Privacy Policy
What we collect
We process the story and song brief you submit, generated music and order records. Stripe collects payment details and returns the payer email and payment status to us; we do not store full card details.
Guest and security data
Guest and order links use random tokens; our database stores token hashes. For security, rate limits and fraud prevention, we process IP address, country and browser signals. Persistent risk records use tenant-specific HMAC summaries; the IP address is separately encrypted, access-restricted and deleted from those records after no more than 30 days.
Analytics and advertising
We use GA4, Microsoft Clarity and advertising measurement tools when a public Gift page opens to understand visits and campaign performance. These tools never receive names, story text, prompts, lyrics, payment email or raw IP.
Your choices
You may create the initial previews without an account. After payment, Google sign-in is required to attach the purchase to My Gifts; the Google address does not need to match the Stripe receipt email. Contact support@creatune.ai for access, correction or deletion requests.