Privacy Policy

We collect only the information necessary to provide our services, in the following categories:

• Identification and contact: full name, email address and phone number, provided by you when placing an order. This data is collected and used exclusively for the process of creating your personalized song and for subsequent communication related to delivery of the finished track (order confirmation, status updates and delivery of the final file).
• Order details: information you share in the creation form (story, occasion, musical preferences and other content required to produce the track).
• Technical data: IP address, browser type, language, pages visited and access logs, collected automatically for security, diagnostics and improvement of the site experience.

We do not request sensitive data beyond what is strictly necessary to perform the contracted service. Credit card data is not stored on our servers — see the payments section.

We use your personal data for the following purposes, always in compliance with applicable law:

• Process your order and produce the personalized song according to the specifications provided;
• Contact you by email, phone or messaging to confirm the order, request additional information and deliver the finished song;
• Process payments and issue transaction receipts;
• Ensure platform security, prevent fraud and comply with legal obligations;
• Analyze site usage in aggregated and anonymous form to improve our services and user experience.

We do not use your contact data for unsolicited marketing nor do we sell it to third parties.

Credit card payments are processed directly by Stripe, a specialized payment processing company, in Stripe's secure and certified environment. When you pay, you are redirected to or interact with Stripe's secure forms, which meet PCI DSS industry standards for card data.

Makesong Canada does not store full credit card numbers, security codes (CVV) or banking details on its own servers. We receive only information needed to confirm the transaction (such as payment status, transaction identifier and last card digits, when applicable).

For Pix payments (when available in your region), data is processed according to the rules of the integrated payment provider.

Our website uses cookies and similar technologies for operation, analytics and advertising. Some cookies are set directly by us; others are controlled by third-party companies, including:

• Google — Google Analytics (traffic and behavior analysis), Google Tag Manager (tag management) and Google Ads (advertising and conversion measurement);
• Meta — Meta Ads (advertising and remarketing on platforms such as Facebook and Instagram);
• Stripe — cookies required for secure payment processing and fraud prevention.

These third parties may collect information about your browsing according to their own privacy policies. You can manage cookie preferences in your browser settings and, when available, through opt-out tools offered by each provider (for example, Google and Meta ad settings).

We do not sell, rent or trade your personal data. We may share limited information in the following situations:

• Service providers: companies that help us operate the platform (hosting, email, payment processing, analytics and advertising), always under contracts requiring adequate data protection;
• Legal obligation: when required by law, court order or competent authority;
• Protection of rights: to defend our legal rights, prevent fraud or protect the security of users and the platform.

Any international data transfers by third-party providers occur with safeguards compatible with applicable law.

We adopt technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or improper disclosure. Measures implemented on our website include:

• Mandatory HTTPS — all communication between your browser and our servers is encrypted with TLS/SSL;
• HSTS (HTTP Strict Transport Security) — we instruct browsers to access the site only over secure connections;
• Content Security Policy (CSP) — a content security policy that restricts resources loaded by the page, reducing risks of malicious script injection;
• Access control, monitoring and secure development best practices.

In the event of a security incident affecting your data, we will take appropriate measures and, when applicable, notify you and competent authorities as required by law.

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy or as required by law. In general:

• Order and contact data are kept for the duration of the contractual relationship and for a reasonable additional period for support, order history and legal compliance;
• Delivered music files may be stored on our servers for up to 3 months after delivery, as described in our Terms of Service;
• Payment data and financial records are kept for the period required by applicable tax and commercial law.

After the retention period ends, data is securely deleted or anonymized.

Under applicable data protection law (including GDPR where applicable), you have the following rights regarding your personal data:

• Confirm whether processing exists and access your data;
• Request correction of incomplete, inaccurate or outdated data;
• Request anonymization, blocking or deletion of unnecessary data or data processed in non-compliance;
• Request data portability to another service provider, when applicable;
• Withdraw consent, when processing is based on consent;
• Request deletion of your personal data — you may exercise this right at any time through our contact page or by email at contato@makesong.me.

We will respond to requests within a reasonable time and as required by law. We may request additional information to verify your identity before fulfilling the request.

We may update this Privacy Policy periodically to reflect changes in our services, practices or legal requirements. The current version will always be available on this page, with the date of the last update indicated when applicable.

We recommend reviewing this policy regularly. Continued use of our services after changes are published constitutes acceptance of the revised policy, to the extent permitted by law.

For questions, requests or to exercise your rights related to this Privacy Policy and the processing of your personal data, contact us:

• Email: contato@makesong.me
• Form: contact page

We will respond as soon as possible, in compliance with applicable legal deadlines.