Privacy Policy

PsalmGift makes personalized Christian songs with AI, from the story you tell us. In this policy, "we", "us" and "our" mean PsalmGift. The service is offered to adults in the United States.

This policy explains what information we collect when you use PsalmGift, what we do with it, who we share it with and the choices you have. For any privacy question or request, email hello@psalmgift.com or use the contact form.

Information you give us.

• Your account: your email address and, if you set one, a password. You can add your name and a few other details in your account. You can start a song as a guest; a guest session is tied to your browser and becomes your account when you sign up.
• Your song: the name of the person the song is for, your relationship to them, the occasion, the musical style and voice you choose, the memories and details you type or dictate, what you are praying for and any exact words you want in a prayer song, Bible verses you choose, lyrics you write or edit, and any changes you ask for.
• Voice notes: if you use "Speak your memories", a recording of up to two minutes, which is turned into text (see How AI is used to make your song).
• Your gift page: the title, your message, your name as the sender, a verse, the photos and cover picture you add, and your choices about what the page shows.
• Reminders: if you set an occasion reminder, the person's name, the occasion, the date and your time zone.
• Messages: your name, email address and message when you use the contact form, and our replies.

Information collected automatically.

• Technical records: like most websites, our hosting providers receive your IP address, browser and device type, and the pages and files you request. We use your IP address to work out your approximate location (country and state), which decides the cookie rules that apply to you, and we keep a scrambled (hashed) form of it to limit how many songs can be made from one connection.
• Download records: when someone opens a download page or downloads a song through a gift or download link, we record the time, IP address, browser type and the page they came from. This applies to whoever uses the link, including the person the gift is for.
• Visit analytics: unless you have turned optional analytics off (see Cookies, analytics and advertising), we collect pseudonymous traffic analytics such as visited pages, referral source or campaign tags, a randomly generated browser identifier, and rough country information supplied by our hosting provider. We also record the type of device (phone, tablet or computer), whether you arrived from an ad click, and which sample songs you play on our public pages and roughly how long. This is our own analytics; it is stored in our database, not with an analytics company.
• Song-page records: when you're signed in, we also keep a short record of how your song pages work for you: when you open a song, when you play a version and roughly how long you listen, when you open the unlock screen, and whether checkout runs into a problem. These records are linked to your account. They don't include your lyrics, song details or names, they don't use advertising tools or browser identifiers, and we don't share them with advertising partners.
• Cookies and browser storage: described in Cookies, analytics and advertising.

Information from others.

• Google: if you choose to sign in with Google, Google gives us the basic profile details you approve, such as your name, email address and profile picture.
• Stripe: when you pay, Stripe tells us that the payment went through, the amount, currency and tax, the email address you used at checkout, later changes such as a refund or a dispute, and reference numbers for the payment and the customer. We never receive your full card number.

A good song comes from real life, so people often tell us personal things: an illness, a loss, a struggle, their faith, and details about the person the song is for. We don't ask for any of this by category and you decide what to include.

We use what you write to write and produce your song, to show the song and its lyrics back to you, to help you when you contact us, and to check and improve the quality of our songwriting. We do not use these details for advertising, we do not send them to advertising partners, and we do not sell them.

Please include only what you are comfortable sharing, and think about what the people in your story would be comfortable with. A song never needs a Social Security number, a financial account number or medical record details, so please leave those out.

• To write, produce, store and deliver your songs, lyrics, gift pages and downloads.
• To manage accounts, sign-in sessions, purchases and the song changes included with a purchase.
• To send service emails: sign-in, confirmation and password-reset emails, your download link, reminders you set, and replies to your messages.
• To send a reminder before your free previews expire and occasional news or offers from PsalmGift. Every one of these emails has an unsubscribe link.
• To ask, once after a purchase, whether you would like to leave a review.
• To respond to support questions and privacy requests.
• To keep the service secure, prevent abuse and fraud, and enforce our Terms of Use.
• To keep song playback and checkout working, spot problems quickly, and improve how we make and deliver songs.
• To understand traffic trends and measure which channels are bringing visitors to the site.
• When advertising measurement is switched on and you have not opted out, to measure and improve our advertising.
• To keep the records the law requires, such as payment and tax records, and to handle legal claims.

We do not use your information to make automated decisions that have legal or similarly significant effects on you, and we do not build advertising profiles from your story, lyrics or photos.

