Solasong!
|
Connexion

Privacy Policy

Solasong — Last updated: June 2026

1. Introduction

Solasong (operated by Tipi Ventures, France) is committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) and applicable French data protection law. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.

2. Data Controller

  • Data controller: Tipi Ventures
  • Platform: Solasong (solasong.com)
  • Country: France
  • Applicable regulation: GDPR (Regulation EU 2016/679) and French Data Protection Act (Loi Informatique et Libertés)

3. Data We Collect

3.1 Account data

When you create an account, we collect your email address and display name. Your password is hashed and stored securely — we never have access to your plain text password.

3.2 Song generation data

When you generate a song, we collect and store the information you provide in the generation form: occasion, person's name(s), language, music style, extra information about the person, and roast intensity level. This data is necessary to generate your personalized song and is stored alongside the generated content.

3.3 Generated content

We store the AI-generated lyrics, music style descriptors, and audio files (MP3) associated with each song generation. Generated songs are stored for a minimum of 90 days.

3.4 Payment data

Payment processing is handled entirely by Stripe. Solasong does not collect, store, or have access to your credit card number, CVV, or full card details. We receive from Stripe only a confirmation of payment, the amount paid, and a transaction identifier.

3.5 Usage data

We use PostHog (EU cloud) for analytics. PostHog is only activated if you give explicit consent via our cookie banner. If activated, we collect anonymous usage data such as pages visited, features used, and generation frequency. We do NOT send your email, names, or any personal information about third parties to our analytics provider.

3.6 Cookies

Solasong uses essential cookies required for authentication and session management (strictly necessary, no consent required). We also use PostHog analytics cookies, which are only activated after your explicit consent via our cookie banner. You can withdraw consent at any time by clearing your browser data. We do not use advertising cookies.

4. How We Use Your Data

We use your personal data for the following purposes:

  • To create and manage your account
  • To generate personalized songs based on the information you provide
  • To process payments and manage your credit balance
  • To provide customer support
  • To send transactional emails (account confirmation, password reset, payment receipts)
  • To improve the platform and user experience through anonymous analytics

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Legal Basis for Processing

Under GDPR, we process your data based on the following legal grounds:

  • Contract performance: processing necessary to provide the Solasong service (account management, song generation, payment processing)
  • Legitimate interest: anonymous analytics to improve the platform
  • Legal obligation: data retention required by French law (accounting, tax obligations)
  • Consent: where explicitly requested (e.g., marketing communications, if applicable)

6. Third-Party Data Processors

Solasong uses the following third-party services that process data on our behalf:

  • Stripe (USA/EU): payment processing — processes payment data only
  • Supabase (USA/EU): authentication and database hosting — stores account data and song data
  • Anthropic / Claude API (USA): AI lyrics generation — receives song generation inputs, does not store personal data permanently
  • udioapi.pro (third-party music generation API): AI music generation — receives lyrics and style descriptors, does not store personal data permanently
  • PostHog (EU): analytics — activated only with user consent, data stored in EU

These providers are bound by their own privacy policies and data processing agreements. Where data is transferred outside the EU, appropriate safeguards (Standard Contractual Clauses) are in place.

7. Data About Third Parties

When you create a song on Solasong, you may provide personal information about a third party (the person the song is about). Before generating a song, you must confirm that you have the right to use this information. The person described in a song has the right to request removal of any content that concerns them by using our report form at solasong.com/report or by contacting support@solasong.com. Removal requests are processed within 72 hours. Solasong does not knowingly process special category data (Article 9 GDPR) such as health, sexual orientation, or religious beliefs for the purpose of song generation.

8. Data Retention

  • Account data: retained as long as your account is active. Anonymized within 30 days of account deletion.
  • Song generation data: stored for a minimum of 90 days. Deleted songs are permanently removed within 30 days.
  • Payment records: retained for 10 years as required by French accounting law.
  • Usage data: anonymous, retained indefinitely for analytics purposes.

9. Your Rights Under GDPR

As a user based in the EU, you have the following rights regarding your personal data:

  • Right of access: request a copy of all personal data we hold about you
  • Right to rectification: request correction of inaccurate personal data
  • Right to erasure: request deletion of your personal data (subject to legal retention obligations)
  • Right to portability: receive your data in a structured, machine-readable format
  • Right to restriction: request limitation of processing in certain circumstances
  • Right to object: object to processing based on legitimate interest
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at the email provided on the platform. We will respond within 30 days as required by GDPR.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted data transmission (HTTPS/TLS), secure password hashing, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Solasong is not intended for children under 15 years of age. We do not knowingly collect personal data from children under 15. If we become aware that a child under 15 has created an account, we will delete the account and associated data promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the platform. Continued use of Solasong after changes constitutes acceptance of the updated policy.

13. Contact and Complaints

  • Data controller: Tipi Ventures
  • Platform: Solasong (solasong.com)
  • Country: France
  • Email: support@solasong.com

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the French data protection authority (CNIL — Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.