1. Scope and our role
This Privacy Policy applies to songmemorials.com, the Song Memorials ordering flow, digital delivery, owner tools, and unlisted memorial pages. It should be read with our Terms of Service.
Song Memorials determines how personal information is used to provide the service. Memorial owners and visitors also choose what information they submit and who receives a public memorial link. Please do not submit information that you are not authorized to share.
2. Information we collect
Quiz and order information
We collect whether the memorial is for a person or pet, their name or nickname, relationship or pet type and breed, genre and voice preferences, qualities and habits, memories, a personal message, the buyer's name, email address, optional phone number, optional needed-by date, and the consent choices made in the quiz.
Payment and fulfillment information
We receive transaction identifiers, payment status, billing details, refund information, and limited card metadata from Stripe. Stripe processes payment card details. Song Memorials does not store your full card number or security code. We also store order status, production attempts, delivered assets, rewrite requests, ratings, and support history.
Memorial and contribution information
We store the memorial title and dates the owner chooses to add, the song, lyrics, cover, owner settings, comments, contributor display names, photos, reports, and moderation history. Photos may contain visual information about living people. Visitors must accept the publication-rights notice before contributing.
Technical information
We collect device and browser information, IP address, approximate location derived from network data, referral and campaign parameters, page and feature interactions, security signals, cookie identifiers, and error logs. We may also use a honeypot, rate limits, checksums, and progressive anti-abuse challenges to protect contributions.
3. How we use information
We use information to:
- save quiz progress and create an order;
- confirm payment and prevent duplicate or fraudulent charges;
- create one memorial song and printable lyric art;
- publish and operate the unlisted memorial;
- process photos and moderate or investigate reported content;
- deliver and recover order-linked owner access securely;
- handle rewrites, support, ratings, feedback, and refunds;
- send required transactional communications;
- send marketing only where the recipient explicitly opted in;
- measure funnel and service performance using minimized event data;
- secure, debug, maintain, and enforce the service and our terms;
- comply with law and protect people, rights, and property.
We do not use memorial comments, family photos, names of the deceased, personal memories, or song lyrics for targeted advertising.
4. Assisted generation
We use assisted generation providers to create lyrics, music, vocals, and related production assets from the information in your order. This processing may involve artificial intelligence. We limit the submitted information to what is needed for production and do not intentionally include payment card data, buyer order links, or visitor contribution photos in song-generation requests.
Generated material is reviewed and processed through our production workflow before delivery. More information about the resulting work and your permitted uses appears in our Terms of Service.
5. Unlisted does not mean private
A memorial is published as unlisted. Anyone with its public link may view the cover, song, lyrics, photos, and comments, share the page, and contribute while contributions are open. The link is random and is not derived from the subject's name or the order number. Public pages are excluded from our sitemap and carry noindex and no-referrer controls, but those technical controls cannot guarantee secrecy.
The public link does not expose owner controls. Owner access uses a separate order-linked URL delivered to the buyer. The owner can edit the page, close contributions, moderate content, and hide the memorial. Owners should keep order links private and consider the audience before sharing the public link.
6. Comments, photos, and reports
Comments may become visible immediately after submission. Submitted photos first enter a quarantine area. We validate file signatures, size, dimensions, and checksum, remove metadata such as EXIF and GPS, and create a new display copy before making a photo visible. The unvalidated original is never served as public memorial media.
A memorial owner or administrator may hide, restore, or remove a contribution. Visitors may report content. Removed content is generally recoverable for 30 days before object deletion, with longer retention possible for security investigations, legal obligations, legal holds, or disaster-recovery backups. A contribution notification may report only counts, not the comment, photo, or contributor name.
7. Marketing and transactional messages
We send transactional email needed to confirm an order, report production status, deliver the song, lyric art, and memorial link, recover owner access, and respond to service or security issues. These messages are part of the service and are separate from marketing.
Marketing email is optional and requires an affirmative email consent choice. Marketing SMS is optional and requires a separate affirmative SMS consent choice. Providing a phone number alone is not SMS marketing consent, and neither marketing choice is a condition of purchase. You may unsubscribe from email, reply STOP where SMS is available, or contact us to withdraw consent.
8. Service providers and disclosures
We disclose information to providers that help us operate the service, including Stripe for payments, infrastructure and storage providers, assisted-generation and production providers, workflow and error monitoring providers, customer communication providers such as Klaviyo, and product analytics providers such as PostHog and Google Analytics. They receive information according to their function and our agreements with them.
Song Memorials product analytics and customer messaging events are minimized. We do not send memorial comments, photos, names of the deceased, personal memories, or lyrics to PostHog, Google Analytics, Klaviyo, or Meta. Meta customer tracking is disabled for the launch and will not be enabled without a Song Memorials destination and the required consent and policy controls.
We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, investigate abuse, protect safety or rights, complete a corporate transaction, or act with your direction. We do not sell memorial content or personal information for money.
9. Cookies and analytics
Necessary cookies support checkout, owner access, admin security, and fraud prevention. Analytics tools help us understand landing views, quiz completion, checkout, delivery, song plays, lyric art downloads, memorial views and shares, contribution steps, and feedback. Analytics events use pseudonymous identifiers and must not contain memorial stories or contribution content.
Where applicable law requires consent for non-essential cookies or analytics, we will request it before using them. Browser controls may also let you delete or block cookies, although blocking necessary cookies may prevent owner or checkout functions from working.
10. Retention and deletion
We keep order and transaction records for fulfillment, refunds, accounting, fraud prevention, and legal compliance. We keep the song, lyric art, and published memorial to provide lifetime hosting as described in our Terms. The owner URL includes the order reference and should be retained only by the buyer and people the buyer trusts to manage the memorial.
Memorial owners may hide a page, close contributions, remove content, or request deletion. Removed contribution objects normally enter a 30-day recoverability period. Some information may remain longer in restricted backups, security logs, transaction records, or legal holds. When there is no longer a valid purpose to keep personal information, we delete, de-identify, or aggregate it.
11. Security and international processing
We use administrative, technical, and organizational safeguards designed for the nature of the information, including access controls, signed payment webhooks, order-linked owner controls, private storage, upload validation, rate limits, and monitoring. No system is completely secure, so we cannot guarantee that unauthorized access will never occur.
Song Memorials and its providers may process information in countries other than where you live. Where required, we use contractual or other recognized safeguards for international transfers.
12. Your privacy choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection, and to appeal certain decisions. You may also withdraw marketing consent at any time. We may need to verify your identity and authority before acting on a request, especially for memorial ownership or another person's information.
To make a privacy request, email privacy@songmemorials.com. You may also contact the privacy regulator in your jurisdiction. Exercising a privacy right will not result in discriminatory treatment.
13. Children, changes, and contact
Purchasers must be at least 18. The service is not directed to children under 13, and we do not knowingly collect their personal information as account holders. Please do not upload a child's image or personal information unless you have authority to do so and sharing it on an unlisted memorial is appropriate.
We may update this policy as the service, providers, or legal requirements change. We will post the updated date and provide any additional notice required by law. Material changes that affect an existing memorial will be communicated when reasonably practical.
Privacy questions and requests may be sent to privacy@songmemorials.com. General order support is available at support@songmemorials.com.