Privacy Policy

1. Controller

The controller within the meaning of the GDPR is:

julianspillner.com – Julian Spillner
c/o Online-Impressum.de #4779
Europaring 90
53757 Sankt Augustin
Email: info@gift-a-song.de

2. Data Collected

We only collect and process personal data to the extent necessary to provide our service:

User inputs: Information about the recipient, occasion, music preferences, personal stories
Payment data: Processed via Stripe – we do not store card details
Technical data: IP address, browser type, operating system, access times
Song ID: A randomly generated ID to identify the created song

3. Legal Bases

Processing is carried out on the following legal bases under Art. 6 GDPR:

Art. 6(1)(b) GDPR: Performance of contract (song creation and purchase)
Art. 6(1)(f) GDPR: Legitimate interest in the secure provision of the service

4. Data Processors

To deliver our service we use the following providers:

Supabase (Database)

Song data is stored in a Supabase database. supabase.com/privacy

Google Gemini (AI)

Form inputs are transmitted to the Gemini API for AI-powered lyric generation. policies.google.com/privacy

fal.ai (AI Music)

Lyrics and music descriptions are transmitted to fal.ai for music production. fal.ai/privacy

Evolink / Suno AI (AI Music)

Lyrics and music descriptions are transmitted to Suno AI via the Evolink service for music production. evolink.ai/privacy

Stripe (Payments)

Payments are processed via Stripe Checkout. Stripe processes payment data as an independent controller. stripe.com/privacy

5. Third-Country Transfers

Some providers (Google, Stripe, fal.ai) are based in the USA. Data transfers are made on the basis of EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where applicable, the EU-US Data Privacy Framework.

6. Retention

Your song data is stored in our database and accessible via the song URL for as long as the service operates. We will delete your data promptly upon request. Please contact info@gift-a-song.de.

7. Your Rights

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)

Contact: info@gift-a-song.de

Supervisory authority: Landesbeauftragte für Datenschutz und Informationsfreiheit Berlin (LfDI Berlin)

8. Cookies

Gift A Song does not use tracking or marketing cookies. Technically necessary cookies may be set by Next.js or Supabase. No consent is required under § 25(2) TTDSG.

9. Updates

This privacy policy is current as of February 2026. Changes may be necessary as our service evolves or legal requirements change. The current version is always available at /datenschutz.