PsalmGift songs are made with AI. Lyrics are drafted by an AI language model, and the music and the singing voice are generated by an AI music model. To do that, we send parts of what you give us to AI companies:

• Writing the lyrics. We send what you entered in the song creator (the name of the person the song is for, your relationship, the occasion, the style and voice, your memories and details, prayer details and any changes you asked for) to OpenRouter, an AI gateway. OpenRouter passes each request to a company that runs the AI model: the model's maker, such as Anthropic, Google or OpenAI, or a cloud service that hosts the model. We do not send your email address or account ID with these requests.
• Making the music. We send the finished lyrics (which usually contain names and details from your story), the song title, a description of the musical style and the type of voice to Suno's music model through sunoapi.org, an independent service that provides access to it. If you ask for a change to a song, we also send a temporary link to the earlier recording so the new one can follow it. If our lyric writer is unavailable, a short summary of your request may be sent to the same service to write the lyrics instead. The recordings come back to us and we keep our own copies; the music service may keep its copies too.
• Voice notes. A "Speak your memories" recording goes through our server to OpenRouter, which passes it to a speech-to-text model. The text comes back to your screen for you to review and edit. We do not keep the recording.
• Smaller helpers. The pronunciation helper sends the word you type and its language; the lyrics tidy-up tool sends the lyrics you wrote; and if you ask for a generated cover picture, the song's title, occasion, story, lyrics and the name of the person it is for are sent to a language model that writes a description of a picture, and only that description goes to the image model. All of these go through OpenRouter.

These companies process what we send in order to return lyrics, text, pictures or audio. They do so under their own terms and privacy policies, and we do not control how long they keep a request. We do not use your stories, lyrics, photos or songs to train AI models ourselves. The photos you add to a gift page are not sent to any AI company.

We do not sell your information for money. We share it only as follows.

Companies that run the service for us.

• Supabase: our database, sign-in system, file storage (recordings, covers and photos) and server functions.
• Netlify: website hosting and server functions. Netlify also tells us your approximate location from your IP address.
• Stripe: payments (see Payments).
• Resend: delivery of the emails we send.
• OpenRouter and the AI model companies it routes to: lyrics, voice-note transcription and the smaller AI helpers described above.
• sunoapi.org and Suno: music and vocals.
• Google: sign-in, if you choose "Continue with Google".

Advertising partners. Only when advertising measurement is switched on and you have not opted out, Meta and Google receive the limited information described in Cookies, analytics and advertising.

People you share with. Anyone who has the link to your gift page can see what is on it (see Gift pages and download links).

Legal and safety reasons. We may disclose information when the law requires it, such as in response to a court order or subpoena, or when it is needed to protect the rights, safety or property of our customers, the public or PsalmGift.

A change of ownership. If PsalmGift is sold or merged, customer information may pass to the new owner as part of that deal. This policy keeps applying to it until you are told of a change.

Payment card details are handled by Stripe on Stripe's own checkout page, not stored by PsalmGift. Stripe collects your card details and billing address under its own privacy policy. We store limited payment records, such as customer and checkout reference numbers, the amount, currency and tax, and the status of the purchase, to deliver what you bought, keep our accounts and tax records, apply our refund policy, and prevent fraud or abuse.

Essential cookies and storage. These are always on, because the site cannot work without them:

• sign-in cookies that keep you logged in, and a cookie that remembers whether you chose "Remember me";
• a short-lived cookie used while you sign in with Google;
• a cookie that remembers your privacy choices for 180 days;
• storage in your browser that keeps your work in progress so you don't lose it: your song details and drafts, gift page drafts and photos you have not saved yet, and your display preferences. This stays on your device; on a shared computer, sign out and clear the browser's site data when you finish.

Optional analytics. Our own visit analytics, described in Information we collect, uses a random identifier kept in your browser.

Advertising measurement. Advertising measurement is switched off right now: no advertising tags from Meta or Google load on this site, and we send them nothing about you. The next two paragraphs describe how it works when it is switched on.

Meta (Facebook and Instagram). On our public pages, the Meta Pixel tells Meta which public page you opened, never an account page, a gift page or a download page, together with Meta's advertising click and browser identifiers (the _fbp and _fbc cookies) and your browser and device details. Because your browser connects to Meta directly, Meta also sees your IP address. When you start checkout or buy a song, our server tells Meta that it happened, with the purchase's value and currency, those same identifiers, your browser type, and your email address and account ID after they have been hashed (scrambled one way). We do not send Meta your story, lyrics, messages, the names of the people in your song, photos, recordings, card details or gift and download links. See the Meta Privacy Policy.

