Privacy Policy

This Privacy Policy explains how we collect, use, disclose, and protect information about visitors to our Site, customers, and other users of our services (collectively, the "Services"). By using the Site or Services, you agree to this Policy. If you do not agree, please do not use the Site.

1) Information We Collect

1.1 Information you provide

  • Contact & account data: name, email, phone, mailing address.

  • Order & payment data: billing address, order details, limited payment information (processed by our payment processors—see Third Parties).

  • Project content: briefs, stories, references, lyrics, artwork, photos/video, audio recordings/voice notes, pronunciation guides, and feedback.

  • Communications: emails, messages, forms, support requests, testimonials.

  • Marketing preferences: newsletter opt-ins/opt-outs, promo participation.

1.2 Information collected automatically

  • Usage & device data: IP address, browser type, device identifiers, pages viewed, referring/exit pages, timestamps.

  • Cookies & similar tech: cookies, pixels (e.g., analytics/ads), local storage. See Cookies below.

1.3 Information from third parties

  • Payment processors (e.g., Stripe/PayPal) for payment confirmation.

  • Analytics/ads partners (e.g., GA4, ad platforms) for traffic insights.

  • Social media when you interact with our pages or share links.

  • Production partners (e.g., session vocalists/players) if required for fulfillment.

2) How We Use Your Information

  • Provide Services: process orders, compose/produce audio, deliver files, manage revisions.

  • Customer care: respond to inquiries, technical support, project updates.

  • Operations: manage accounts, invoicing, prevent fraud/abuse, enforce our Terms.

  • Improvement: quality assurance, analytics, troubleshooting, feature development.

  • Marketing (where permitted): send updates, offers, newsletters; measure campaign performance.

  • Legal & compliance: tax/audit obligations, regulatory requests, dispute resolution.

AI & creative tools. We may use professional software and AI-assisted tools to enhance efficiency or quality (e.g., instrumentation, editing, mixing). We direct the creative process. We do not use your private project materials to train our own or third-party AI models without your explicit consent.

3) Legal Bases (EU/UK)

Where GDPR/UK GDPR applies, our processing is based on: (a) contract (to provide Services), (b) legitimate interests (e.g., site security, improvement, limited marketing), (c) consent (where required, e.g., certain cookies/marketing), and (d) legal obligation (tax/audit/records).

4) When We Share Information

We share only as needed to provide and protect the Services:

  • Service providers/processors: hosting, storage, email/SMS, analytics, payment processing, production partners (session vocalists/musicians), delivery platforms.

  • Advertising & analytics partners: cookies/pixels may result in "sharing" under some state laws (see Your Privacy Rights).

  • Business transfers: in a merger, acquisition, or asset sale.

  • Legal/safety: to comply with law or protect rights, safety, and security.

  • With your direction/consent: e.g., public testimonials, credits.

We do not sell customer lists for money. Some analytics/ads uses may be considered a "sale" or "sharing" of personal information under California law—you can opt out (see Your Privacy Rights).

5) Cookies & Tracking Technologies

We use cookies and similar tech to: (a) operate the Site, (b) remember preferences, (c) perform analytics, and (d) support marketing/ads.
You can manage cookies via browser settings and, where implemented, our Cookie Preferences tool. Disabling certain cookies may limit Site functionality.

6) Data Retention

We retain personal data for as long as necessary to fulfill the purposes above, comply with legal obligations, resolve disputes, and enforce agreements.
Project files: we keep core project files for at least [90 days] after final delivery (longer storage may be offered as a paid add-on). Transaction/financial records may be retained for [7 years] or as required by law.

7) Security

We use administrative, technical, and physical safeguards appropriate to the nature of the data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8) Children's Privacy

Our Services are not directed to children under 13 (or under the relevant age of digital consent). We do not knowingly collect personal data from children. If you believe a child provided data, contact us to request deletion.

9) International Transfers

We are based in the United States. If you access the Services from outside the U.S., your information may be transferred to and processed in the U.S. and other countries. Where required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses).

