Privacy Policy

1. Scope and Controller

This Privacy Policy explains how the operator of Fondly Kept ("Fondly Kept," "we," "us," or "our") collects, uses, shares, retains, and protects personal data when you use fondlykept.com and our personalized song and digital gift services (the "Service"). Fondly Kept is the controller of the personal data described here, except where a service provider acts as an independent controller under its own policy.

2. Data We Collect

We collect the following categories of data:

• Account and contact data: name, email address, login method, account ID, verification status, and messages you send to support or contact forms.
• Order and transaction data: product, price, currency, order and provider identifiers, payment status, subscription status, refund information, and billing history. Our payment providers process complete payment credentials; we do not receive or store your complete payment-card number.
• Creation data: recipient names and details, occasion, story, prompt, musical preferences, language, uploaded files, lyrics, artwork, audio, and other generated results. This may include personal data about someone other than the account holder.
• Technical and usage data: IP address, browser and device type, operating system, approximate location derived from IP, pages and features used, timestamps, language and theme preferences, cookie identifiers, diagnostics, security events, and referring URLs.
• Authentication data: password hashes for password accounts or identifiers and profile data returned by Google when you choose Google sign-in. We do not receive your Google password.

We collect data directly from you, automatically from your browser or device, from payment and authentication providers, and when needed from anti-fraud, security, or support services.

3. How and Why We Use Data

We use personal data to:

• create and manage accounts, authenticate users, and provide the Service;
• process orders, renewals, cancellations, refunds, credits, and entitlements;
• generate, store, deliver, and support personalized songs and gifts;
• communicate about transactions, security, service changes, and support;
• send newsletters or marketing where you have subscribed or applicable law otherwise permits, with an unsubscribe option in each marketing message;
• detect fraud, abuse, security incidents, and violations of our Terms;
• troubleshoot, analyze, and improve reliability, accessibility, and product performance; and
• comply with law, enforce agreements, establish or defend legal claims, and protect users, the public, and the Service.

Where applicable law requires a legal basis, we rely on performance of our contract, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where required. You may withdraw consent at any time, but withdrawal does not affect earlier lawful processing.

4. Artificial Intelligence Processing

To fulfill your request, we send the creation data needed for that request to our contracted infrastructure and artificial-intelligence providers. Do not include unnecessary sensitive data in a story or prompt. Automated tools help create content, but we do not use the Service to make legal, employment, credit, health, or similarly significant decisions about you.

5. When We Share Data

We disclose only the data reasonably needed for the relevant purpose to:

• hosting and infrastructure providers, including Cloudflare, for website, database, storage, caching, queueing, delivery, security, and diagnostics;
• payment providers, such as PayPal or another provider displayed at checkout, to process purchases, subscriptions, disputes, and refunds;
• email and authentication providers, including Resend and Google where enabled, for transactional email, newsletters, and sign-in;
• generation providers used to create lyrics, audio, or images from the request you submit;
• professional advisers, auditors, insurers, and authorities when reasonably necessary to comply with law or protect legal rights; and
• a buyer or successor in connection with a merger, financing, reorganization, or sale, subject to appropriate confidentiality and applicable law.

Service providers are permitted to process data only for contracted services and applicable legal obligations. We do not sell personal data for money. We do not knowingly share personal data for cross-context behavioral advertising. See our Cookie Policy for information about browser controls and any analytics technology enabled on the site.

6. International Transfers

Our providers and their systems may be located outside your country. Where required, we use recognized safeguards for international transfers, such as contractual protections, adequacy decisions, or another lawful transfer mechanism. You may contact us for more information about safeguards applicable to your data.

7. Retention

We keep personal data only as long as reasonably necessary for the purposes in this Policy:

• account data is generally kept while the account is active;
• creation data and generated assets are kept while needed to provide your library, downloads, support, and account features, unless you delete them or request deletion;
• support, security, and diagnostic records are retained for a limited period appropriate to resolving issues and preventing abuse; and
• transaction, tax, refund, fraud-prevention, and legal records may be retained after account deletion for the period required by applicable law or needed to establish or defend legal claims.

When data is no longer needed, we delete or anonymize it. Backup copies may remain until they rotate out under our normal backup schedule.

8. Your Privacy Rights and How to Exercise Them

Depending on where you live, you may have the right to:

• access or know whether we process your data and obtain a copy;
• correct inaccurate or incomplete data;
• delete data, subject to legal exceptions;
• restrict or object to certain processing;
• receive a portable copy of data you provided;
• withdraw consent and opt out of marketing;
• appeal a denied privacy request where applicable; and
• exercise these rights without unlawful discrimination.

You can review and correct basic profile information in Settings → Profile, manage files in Settings → Files, unsubscribe through the link in a marketing email, and delete your account in Settings → Security. To request access to a copy of your data, correction that is not available in Settings, deletion of specific content or associated data, restriction, portability, or an appeal, email support@fondlykept.com with the subject Privacy Request or use our contact page.

Describe the request and identify the account email. To protect users, we may verify your identity and authority before acting. We will respond within the time required by applicable law and explain any lawful reason we cannot fulfill all or part of a request. You may also complain to your local data-protection authority.

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal data, including access controls, encrypted transport, scoped service credentials, and payment processing by specialized providers. No internet service can guarantee absolute security. Protect your password and contact us promptly if you suspect unauthorized account access.

10. Children

The Service is not directed to children under 13, and account holders must meet the age requirement in our Terms. We do not knowingly collect personal data directly from a child under 13. If you believe a child submitted data without appropriate authorization, contact us so we can review and delete it as required by law.

11. Changes to This Policy

We may update this Policy. We will post the new effective date and provide reasonable notice of material changes when required. The version in effect when data is processed governs that processing.

12. Contact

Privacy questions and requests may be sent to support@fondlykept.com or submitted through our contact page.