← StorySing

Privacy Policy

Effective July 20, 2026

Voice recordings are sensitive personal data. This policy is written around data minimization and explicit user control; vendor and regional disclosures should be reviewed before launch.

What we collect

How we use it

We use information to create your requested songs, maintain your private library, process entitlements, provide support, prevent misuse, comply with law, and improve reliability. We do not sell personal information or make your voice available for other customers to use.

Voice and model training

Your voice recording is processed only to create the content you request and to troubleshoot that request. StorySing will not use identifiable voice recordings to train general-purpose voice models unless you separately opt in through a clear consent flow.

Sharing

We share only what is necessary with service providers that host data, process payments, deliver email, generate media, monitor security, or provide support. WhatsApp and Meta process business messages and ad-referral data when you choose to contact us through WhatsApp. Pinterest and any other social platform selected by a StorySing operator process only the approved media and publication details sent to that platform. We may also disclose information when legally required or to protect people and the service.

Connected social accounts and publication

When an authorized StorySing operator connects a social account such as Pinterest, we receive the account identifier and name, OAuth access and refresh tokens, granted permissions, and token-expiry information. We use this data only to verify the connection, read available publishing destinations when needed, and publish media, titles, descriptions, and destination links that the operator has explicitly approved in the local StorySing content workbench. We do not sell connected-account data or use it to build advertising profiles.

OAuth authorization codes are exchanged once and are not retained. Access and refresh tokens are kept in access-restricted local configuration until they expire, are replaced, the operator disconnects the account, or deletion is requested. We retain publication status, attempts, platform post IDs, and public post URLs as operational records needed to prevent duplicate posts and audit approved publishing. Operators may revoke access in the platform's account settings and may request deletion at privacy@storysing.me.

Automated WhatsApp sales chat

Our WhatsApp pilot uses a rules-based automated assistant—not an unrestricted AI agent—to explain StorySing, collect a short song brief, answer listed questions, and offer links to our website. The assistant identifies itself at the start, does not place an order or charge you, and does not start song generation. You can reply STOP to opt out or request human help; live WhatsApp handoff is not staffed during the pilot, so human support is provided by email.

Free voice previews

The homepage preview accepts only your own voice. It analyzes a limited vocal-range signal on your device to select from six StorySing-created song excerpts, then checks speaker similarity after conversion to make a private 15–20 second demonstration. The source recording is deleted from private storage after the preview is successfully created, and temporary GPU files are removed after each processing attempt; failed or incomplete source recordings and the resulting preview are deleted or made inaccessible within 24 hours. We may retain non-audio quality diagnostics, such as a broad vocal-range category and similarity score, for up to 90 days to monitor reliability. A privacy-preserving device and network hash is used to enforce the two-preview limit and prevent automated abuse. StorySing also records limited first-party lifecycle events—such as reaching the preview, starting, submitting, playing, and opening checkout—to measure reliability and conversion. These records contain no voice audio, story text, email address, or public-facing preview identifier and are removed after 90 days.

Reviews and feedback

Feedback submitted from your private song page stays private unless you separately check the public-quote permission. Giving that permission lets StorySing consider the written review for a public testimonial; it does not permit us to publish your story, lyrics, song, recipient, email address, or other private project details. Reviews are never published automatically. You can change the permission from your song page or ask us to remove a public quote.

Retention

We keep account, purchase, and song feedback records while your account is active and as required for tax, fraud, legal, and product-support obligations. Raw WhatsApp message text is removed after it is processed, and the structured sales brief, contact information, delivery records, and ad-referral identifiers are automatically removed within 30 days. Free-preview source recordings and results follow the shorter retention period described above; limited first-party preview lifecycle events and non-audio quality diagnostics are retained for up to 90 days. Paid-song source recordings are deleted after the creation and revision window unless you choose to keep them for future songs. Finished paid songs remain until you delete them or close your account.

Your choices

You may request access, correction, export, or deletion of your personal information. Follow our Data Deletion Instructions to submit a deletion request. You can withdraw optional consent at any time. Some transaction records may need to be retained where law requires it.

Security

We use access controls, encryption in transit, signed payment webhooks, access-restricted storage for connected-account credentials, and private-by-default storage. No online service can promise absolute security; if a breach creates a material risk, we will notify affected users as required.

Analytics and cookies

With your permission, StorySing uses Google Analytics, Microsoft Clarity, and Meta Pixel on public marketing and policy pages to understand visits, demo plays, free-preview steps, pricing interest, checkout starts, and purchases. For a purchase made while analytics permission remains active, StorySing may send Google Analytics a server-side purchase event containing pseudonymous browser and session identifiers, a transaction identifier, plan, currency, and value. It may also send Meta a server-side purchase event using a one-way hashed version of the checkout email together with limited browser and ad-click identifiers. These tools are not loaded on creation, account, private song, private share, payment-success, or administration pages. We do not send voice audio, stories, recordings, photos, lyrics, private preview or song IDs, or share tokens to analytics providers. You can decline analytics or change your choice from the Privacy choices control; withdrawing permission also revokes pending server-side purchase measurement for that browser.

Children

StorySing is not directed to children under 13. Adults creating a family gift should avoid uploading unnecessary sensitive information about children and must have authority to provide any recording.

International use

Information may be processed in countries where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

Contact

Privacy requests can be sent to privacy@storysing.me.