← scribesongs.com

Scribe Songs — Customer Privacy Policy

Effective Date: June 10, 2026 Last Updated: June 18, 2026

1. Introduction

Scribe Songs, operated by Kivfer Holdings Inc. ("we," "us," or "our"), is committed to protecting the privacy of our customers. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Scribe Songs platform at scribesongs.com and associated subdomains (the "Platform").

Kivfer Holdings Inc. is incorporated in the Province of Manitoba, Canada, and is subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

This policy covers personal information collected from customers who purchase songs, interact with our AI-driven interview process, purchase merchandise, or otherwise use the Platform. It also covers Collaborators — individuals who are invited by a Customer to participate in a song creation project by completing their own AI-guided interview. Collaborators are users of the Platform whose personal story content is collected and processed in the same manner as a Customer's, and the same privacy protections apply to them. This policy does not cover the privacy practices of Creator Brands, who operate independently on the Platform.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect the following categories of personal information:

2.1 Account Information When you create an account, we collect:

  • Your name
  • Email address
  • Password (stored in hashed form — we never store plaintext passwords)
  • Account creation date and preferences

2.2 Purchase Information When you make a purchase, we collect or receive:

  • Transaction amount and currency
  • Items purchased
  • Purchase date and order status
  • Payment method type (e.g., Visa ending in XXXX — we do not store full card numbers; payment processing is handled by Stripe)
  • Billing country

2.3 Story & Interview Content This is the most personal category of information we collect. When you (or a Collaborator invited to your song project) complete the AI-driven interview, we receive:

  • Your written or dictated responses to interview questions
  • The personal stories, memories, relationships, and experiences you choose to share
  • Any additional details you voluntarily provide to inform your song

Collaborators who are invited to participate provide the same category of story content and are subject to the same privacy protections as Customers. This content is sensitive and we treat it with the highest level of care. See Section 4 for specific commitments about how we handle your story.

2.4 Song Content We store the deliverables associated with your order:

  • AI-generated draft lyrics and approved lyrics
  • Song artwork (AI-generated images)
  • Song audio files
  • Your song selection and any feedback or revision requests you submit

2.5 Merch Shipping Information If you purchase merchandise, we collect:

  • Your full shipping name
  • Delivery address (street, city, province/state, postal code, country)
  • Phone number (if required for delivery)

2.6 Device & Usage Data We automatically collect certain technical information when you use the Platform:

  • IP address
  • Browser type and version
  • Operating system
  • Pages viewed and features used
  • Timestamps and session duration
  • Referring URL

This data is used for platform security, performance monitoring, and improving the service — not for advertising or behavioral profiling.

2.7 Communications If you contact us for support or submit feedback, we retain records of that correspondence including your name, email, and the content of your messages.

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Delivering the Service. Processing your song order, running the AI interview and production pipeline, generating lyrics and artwork, facilitating song selection, and publishing your song to streaming platforms.

3.2 Fulfilling Merch Orders. Transmitting your shipping address and order details to our fulfillment partner (Gelato) to produce and deliver your merchandise.

3.3 Payment Processing. Facilitating payment transactions through Stripe and maintaining financial records as required by law.

3.4 Communications. Sending you order confirmations, status updates, notification that your song is live, and other transactional messages related to your order. We may also send you service-related announcements when necessary.

3.5 Customer Support. Responding to your questions, handling refund requests, and resolving issues with your order.

3.6 Platform Improvement. Analyzing aggregated, anonymized usage data to improve the Platform's features, reliability, and user experience.

3.7 Legal Compliance. Meeting our obligations under applicable law, including tax record-keeping, responding to lawful requests from authorities, and enforcing our Terms of Service.

We do not use your personal information for:

  • Targeted advertising
  • Selling your data to third parties
  • Behavioral profiling for commercial purposes
  • Training AI models with your personal story content (see Section 5 for details on third-party AI processors)

4. Your Story & Content

Your personal story — the memories and experiences you share in the interview — is the foundation of your song. We take our responsibility to protect it seriously.

4.1 Purpose Limitation. Your interview content is used exclusively to produce and deliver the song you purchased. It is not used for any other purpose, shared with any third party beyond what is necessary for service delivery, or retained beyond the period described in Section 6.

4.2 No Public Attribution Without Approval. We will not publicly identify you as the subject of a song, use your name or likeness in marketing materials, or publish any personally identifying details about your story without your prior written approval. Your song will be published under the Creator Brand's name and presence, not under your name, unless you explicitly choose otherwise.

4.3 Song Artwork. AI-generated song artwork is based on themes and emotional content from your interview, not on photos of you. We will not incorporate your recognizable image into song artwork without your explicit permission and submission of a photo for that purpose.

4.4 Sensitive Content. If your story includes sensitive personal information (health, family difficulties, grief, relationships), that information is processed solely to inform your song and is subject to the same protections as all other interview content.

5. Third-Party Services & Processors

To deliver our services, we share your information with trusted third-party processors. Each processor is contractually required to handle your data only as directed by us, for the stated purpose, and in accordance with applicable privacy law.

