.ai or use our AI music generation service.

By using GiftNote, you agree to the collection and use of information as described below. If you do not agree, please do not use the service.

Who we are

GiftNote is operated as an independent online service. You can reach us at support@giftnote.ai for any privacy-related questions, data access requests, or deletion requests.

Information we collect

Information you provide directly

• Account data: Your name, email address, and profile picture when you sign up with email or a social login.
• Song input: The recipient details, occasion, relationship, story, and any lyrics-related input you submit to generate a song. This is the creative material you choose to share with our service.
• Payment data: When you purchase credits, our payment processor collects your billing information. GiftNote never sees or stores your full card number — we only receive a customer ID and transaction status.
• Contact messages: Any messages you send through our /contact form or by emailing us directly.

Information collected automatically

• Usage data: Pages visited, features used, approximate time spent, and similar interaction data.
• Device data: IP address, browser type, operating system, and device identifiers.
• Cookies: See our Cookie Policy for details on the cookies we set and why.

How we use your information

We use the information above to:

1. Deliver the service — generate your song, charge credits, deliver audio files, and maintain your account.
2. Process your song request — your song input is used solely to generate the song you requested.
3. Communicate with you — send account emails (verification, password reset), payment receipts, and respond to support requests.
4. Keep the service safe — detect fraud, abuse, and technical issues.
5. Improve GiftNote — analyze aggregated usage patterns to fix bugs and prioritize features. We do not sell your data.

How your song is generated

GiftNote is an AI-powered creative service. To produce your song, your submitted story and creative choices are processed through a combination of machine learning systems. These systems receive only the minimum data needed to generate each part of the song (lyrics, cover art, and audio). They do not receive your email address, payment information, account ID, or any data that could identify you personally.

We take the following commitments seriously:

• Purpose limitation — your song input is used only to generate your song, never for any other purpose.
• Anonymization — generation requests are sent anonymously, with no personal identifiers attached.
• Confidentiality — we do not share, sell, or publish the stories you submit.
• Training opt-out — we do not actively use your submissions to train any AI models, nor do we actively grant permission for any third party to do so. However, because AI systems involve external processing, we cannot contractually guarantee that anonymized request data will never be used to improve models. If this concerns you, please avoid submitting highly sensitive personal content.

If you are an enterprise customer or have specific compliance requirements (HIPAA, SOC2, etc.), please contact support@giftnote.ai for a detailed discussion of our data processing architecture.

Supporting service providers

To run GiftNote, we rely on a small number of trusted service providers for hosting, database storage, email delivery, payment processing, and authentication. Each provider:

• Is contractually bound to protect your data under industry-standard agreements
• Receives only the data strictly necessary for the service they provide
• Does not use your data for their own marketing or profiling purposes

We do not publish a detailed list of each provider publicly, to protect both our operational security and our commercial confidentiality. However, if you are a user in a jurisdiction that requires this information (for example, under GDPR Article 28 for sub-processors), you may request the list in writing by emailing support@giftnote.ai with a brief explanation of your need. We will respond within 30 days.

How long we keep your data

• Account data: Kept as long as your account is active, then deleted within 30 days of account deletion request.
• Generated songs: Kept indefinitely while your account is active so you can replay and re-download them. Deleted along with your account.
• Payment records: Kept for 7 years as required by tax and financial regulations, even after account deletion.
• Analytics data: Aggregated and anonymized after 90 days.
• Contact form messages: Kept for 2 years in our admin backend for support continuity.

Your rights

Depending on where you live, you have rights over your personal data. We honor these globally regardless of jurisdiction:

• Access — request a copy of the data we hold about you.
• Correction — fix inaccurate information.
• Deletion — request full account and data deletion (takes up to 30 days).
• Portability — receive your data in a machine-readable format.
• Opt-out of marketing — we currently do not send marketing emails, but if we start, you can opt out at any time.
• Withdrawal of consent — if you previously consented to something, you can withdraw that consent by contacting us.

To exercise any of these rights, email support@giftnote.ai from the address associated with your account. We will respond within 30 days.

For EU/EEA residents (GDPR)

Our legal bases for processing your data are: (1) performance of the contract to deliver the service you signed up for, (2) our legitimate interest in running and improving GiftNote, and (3) your consent for optional features. You have the right to lodge a complaint with your local data protection authority.

For California residents (CCPA/CPRA)

You have the right to know what personal information we collect, to delete it, to correct it, and to opt out of any "sale" of personal information. GiftNote does not sell personal information.

Children

GiftNote is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with data, email us and we will delete it.

Data security

We use HTTPS everywhere, encrypted database connections, hashed passwords, and least-privilege access controls. That said, no system is 100% secure. If we detect a breach affecting your data, we will notify you as required by applicable law.

International data transfers

Some of our infrastructure providers operate in jurisdictions that may differ from yours. By using GiftNote, you consent to your data being processed internationally under the safeguards described in this Policy.

Changes to this policy

We may update this Privacy Policy as GiftNote evolves. Material changes will be announced via a banner on the site or by email. The "Last updated" date at the top reflects the most recent change.

Contact us

Questions, concerns, data requests? Email support@giftnote.ai.