10) Your Privacy Rights

10.1 U.S. state privacy rights (e.g., CA/CO/CT/UT/VA)

Subject to verification and exceptions, you may have rights to:

  • Know/Access: the categories and specific pieces of personal information we collected.

  • Delete: request deletion of personal information.

  • Correct: request corrections to inaccurate information.

  • Opt-out of: (a) sale or sharing of personal information for cross-context behavioral advertising, and (b) targeted advertising and certain profiling.

  • Limit use/disclosure of sensitive information (if applicable).

  • Appeal a decision regarding your request (where required).

How to exercise: Email [info@legacysongstudios.com] or use our contact form.  We will verify your request (e.g., by confirming control of the email address or account). You may use an authorized agent; we may require proof of authorization and your verification.

California disclosures:

  • Notice at Collection: We collect identifiers (e.g., name, email), customer records (billing), commercial information (orders), internet activity (usage data), audio/visual content you submit (e.g., voice notes for projects), and inferences (e.g., preferences). Sources include you, your devices, and service providers. We use and retain this information as described in Sections 2 & 6.

  • Sale/Sharing: We do not sell personal information for money. Our use of analytics/ads cookies may be deemed a "sale" or "sharing." You can opt out via "Do Not Sell or Share My Personal Information": [link].

  • Sensitive information: If you provide audio/voice content for your project, we use it only to fulfill your order and related quality assurance; we do not use it to identify you or for unrelated purposes. You may request deletion per Section 10.

  • Shine the Light: California residents may request a list of third parties to whom we disclosed personal information for their direct marketing (if any) in the prior year. To request, contact [info@legacysongstudios.com] with "Shine the Light" in the subject.

10.2 EU/UK rights (GDPR)

Where GDPR/UK GDPR applies, you may have rights to access, rectify, erase, restrict processing, data portability, and object to processing based on legitimate interests or direct marketing, and to withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with a supervisory authority.

11) User-Generated Content & Portfolios

If you submit testimonials or publicly share your project, that content may be visible to others. For commercial clients, we may display your name/logo and snippets of the Work in our portfolio unless an NDA or non-portfolio add-on applies (see Terms).

12) Third-Party Services & Links

The Site may link to third-party sites, plug-ins, or services (e.g., payment processors, file delivery, analytics, ad networks, creative tools). Their privacy practices are governed by their own policies. We encourage you to review them.

13) Do Not Track

Some browsers offer Do Not Track (DNT) signals. We do not currently respond to DNT signals. We will honor legally required opt-out mechanisms where applicable.

14) Changes to This Policy

We may update this Policy from time to time. The "Last updated" date reflects the latest changes. Material changes will be posted on this page; in some cases we may notify you by email or a Site notice.

15) Contact Us

Questions or requests?
Email: [info@legacysongstudios.com]

16) California "Notice at Collection" (Detailed)

Categories collected:
Identifiers; customer records; commercial information; Internet/electronic activity; audio/visual content you provide; inferences; (optional) limited sensitive data (e.g., partial payment details handled by processors, audio of your voice for the project).
Purposes: provide/fulfill Services, customer care, security, debugging, analytics, marketing (where permitted), legal compliance.
Retention: as outlined in Sections 2 & 6 (project files ≥ [90 days] after final delivery; transactions [7 years]).
Disclosure: to service providers, analytics/ads partners (which may be a "sale"/"sharing"), legal authorities as required, and per your direction.
Your choices: request access/correction/deletion; opt out of sale/sharing; limit use of sensitive data; appeal a decision.
How to exercise: info@legacysongstudios.com and request: "Do Not Sell or Share My Personal Information" or "Limit the Use of My Sensitive Information".

SMS/Texts. By providing a mobile number, you consent to receive one-time and recurring SMS related to your orders or marketing (if you opt in). Message/data rates may apply. Reply STOP to opt out.
Data Processing Addendum (B2B). We offer a DPA for eligible business clients upon request.
Biometric laws. If local law classifies voice recordings as biometric identifiers, we process them only to produce your project, do not use them for identity verification, and delete/retain them per Data Retention. We do not sell or share biometric identifiers.