1. Introduction
ToSong is operated by TokenMade LLC, a company registered in the State of Wyoming, USA. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI song generation platform and related services.
For data protection inquiries, contact us at support@tosong.app.
2. Information We Collect
- Content You Submit: Lyrics, prompts, style descriptions, and other text you enter to generate songs. Legal basis: contract performance (necessary to deliver the service you requested).
- Generated Songs: Audio files produced for you, stored so you can revisit and download them. Legal basis: contract performance.
- Technical Data: IP address, browser type, and basic usage analytics. When enabled, Rybbit receives page-view and product-event data; signed-in users may be identified by their account ID and email address so we can understand account activity and signup conversion. We use this information for security, abuse prevention, service improvement, and product analytics. Legal basis: legitimate interest (security, abuse prevention, service improvement, product analytics).
- Account Information: Account and authentication information, including the name and email address provided by your sign-in provider. Legal basis: contract performance.
- Payment Information: Processed entirely by secure third-party payment providers (Stripe); we never store card details. Legal basis: contract performance.
3. How We Use Your Information
- Generate the songs you request
- Store your generations so you can revisit and download them without regenerating
- Enforce usage limits and prevent abuse
- Maintain, improve, and debug our services, including improving generation quality
- Respond to your inquiries
4. AI Processing
Song generation is performed by third-party AI model providers. The content you submit (e.g., your lyrics or prompt) and the resulting audio are transmitted to these providers to fulfill your request. These providers process data in the United States and may process data in other regions where their infrastructure operates. We do not use your submitted content to train our own models. Third-party provider handling is governed by their applicable terms and agreements; please avoid submitting confidential or personally identifiable information in prompts or lyrics.
5. Data Storage and Retention
Your data is stored on Cloudflare infrastructure, with servers located globally.
- Registered user data: Generated songs and related account data are retained so you can revisit and download your work. You may request deletion of specific generations or your entire account at any time by contacting us.
- Account deletion: When you delete your account, your personal data and generated content are deleted. If you need assistance with complete erasure, contact us and we will process the request.
- Payment records are retained as required by applicable financial and tax regulations.
6. Data Sharing and International Transfers
We do not sell your personal information or share it for cross-context behavioral advertising. We share data only with:
- (a) AI model providers, solely to fulfill generation requests;
- (b) infrastructure providers (Cloudflare for hosting and storage);
- (c) payment processors (Stripe), for paid plans;
- (d) analytics providers, when enabled, for product and usage analytics;
- (e) authorities where required by law.
Your data may be transferred to and processed in the United States and other countries where our service providers operate. For transfers from the EU/EEA, we rely on Standard Contractual Clauses (SCCs) and other applicable safeguards to ensure an adequate level of data protection.
7. Cookies and Local Storage
We use cookies and localStorage for session continuity, language preference, and, when enabled, product analytics. We do not use third-party advertising cookies.
8. Your Rights
For EU/EEA Residents (GDPR)
Under the General Data Protection Regulation, you have the right to: access your personal data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict processing; data portability; and object to processing based on legitimate interest. You also have the right to lodge a complaint with your local data protection supervisory authority.
For California Residents (CCPA/CPRA)
Under the California Consumer Privacy Act, you have the right to: know what personal information we collect and how it is used; request deletion of your personal information; and opt out of the sale or sharing of your personal information. We do not sell your personal information or share it for cross-context behavioral advertising as defined by the CCPA.
To exercise any of these rights, contact us at support@tosong.app.
9. Children's Privacy
ToSong is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.
10. Changes to This Policy
We may update this policy from time to time. For material changes, we will notify you at least 30 days in advance via the email address associated with your account or through a prominent notice on the service. The "updated" date above reflects the latest revision.
11. Contact
Questions about this policy: support@tosong.app