Google Ads. Google Ads helps us understand which ads lead to song purchases. Google may receive advertising click and browser identifiers, browser or device information, your IP address, a public page address, and the amount, currency and an opaque transaction reference for a completed purchase. We do not send Google your email, song details, lyrics, recipient names, uploaded media or private sharing links. Enhanced conversions and advertising personalization are disabled. See how Google uses information from sites that use its services.

Your choices. In the United States, optional analytics and, when it is switched on, advertising measurement are on unless you turn them off, and you will not see a cookie banner. If we cannot confirm that you are in the United States, both stay off until you say yes in a cookie banner. You can change or withdraw a choice at any time using the Cookie settings link in the footer. We honor an active Global Privacy Control signal as an opt-out of both. Essential sign-in, payment, security and download features do not depend on accepting optional tracking.

The signed-in song-page records described above follow your analytics choice: we stop keeping them if you turn optional analytics off in Cookie settings or your browser sends a Global Privacy Control signal.

Every song you keep can have a gift page with its own long, random link. Anyone who has the link can open the page without an account. They can see the song's title, the name of the person it is for, your name and message, the cover picture, your photos and verse, and the lyrics unless you hide them; they can play the song, and may be able to download it. The same link opens the song's download page. Share the link only with people you want to have the gift, and remember that they can forward it.

• The link does not expire. You cannot switch it off yourself yet; to take a gift page down, contact us.
• Photos and cover pictures are stored at long, hard-to-guess web addresses that are not protected by a password: anyone who has the address of a picture can open it. Taking a photo off your gift page removes it from the page, but the stored file stays until you ask us to delete it.
• We ask search engines not to list gift pages or download pages.
• When a gift link is pasted into a messaging app or a social network, that service may show a preview with the song's title, the name of the person it is for, your message and the cover picture.

We keep information for as long as we need it for the purposes in this policy. In most cases that means until you ask us to delete it: we do not yet delete most records automatically after a set time.

• Your account, kept songs, lyrics, gift pages and photos: kept so you can come back to them, until you ask us to delete them or your account.
• Free previews: you can listen to a preview for 72 hours. After that it is no longer offered in your account, but the story, lyrics and recordings behind it stay in our systems until you ask us to delete them. The same applies to songs started as a guest.
• Voice notes: the recording is not kept. The text becomes part of your song details.
• Messages to us, analytics, song-page records and download records: kept for as long as they are useful for support, security and understanding how the service is used.
• Payment records: kept for as long as tax, accounting and other laws require, even after an account is deleted.
• Privacy choices: the cookie that remembers your choice lasts 180 days. After that, or if you clear your cookies, the default applies again until you choose again. An advertising opt-out you make while signed in is also kept with your account. If you unsubscribe from emails, we keep your address on a do-not-email list so the choice sticks.
• Advertising records: the records our server uses to report a purchase to Meta have their browser identifiers removed once the event is sent, held back or has failed for good.

When you ask us to delete information, we delete it or remove what identifies you, unless we must keep it for a legal reason. Copies in our providers' backups may remain for a limited time, and information already sent to an AI company is kept or deleted under that company's own practices.

We use reasonable measures to protect your information: encrypted connections, sign-in and access rules that limit each account to its own songs, private storage with time-limited links for our copies of your recordings, and Stripe for card payments. Photos and gift links work differently, as described in Gift pages and download links. No website can promise complete security, and we cannot guarantee that your information will never be accessed, disclosed or lost. If you think your account has been used without your permission, contact us right away.

Privacy laws differ from state to state, and many apply only to larger businesses. Whichever state you live in, you can ask us to:

• Access: tell you whether we hold information about you and give you a copy;
• Correct: fix information that is wrong. You can edit your account details, lyrics and gift page yourself;
• Delete: delete your account, a song, a gift page, your photos or other information about you;
• Take it with you: give you a copy of the information you gave us in a common electronic format;
• Opt out: stop any sale or sharing of your information and any use of it for targeted advertising (see State privacy rights for what that means here).

How to make a request. Email hello@psalmgift.com or use the contact form, and tell us what you would like. There is no delete button in the account yet, so deletion requests are handled by a person.

How we check it is you. We ask you to write from the email address on your account, or to confirm the request through that address. If you have no account, for example because you received a gift, we may ask for the gift link or other details that let us find the information and confirm the request is yours. Someone you authorize can make a request for you; we will ask for proof of your permission and may still confirm with you directly.

