Privacy policy

1. Data controller

The data controller is NET'SERVICE, Société par actions simplifiée (SAS), a company incorporated under French law, 5 avenue de la Californie, 06200 Nice, France, registered under RCS Nice 848 459 400. This English version is a courtesy translation: the processing of your personal data is governed by the GDPR and by French data protection law, under the supervision of the CNIL.

For any question relating to your data: contact@chanson-ia.fr.

2. Data we collect

We collect only what is necessary to provide the service.

• Your contact details: email address and telephone number.
• The content of your order: the recipient's first name, the bond you share, the occasion, the description you write, the musical style you choose and, where applicable, your personal message.
• Order data: status, date, amount, transaction reference.
• Technical data: IP address, used to limit abuse, to protect the service, and to compute the anonymous audience-measurement fingerprint described in section 9. It is never stored as such.
• Traffic data: pages viewed, the site you arrived from, device type, and approximate location — country, region, city and département. We keep neither your full postcode nor your geographic coordinates.
• Views of your song page: date and time it was opened, device type and approximate location — country, region, city. Unlike the audience measurement described in article 9, this information is attached to your order: it lets us know whether the link we sent actually reached you, and follow up if it went astray. No IP address is kept.

We collect no payment card data: payment details are entered directly on Stripe's secure infrastructure, to which we have no access.

3. Purposes and legal bases

• Creating and delivering your song — performance of the contract.
• Sending you the emails relating to your order (preview, confirmation, download link) — performance of the contract.
• Providing customer support and handling complaints — performance of the contract and legitimate interests.
• Measuring our traffic to understand how the site is found and to improve it — legitimate interests, by means of the anonymous measurement described in section 9.
• Checking that your song reached you: we record when your listening page is opened, so we can follow up if the link went astray — legitimate interests in delivering what you ordered. This is the only processing attached to your order rather than anonymous.
• Preventing abuse and fraud (limiting the number of creations per email address and per IP address) — legitimate interests in protecting the service.
• Meeting our accounting and tax obligations — legal obligation.

Your data is never sold, rented out or used for advertising or direct marketing purposes.

4. A word about the description you write

The text describing the recipient is passed on to our music generation provider so that the lyrics can be written. It may contain details of private life: memories, habits, character traits.

We invite you to include only things you would be comfortable hearing sung, and not to include special categories of data within the meaning of Article 9 of the GDPR (health, political or religious opinions, sexual orientation).

5. Recipients and processors

Your data is accessible to NET'SERVICE and to the providers strictly necessary to the service:

• Supabase — hosting of the database and of the audio files, Paris region (European Union).
• Vercel — hosting of the website.
• ElevenLabs — music generation from the description provided.
• Stripe — payment processing.
• Resend — sending of emails.

Some of these providers are established outside the European Union. Transfers are then carried out on the basis of the European Commission's standard contractual clauses or of equivalent safeguards.

6. Retention periods

• Orders and audio files: kept for at least three years after the purchase, so that you can download your song again at any time.
• Accounting records: ten years, in accordance with statutory obligations.
• Orders left unpaid: deleted after twelve months.
• Anti-abuse technical data: twenty-four hours.
• Audience measurement: thirteen months. As fingerprints are valid for a single day, this data can no longer identify anyone beyond that.
• Views of your song page: thirteen months, and deleted immediately if your order is.

7. Your rights

Under the GDPR, you have the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to object and the right to data portability, as well as the right to give directions as to what becomes of your data after your death.

To exercise them, write to contact@chanson-ia.fr. We reply within one month. Proof of identity may be requested where there is reasonable doubt as to your identity.

If you consider that your rights are not being respected, you may lodge a complaint with the CNIL, the French supervisory authority, 3 place de Fontenoy, 75007 Paris.

8. Security

Audio files are stored in a private space and are accessible only through signed links of limited duration. Access to the administration interface is protected and logged. Exchanges with the site are encrypted (HTTPS).

The link to your song serves as an access key: anyone who holds it can listen to and download the song. We recommend that you share it only with the people of your choosing.

9. Cookies and audience measurement

Chanson IA places no advertising cookies and no targeting trackers. Only one technical cookie is used, to keep the administration session open.

Site traffic is measured by our own means, with no cookies and no third-party script. The data stays hosted in France, with our database provider.

To count people rather than page views, we compute a technical fingerprint from your IP address and your browser, combined with a secret of our own. This fingerprint cannot be reversed: your IP address is never stored. The secret changes every night, so tomorrow's fingerprint bears no relation to yesterday's: you cannot be recognised from one day to the next, nor tracked across other sites.

Location deliberately stops at city and département level: that is the maximum precision allowed for measurement exempt from consent. The postcode passed on by our host is used to derive the département, then discarded; latitude and longitude are never read.

This measurement serves only to know our traffic and where our visitors come from. It feeds no advertising and is shared with nobody. On that basis it falls under the consent exemption granted to audience measurement: no banner is imposed on you.