Version: 1.2.2
Effective date: 2026-05-28
Controller: Stellar Ally AB, org. nr 559562-9899, VAT no. SE559562989901, Sweden
Songs for Gifts is a service operated by Stellar Ally AB, a Swedish company registered with Bolagsverket (org. nr 559562-9899, VAT no. SE559562989901). This service uses generative AI on Google's Gemini Enterprise Agent Platform (formerly Vertex AI) — Lyria 3 Pro for music composition. You are interacting with an AI system, not a human composer.
We are the data controller for personal data you provide about yourself when using the service (your sender email, your IP address, your session). We act as a data processor for personal data you enter about other people — your recipient's name, characteristics, or photo — where you are the controller. The framework for that processor relationship is set out in our Data Processing Agreement, and your responsibilities are described in Terms of Use §3.
Contact us about privacy by opening the support chat (the chat icon in the bottom-right of any page). For data subject rights requests we may need to verify your identity before responding — see Section 7.
| Data | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|
| Occasion, recipient name, and personal details you enter | Generate a personalised AI song | Contract performance — Art. 6.1.b |
| Optional uploaded image | Input for music generation; still frame for the video | Contract performance — Art. 6.1.b |
| Optional sender email address (from the order form) | Deliver the finished song link | Contract performance — Art. 6.1.b |
| Customer email collected by Stripe at checkout | Receipt delivery; support recovery if you lose your link | Contract performance — Art. 6.1.b |
| Payment data | Process your payment via Stripe | Contract performance — Art. 6.1.b |
| IP address (anonymised) | Rate limiting and abuse defence | Legitimate interest — Art. 6.1.f |
| Anonymous session identifier | Associate your track with your session | Contract performance — Art. 6.1.b |
| User agent | Legal acceptance audit; abuse detection | Legitimate interest — Art. 6.1.f |
| Request logs (timing, error events — no personal data) | Service operation and debugging | Legitimate interest — Art. 6.1.f |
We do not collect:
Is providing this data required? Providing the recipient's first name, the occasion, and a short description of the recipient is necessary to perform the service — without these, we cannot generate your song. The optional fields (sender email, photo) are exactly that — optional. You can buy a song without providing them.
No automated decision-making with legal effect. We do not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. The AI music generation is creative output, not a decision about you.
If you are a recipient (not the sender). If you are someone whose name, description, or photo was used in a song generated by another person via Songs for Gifts, and you wish to know what we hold about you or have it deleted, please contact us via the support chat. Because the sender is the controller for your data under our Data Processing Agreement, our usual practice is to route the request to the sender. Where the sender cannot be reached and we can identify and verify your request, we will erase data relating to you directly.
We use the following sub-processors to deliver this service:
| Sub-processor | Country | Purpose | Safeguard / policy |
|---|---|---|---|
| Google Cloud (incl. Gemini Enterprise Agent Platform, formerly Vertex AI) | EU (Frankfurt) | API hosting and AI music generation | Google DPA; SCCs. Google's handling of data sent to its services is governed by Google's privacy policy. The AI side is subject to Google's Generative AI Prohibited Use Policy and the SynthID provenance system. |
| Render | EU (Frankfurt region) | Static website hosting | Render DPA; SCCs |
| Stripe | Ireland / US | Payment processing | Stripe Ireland is the EU controller; SCCs in place; Stripe privacy policy |
| Cloudflare | EU / US edge | Bot protection | Cloudflare's standard EU SCCs; Cloudflare privacy policy |
| Crisp | EU (France) | In-app customer support chat | Crisp DPA; EU data residency; Crisp privacy policy |
When you submit a song generation request, the prompt text (occasion, recipient name, personal details) and optional photo are sent to Google's Gemini Enterprise Agent Platform in the EU. Google processes that input under their privacy policy and the AI policies above; we do not control how Google stores or processes data sent to their APIs beyond the safeguards established in our DPA with Google.
No data is sold to third parties. Your data is never used to train AI models.
Some processing may involve data transfers outside the EU/EEA. Where this occurs, transfers are protected by Standard Contractual Clauses (SCCs) under each sub-processor's Data Processing Agreement.
| Data | Retention period |
|---|---|
| Generated audio, video, and uploaded image — paid track | Up to 60 days from payment date (deleted sooner if the purchase is refunded — see below) |
| Generated audio, video, and uploaded image — unpaid track | 72 hours, then assets transfer to Stellar Ally AB; image and personal context are deleted |
| Payment records (Stripe IDs, amounts, tax) | 7 years (Swedish Bookkeeping Act) |
| Sender email, Stripe customer email, prompts, recipient context — paid track | Up to 60 days from payment (deleted sooner on refund) |
| Sender email, prompts, recipient context — unpaid track | 72 hours |
| Request logs | 30 days |
| Anonymous session identifier | 30 days; expired identifiers are deleted by automated sweep |
Refunds accelerate deletion. When a purchase is refunded, the generated song, video, uploaded image, and personal context are deleted from our servers immediately and the share link is revoked, regardless of the 60-day window. The payment record itself is retained for the 7-year statutory bookkeeping period.
Chargebacks (payment disputes). If you initiate a chargeback with your card issuer, the share link is suspended while the dispute is pending — Stripe's typical timeline is several weeks. The generated files are retained during this period so we can attach them as evidence to the dispute response. Once Stripe resolves the dispute, the track is either restored (we prevail) or treated as a refund (we accept or lose) and deleted accordingly.
We use a single functional cookie — a refresh_token cookie (HttpOnly, SameSite=Strict) — that maintains your authenticated session between page loads. We also use the browser's sessionStorage (local to your tab, not transmitted with requests) for short-lived access tokens. No tracking, advertising, or analytics cookies are set. Because these are strictly necessary for the service to function, no consent banner is required under the ePrivacy Directive.
You have the right to:
To exercise your rights, open the support chat (the chat icon in the bottom-right of any page) and tell us which right you'd like to exercise. We will respond within 30 days (extendable by a further two months for complex requests, in which case we will inform you of the extension within the first 30 days). We may need to verify your identity before fulfilling certain requests.
Your data is stored in the European Union (Google Cloud, Frankfurt region). Data at rest does not leave the EU.
We apply appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, and audit logging. The current technical and organisational measures are described in our Data Processing Agreement §8.
We may update this Privacy Policy when our processing or sub-processors change. The current version is always the one published at this URL, with the version number and effective date at the top.
Because Songs for Gifts is a one-off-purchase service (no account, no ongoing relationship), changes work as follows:
If a future change would materially affect how we process data we already hold (for example, expanded sharing or new retention beyond the existing schedule), we will not apply that change to existing data without a new lawful basis.
Stellar Ally AB · Songs for Gifts · songsforgifts.com