Timing and appeals. We aim to answer within 45 days. If we need more time, or cannot do what you ask, we will tell you why. If you disagree with our answer, reply to it or email hello@psalmgift.com with the subject "Privacy appeal" and we will review it again and answer within 45 days. If you are still not satisfied, you can contact your state attorney general.

No penalty. We will not refuse service, charge a different price or treat you differently because you used any of these rights.

Emails. Use the unsubscribe link in any preview reminder or news email. Occasion reminders are sent only for dates you saved; change or remove them under Reminders in your account. We still send messages about your account and purchases.

Cookies and tracking. Use Cookie settings in the footer, or turn on Global Privacy Control in your browser.

California. The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), applies to businesses above certain size thresholds. Whether or not it applies to us, we give this information and honor these requests for California residents.

Notice at collection. We collect, and in the past 12 months have collected, these categories of personal information, from the sources and for the purposes described above:

• Identifiers: name, email address, account ID, IP address, and cookie and browser identifiers.
• Customer records: the names and contact details you give us. Stripe holds your card and billing details.
• Commercial information: what you bought and when.
• Internet activity: pages visited, songs played, downloads, device and browser type.
• Approximate location: country and state, from your IP address. We do not collect precise location.
• Audio and visual information: voice notes (turned into text and not kept), photos and cover pictures you add, and the songs made for you.
• Sensitive personal information: your account sign-in details, and anything you choose to write in a story or prayer that reveals health, religious beliefs or similar details about you.

We do not collect biometric identifiers such as voiceprints, and we do not draw inferences to build a profile of you. We use sensitive personal information only to provide the service you ask for, so there is no additional use to limit. How long we keep each kind of information is described in How long we keep information.

Disclosures for business purposes. We disclose, and in the past 12 months have disclosed, each of these categories to the service providers named in Who we share information with, so that they can run the service for us.

Sale and sharing. We do not sell personal information, and we do not share it for cross-context behavioral advertising. No advertising tags from Meta or Google load on this site today. We do not knowingly sell or share the personal information of anyone under 16.

Your California rights. You can ask to know what personal information we have collected, used and disclosed, to get a copy, to correct it, to delete it, and to opt out of any sale or sharing, and you will not be treated differently for asking. Your choices and rights explains how to make a request, how an authorized agent can make one for you, and how we check it is you.

Shine the Light. California residents can ask which personal information a business has disclosed to other companies for those companies' own direct marketing. We do not disclose personal information to other companies for their own direct marketing.

Other states. Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and a growing number of other states have privacy laws that give residents similar rights: to confirm whether we process their information, to get a copy, to correct or delete it, to opt out of targeted advertising, of the sale of personal information and of certain profiling, and to appeal a refusal. These laws generally apply to businesses above size thresholds. Whether or not they apply to us, we honor these requests as described in Your choices and rights.

Nevada. Nevada residents can ask a website not to sell certain personal information. We do not sell personal information as Nevada law defines a sale. You can still send a request to hello@psalmgift.com and we will keep a record of it.

PsalmGift is for adults. You must be at least 18 years old to create an account or buy a song. The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us at hello@psalmgift.com and we will delete it.

A song or a gift page may be about a child, for example a lullaby or a baby dedication, when a parent or another adult gives us those details. Please include only what you have the right to share.

Global Privacy Control (GPC). When your browser sends a GPC signal, we treat it as a request to opt out: optional analytics, song-page records and advertising measurement are turned off for that browser, advertising cookies are removed, and Cookie settings shows that they cannot be switched on while the signal is active. If you are signed in, we also record the opt-out against your account for advertising.

Do Not Track. There is no common standard for how a website should respond to the older "Do Not Track" browser setting. Our own visit analytics does not run when your browser sends it. Our other optional features respond to Global Privacy Control and to Cookie settings instead.

PsalmGift is offered to people in the United States. If you use it from another country, your information will be processed in the United States and in other countries where our service providers operate, where privacy laws may differ from those where you live. If we cannot confirm that you are in the United States, optional analytics and advertising stay off unless you allow them.

We may update this policy as the service or the law changes. When we do, we will change the effective date at the top of this page. If a change is important, we will also tell you on the site or by email before it takes effect.

Privacy questions and requests can be emailed to hello@psalmgift.com or submitted through the contact form. We reply to the email address you provide.