Storysong

Legal

Privacy policy

Last updated 14 November 2026
Your stories are personal. This policy explains what information we collect, why we need it, who we share it with, and the choices you have.

1. Who we are

Storysong creates personalised songs. This policy explains how we handle personal information when you use our website or order a song. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

2. What we collect

Contact and account details: your name, email address, and the sign-in details for your account.

Order details: the occasion, the recipient's name, and the stories, memories, names, dates and other details you choose to include in your questionnaire, plus your style and voice preferences and any revision requests.

Payment details: payments are processed by Stripe. We receive confirmation of payment, the amount and limited billing information, but we never see or store your full card details.

Technical details: basic information your browser sends, such as IP address, browser type and the pages you visit, which our hosting provider records in server logs for security and troubleshooting.

3. Information about other people

Your song will usually include details about other people, such as your partner, family or friends. Please only share information you are entitled to share, and avoid sensitive information (such as health details) unless it's important to the song and you have that person's consent.

4. How we use your information

We use your information to create, deliver and revise your song; to process payments and prevent fraud; to send emails about your order, such as confirmation and delivery notices; to respond to your questions; to operate, secure and improve the site; and to meet our legal obligations.

We do not sell your personal information, and we will not send you marketing emails unless you have agreed to receive them. We will not publish your song or your story without your permission.

5. Who we share it with

We share information only with service providers who help us run the business, and only as needed for them to provide their services:

Stripe (payment processing); Supabase (database, account sign-in and file storage); Railway (website hosting); SendGrid (order emails); and the AI music, lyric and voice generation tools we use to produce your song, which receive the story details needed to create it.

We may also disclose information where required by law, to protect our rights or the safety of others, or as part of a sale or restructure of the business.

6. Overseas storage

Some of our service providers store or process information outside Australia, including in the United States. By using our services you consent to this. We choose reputable providers, but overseas recipients may not be subject to the Australian Privacy Principles, and we cannot be accountable for how they handle information under the laws of those countries.

7. Cookies

We use only the cookies and browser storage needed to keep you signed in and make the site work. We do not use advertising or tracking cookies, and we do not currently use analytics tools.

8. How long we keep it

We keep order information and song files for as long as your account is open or as needed to provide your song and support, and keep payment and transaction records for as long as tax and accounting laws require. You can ask us to delete your information at any time, subject to those legal requirements.

9. Security

We take reasonable steps to protect your information from misuse, loss and unauthorised access, including encrypted connections and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach is likely to cause serious harm, we will notify you as the law requires.

10. Your choices and rights

You can ask to access or correct the personal information we hold about you, or ask us to delete it. We will respond within a reasonable time and may need to verify your identity first.

If you have a concern about how we've handled your information, please contact us first so we can try to resolve it. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

11. Children

Our services are intended for adults. We do not knowingly collect personal information directly from children under 16 without a parent or guardian's involvement.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

13. Contact us

To make a privacy request or ask a question, reach us through our contact page. See also our Terms & Conditions.