Privacy Policy

The data controller is [company name], [address]. For any question regarding your data: contact@sweetmelody.io.

Questionnaire answers — recipient, first name, pronunciation, musical style, qualities, memories and message. Purpose: to create your song. Legal basis: performance of the contract or pre-contractual measures. These fields are free-form: enter only what you are willing to entrust to us.

Email address — collected only at the end of the questionnaire, never before. Purpose: to send you the listening link for your excerpt and then the information related to your order. Legal basis: performance of the contract.

Order data — processed by Shopify at the time of payment. No payment card data passes through our servers or is stored there.

Audience measurement — navigation statistics via PostHog (hosting in the United States, see “Processors” below), configured without any cookie or storage on your device. Purpose: to understand and improve the use of the site. Legal basis: legitimate interest.

Your answers are neither resold, nor transferred to third parties for commercial purposes, nor published. No song is used as a public example without your prior, explicit written agreement.

[If a marketing email is sent beyond the messages related to the order, this requires either an opt-in checkbox in the questionnaire, or reliance on legitimate interest for similar products, with an unsubscribe link in every message. Decide and document here].

Vercel (site hosting), Cloudflare R2 (song storage), Anthropic (lyrics writing), Suno (via le revendeur api.sunoapi.org) (musical performance), Klaviyo (email sending), Shopify (payment), PostHog (audience measurement).

PostHog Inc. (audience measurement) hosts the data on its infrastructure located in the United States. The data transmitted to it is limited to navigation events attached to a pseudonymous song reference (in the form MC-XXXXXX): neither your email address nor your IP address is transmitted to it, and no session recording is performed.

This transfer outside the European Union is carried out on the following basis: [transfer mechanism applicable to PostHog Inc. — certification under the EU–US Data Privacy Framework, or standard contractual clauses set out in its data processing agreement. To be confirmed in the provider's DPA before going live].

[Likewise verify the hosting country and the transfer mechanism of the other providers established outside the European Union].

The site uses no cookiesand writes nothing to your browser's memory: no cookie, no localStorage, no sessionStorage. The audience measurement tool is configured in volatile memory only, which explains the absence of a consent banner — no consent is required for processing that stores nothing on your device.

The consequence for you: on each new visit, you are counted as a distinct visitor. We do not track you from one session to another, nor from one site to another.

Questionnaire answers and songs: 3 years from the last contact. Billing data: 10 years, in accordance with accounting obligations. Audience measurement data: 14 months.

You have the rights of access, rectification, erasure, restriction, objection and portability over your data. These rights are exercised at contact@sweetmelody.io, with a response within one month.

If a song concerns a third party, that person has the same rights over the data relating to them and may write to us directly.

In the event of a disagreement, you may lodge a complaint with the CNIL — 3 place de Fontenoy, 75007 Paris, cnil.fr.

Last updated: 28 juillet 2026.