This policy is effective as of March 20, 2026
1. Introduction
SongsSmith (“SongsSmith,” “we,” “us,” or “our”) is a custom song creation service operated by Solid Stone Ventures. We are committed to protecting your personal information and being transparent about how we use it.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, who we share it with, and what rights you have over it. It applies to all visitors and customers of dev.songssmith.com.
By using our Services, you acknowledge that you have read and understood this Privacy Policy.
2. Who We Are — Data Controller
For the purposes of applicable data protection law (including GDPR and UK GDPR), SongsSmith / Solid Stone Ventures is the Data Controller for the personal information you provide through this website.
Company | Solid Stone Ventures (trading as SongsSmith) |
Website | dev.songssmith.com |
support@dev.songssmith.com | |
Jurisdiction | United States |
3. Information We Collect
3a. Information You Provide Directly
- Name and email address (required to process and deliver your order)
- Phone number (optional, if provided)
- Billing information (processed by Stripe — we do not store card details)
- Personal stories, names, memories, and preferences submitted for song creation
- Information about third parties included in your song brief (by submitting this, you confirm you have the right to share it)
- Messages sent to our support team
3b. Information Collected Automatically
- IP address and approximate geographic location (city/country level)
- Browser type, device type, and operating system
- Pages visited, session duration, and referring URLs
- Cookie and tracking data (see Section 7 for full cookie details)
- Behavioral data collected by Stripe during the checkout process for fraud prevention (see Section 6)
4. Legal Basis for Processing (GDPR)
We process your personal data on the following legal bases under GDPR Article 6:
Legal Basis | Data Category | Purpose |
|---|---|---|
Contract Performance | Name, email, billing, song brief | Processing and delivering your order |
Legitimate Interests | IP, device data, behavioral signals, usage analytics | Fraud prevention, security, service improvement |
Consent | Email address, marketing preferences | Promotional communications (you may opt out at any time) |
Legal Obligation | Transaction records, billing data | Tax, accounting, and regulatory compliance |
5. How We Use Your Information
- Process, produce, and deliver your personalized custom song
- Communicate with you regarding your order status, revisions, and support
- Send service-related notifications and order confirmations
- Improve our website, services, and user experience
- Detect and prevent fraud, abuse, and unauthorized transactions
- Comply with legal and regulatory obligations
- Send promotional communications where you have provided consent (you may opt out at any time)
SongsSmith does not sell, rent, or trade your personal information to third parties for their own marketing purposes.
6. Stripe — Payment Processing & Fraud Detection
Important: Payments on dev.songssmith.com are processed by Stripe, Inc. Stripe acts as an independent data controller for some of the data it collects during the payment process.
When you make a purchase, your payment details (card number, expiry, CVV) are entered directly into Stripe’s secure payment form and transmitted to Stripe’s servers. SongsSmith never receives, sees, or stores your full card details.
Stripe also uses Stripe Radar, a fraud detection system that may collect additional behavioral and device-level signals during the checkout process. This includes:
- Device fingerprinting (browser type, screen resolution, fonts)
- Typing patterns and mouse movement signals on the payment form
- IP address and geolocation data
- Network and connection information
This data is used by Stripe solely for fraud prevention and transaction security purposes. It is processed under Stripe’s own Privacy Policy. We encourage you to review Stripe’s Privacy Policy at stripe.com/privacy.
By completing a purchase on dev.songssmith.com, you acknowledge that your payment data is processed by Stripe in accordance with their terms.
7. Cookies & Tracking Technologies
We use cookies and similar technologies to operate the website, analyze traffic, and improve your experience. Below is a summary of the cookies we use:
Type | Name / Provider | Purpose | Expiry |
|---|---|---|---|
Essential | WordPress session | Keeps the website functioning correctly | Session |
Essential | Stripe (_stripe_*) | Fraud prevention and secure payment processing | Session |
Analytics | Google Analytics (_ga, _gid) | Measures website traffic and user behaviour [remove if not used] | Up to 2 years |
Functional | Cookie consent | Remembers your cookie preferences | 1 year |
You can manage or withdraw your consent to cookies at any time through your browser settings or our cookie consent banner. Disabling certain cookies may affect website functionality.
8. Sharing & Disclosure of Your Information
We share personal data only in the following circumstances:
Service Providers
We share limited data with trusted third-party providers who help us operate our business. These include:
- Stripe (payment processing and fraud prevention) — stripe.com/privacy
- Web hosting provider (for website operation and data storage)
- Affiliated songwriters and music producers (song brief details, on a need-to-know basis, under confidentiality)
- Analytics providers such as Google Analytics (aggregated, anonymized usage data) [remove if not applicable]
- Customer support tools (if used)
All service providers are contractually required to maintain appropriate confidentiality and security standards and may only use your data for the specified purpose.