5.1 Stripe (Payment Processing)

  • Purpose: Processing payment transactions
  • Data shared: Payment details, billing country, order amount
  • Retention: Stripe retains transaction records per their own retention policies and applicable financial regulations
  • Privacy: stripe.com/privacy

5.2 Supabase (Authentication & Database)

  • Purpose: User authentication, secure data storage for account and project data
  • Data shared: Account information, order data, song project content, interview content
  • Location: Data stored on Supabase-managed infrastructure (AWS-backed)
  • Privacy: supabase.com/privacy

5.3 OpenAI (AI Lyrics & Image Generation)

  • Purpose: Generating song lyrics and artwork from your interview content
  • Data shared: Interview responses and story content (processed to generate your song)
  • Important: We use OpenAI's API under terms that prevent OpenAI from using API-submitted content to train their models by default. Your story content is not used to train OpenAI's models.
  • Privacy: openai.com/privacy

5.4 Google (AI Image Generation — Gemini)

  • Purpose: Supplementary song artwork generation (used on some Creator Brand configurations)
  • Data shared: Thematic and lyrical content derived from your interview (not raw interview text)
  • Important: Google processes API requests under enterprise terms that restrict data use for model training
  • Privacy: policies.google.com/privacy

5.5 DigitalOcean (Storage & Compute Infrastructure)

  • Purpose: Hosting Platform infrastructure and storing song files, artwork, and project data
  • Data shared: Song content, artwork files, and associated project data stored in DigitalOcean Spaces (object storage)
  • Privacy: digitalocean.com/legal/privacy-policy

5.6 Gelato (Print-on-Demand Merch Fulfillment)

  • Purpose: Producing and shipping merchandise orders
  • Data shared: Shipping name, delivery address, phone number, and order details
  • Important: Gelato receives only what is necessary to fulfill your merch order. They do not receive your interview content or song story.
  • Privacy: gelato.com/privacy-policy

5.7 DistroKid (Music Distribution)

  • Purpose: Distributing your song to streaming platforms (Spotify, Apple Music, etc.)
  • Data shared: Song audio and artwork files, metadata (song title, genre)
  • Important: DistroKid does not receive your personal story or identifying information; songs are distributed under Scribe Songs' account
  • Privacy: distrokid.com/privacy

5.8 Vercel (Website Hosting)

  • Purpose: Hosting the Scribe Songs web application
  • Data shared: Web request data (IP addresses, headers) as part of serving web pages
  • Privacy: vercel.com/legal/privacy-policy

We do not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes.

6. Data Retention

We retain your personal information only as long as necessary for the purposes described in this policy.

6.1 Song Project Data. Your account data, interview content, song files, and associated project materials are retained for 24 months following the completion of your song (the date your song is published to streaming). After this period, project-level data is deleted or anonymized. Your account itself remains active unless you close it.

6.2 Financial Records. Transaction records and associated financial data are retained for 7 years in accordance with Canadian tax and accounting laws (Income Tax Act requirements).

6.3 Merch Shipping Data. Your shipping address is retained for 90 days following order delivery to support any defect or damage claims. It is then deleted.

6.4 Support Communications. Records of customer support interactions are retained for 24 months.

6.5 Account Data. If you close your account, we will delete your personal data within 30 days, subject to the financial record retention requirements in Section 6.2 and any legal obligations to retain specific records.

7. Your Rights

You have the following rights regarding your personal information, subject to applicable law:

7.1 Access. You have the right to request access to the personal information we hold about you and to receive a copy of that information.

7.2 Correction. If your personal information is inaccurate or incomplete, you have the right to request correction.

7.3 Deletion. You may request deletion of your personal information, subject to our legal obligations to retain certain records (see Section 6.2). Upon a valid deletion request, we will delete or anonymize your data within 30 days.

7.4 Portability. You may request a copy of your personal data in a structured, machine-readable format where technically feasible.

7.5 Withdrawal of Consent. Where we process your data based on consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

7.6 Objection. You may object to certain uses of your personal information. We will consider and respond to your objection in accordance with applicable law.

7.7 How to Exercise Your Rights. To exercise any of the above rights, contact us at privacy@scribesongs.com. We will respond within 30 days. We may ask you to verify your identity before fulfilling your request.

7.8 GDPR. If you are located in the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) and applicable implementing legislation, including the right to lodge a complaint with your national supervisory authority. We process EEA/UK data under the legal basis of contract performance (to deliver the service you purchased) and legitimate interests.

7.9 Complaints. If you believe we have not handled your personal information appropriately, you may contact us first at privacy@scribesongs.com. You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).

8. Children's Privacy

The Platform is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@scribesongs.com and we will promptly delete that information.

9. Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, alteration, or disclosure. These measures include:

  • Encrypted data transmission (HTTPS/TLS)
  • Encrypted data storage for sensitive fields
  • Access controls limiting who can access personal data
  • Hashed password storage
  • Regular security reviews of our infrastructure

No method of data transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. In the event of a data breach that creates a real risk of significant harm to you, we will notify you and applicable regulatory authorities as required by law.

10. International Data Transfers

Scribe Songs is based in Canada, but our third-party service providers may store or process data in other countries, including the United States. By using the Platform, you consent to your information being transferred to and processed in countries outside your country of residence, which may have different privacy laws.

We ensure that such transfers are protected by appropriate safeguards, including:

  • Contractual clauses requiring processors to protect your data
  • Selecting processors that maintain recognized privacy certifications or operate under equivalent frameworks

For transfers from the EEA/UK to countries without an adequacy decision, we rely on Standard Contractual Clauses or equivalent transfer mechanisms.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will notify you by email at least 14 days before the changes take effect, and we will update the "Last Updated" date at the top of this policy.

Your continued use of the Platform after the effective date of the updated policy constitutes your acceptance of the changes.

12. Contact

For privacy-related questions, requests, or concerns, please contact us:

Privacy Officer Kivfer Holdings Inc. / Scribe Songs 2-51 Ashford Lane Steinbach, MB R5G 2K6 Canada

Privacy Email: privacy@scribesongs.com General Support: support@scribesongs.com

We are committed to responding to all privacy inquiries within 30 days.

This Privacy Policy was last updated on June 18, 2026.