Privacy policy
Last updated November 2, 2026
What we collect
- Your account: your email address; your Google account ID if you sign in with Google; and, if you set a password, a salted one-way hash of it (never the password itself). Sign-in codes we email you are stored only as a hash and expire after 10 minutes. Without signing in, a random account is kept in a cookie in your browser.
- What you write for a song: the name, occasion, details or lyrics, and your voice and style choices, to make the song. Only type details about other people that you're happy to put in a song for them.
- Your songs and their lyrics, so you can play and download them in My songs.
- Credits and payments: credit movements, what you bought and the amounts. Card details go to Stripe, never to us.
- Basic usage data: pages viewed, how long each page was on screen and how far you scrolled, the buttons you used, the site that referred you, your language, your device type, your country (estimated from your IP address) and a random visitor ID stored in your browser, so we can see which pages help people. Your IP address is stored only in a one-way hashed form, to limit abuse.
Who processes it
- Cloudflare hosts the site, the database and the songs.
- APIMart, which runs Suno's AI models, receives the name, occasion, details or lyrics and your style choices, and writes and sings your song.
- OpenAI's moderation service checks the words you write for prohibited content before a song starts.
- Stripe processes payments and receives the email, payment and billing details you enter at checkout.
- Resend, with Brevo as a backup, sends the sign-in and password-reset codes you ask for; they receive your email address and the code.
- Google, if you choose to sign in with Google.
- Microsoft Clarity records how visitors use our public pages (clicks, scrolling, what was on screen) as session replays and heatmaps, so we can see where a page is confusing. Text typed into forms is masked, and it doesn't run on the sign-in, My songs and gift pages. See the Microsoft Privacy Statement.
We don't sell your data and don't use what you write or your songs to train models. We don't send marketing emails.
How long we keep it
Songs and their lyrics stay in My songs until you delete them. You can delete all your songs, or your whole account, from My songs at any time. A browser account that never made a song or started a checkout is deleted after 2 days. Payment records are kept as required for tax and accounting.
Cookies and browser storage
We use one sign-in cookie to keep your account, and no advertising cookies. The site stores a random visitor ID and your light or dark choice in your browser's local storage. You can clear them at any time in your browser settings.
Microsoft Clarity sets its analytics cookies (_clck, _clsk) to connect the pages of one visit. For visitors in the European Economic Area, the United Kingdom and Switzerland it sets no cookies and records each page on its own.
Your data rights
Wherever you live, you can ask us to access, correct or delete the data we hold about you, or object to usage statistics. Most of it you can do yourself in My songs; for anything else email support@theaisonggenerator.com from your account's email address. We reply within 30 days, usually much sooner. You can also complain to your local data protection authority.
Children
The site is not meant for anyone under 18.