Legal Requirements
We may disclose personal data if required to do so by law, regulation, court order, or governmental request, or when necessary to protect our legal rights, enforce our Terms of Service, prevent fraud, or respond to claims.
Business Transfers
In the event of a merger, acquisition, or sale of assets, personal data may be transferred to a successor entity. We will notify affected users as required by applicable law.
9. Confidentiality of Song Content
Personal stories, names, memories, and other details you submit for song creation are treated as strictly confidential. We do not publicly share, publish, or distribute your personalized song or related personal details without your explicit consent, except where required by law.
SongsSmith may retain anonymized or instrumental portions of completed songs for internal portfolio use only, unless you expressly request otherwise in writing.
10. International Data Transfers
SongsSmith operates internationally. If you access our Services from outside our primary operating jurisdiction, your personal data may be transferred to and processed in other countries where data protection laws may differ.
Where such transfers occur, we ensure they are safeguarded by appropriate legal mechanisms, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- The EU-US Data Privacy Framework (for transfers to the United States, where applicable)
- Stripe’s own adequacy and transfer mechanisms for payment data — see stripe.com/privacy
By using our Services, you consent to your data being transferred and processed as described in this section.
11. Data Retention
We retain personal data only for as long as necessary for the purpose it was collected. The following approximate timeframes apply:
Data Category | Retention Period |
|---|---|
Order and billing records | 7 years (tax and accounting compliance) |
Song brief and personal stories | Duration of order + 12 months, then deleted |
Marketing email preferences | Until opt-out or deletion request |
Website analytics data | Up to 26 months (Google Analytics default) |
Support communications | 2 years from last contact |
12. Your Rights
Depending on your location and applicable law (including GDPR, UK GDPR, and CCPA), you have the following rights over your personal data:
Right | What It Means | How to Exercise |
|---|---|---|
Access | Request a copy of the personal data we hold about you | Email support@dev.songssmith.com |
Rectification | Ask us to correct inaccurate or incomplete data | Email support@dev.songssmith.com |
Erasure | Request deletion of your personal data (subject to legal retention requirements) | Email support@dev.songssmith.com |
Restriction | Ask us to limit how we use your data in certain circumstances | Email support@dev.songssmith.com |
Portability | Request your data in a machine-readable format | Email support@dev.songssmith.com |
Objection | Object to processing based on legitimate interests or for marketing | Email support@dev.songssmith.com |
Withdraw Consent | Withdraw consent for marketing or non-essential cookies at any time | Unsubscribe link or email us |
We will respond to all valid requests within 30 days. We may need to verify your identity before processing your request. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.
13. Data Security
We implement commercially reasonable technical and organisational safeguards to protect your personal information from unauthorised access, misuse, alteration, or disclosure. These include encrypted data transmission (SSL/TLS), restricted access to personal data by staff, and reliance on PCI-DSS compliant payment infrastructure via Stripe.
No method of online transmission or storage guarantees absolute security. By using our Services, you acknowledge this inherent risk.
14. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, SongsSmith will notify affected individuals and the relevant supervisory authority as required by applicable law (within 72 hours under GDPR where feasible).
We will provide clear information about the nature of the breach, the data affected, and the steps we are taking to address it.
15. Children’s Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that personal data from a minor has been collected, we will take reasonable steps to delete it promptly. If you believe we may have collected data from a minor, please contact support@dev.songssmith.com.
16. Third-Party Links
Our website may contain links to third-party websites or services, including social media platforms and Stripe’s payment portal. Once you leave dev.songssmith.com, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party sites you visit.
17. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and how it is used, the right to delete your personal information, the right to opt out of the “sale” of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.
To exercise these rights, contact us at support@dev.songssmith.com.
18. Updates to This Policy
We may update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Stripe’s data processing requirements. Any changes will be reflected with an updated Effective Date at the top of this page. We encourage you to review this page periodically. Continued use of our Services after changes are posted constitutes your acceptance of the revised policy.
19. Contact & Data Subject Requests
For any privacy-related questions, to exercise your rights, or to submit a data subject access request, please contact:
Company | Solid Stone Ventures (trading as SongsSmith) |
support@dev.songssmith.com | |
Website | dev.songssmith.com |
Response Time | Within 30 days of receiving your request |
You also have the right to lodge a complaint with your local data protection authority if you are unsatisfied with how we handle your personal data.