Legal
Privacy Policy
Last updated: March 2026
GDPR compliant. Your data is processed exclusively on EU servers.
01Data Controller
Higrate GmbH Fünf Morgen 3 14195 Berlin Germany Email: [email protected] Responsible for data processing pursuant to Art. 4(7) GDPR.
02Collection and Processing of Personal Data
We collect the following data when you use SongLove via WhatsApp: • WhatsApp phone number — to identify you and deliver songs via WhatsApp • WhatsApp display name — to personalize the conversation • Payment data — processed exclusively through our payment provider Stripe; card details are never stored on our servers • Song creation data — occasion, genre, mood, your personal story/text prompt, and the generated audio files • Usage data — time of creation, selected plan, number of songs created We do not collect email addresses. Your primary identifier is your WhatsApp phone number.
03Purpose of Data Processing
Your data is processed exclusively to provide the SongLove WhatsApp service: • Creating and delivering personalized songs via WhatsApp • Processing payments and managing subscriptions • Sending transactional messages (song delivery, plan updates) via WhatsApp • Ensuring the functionality and security of the service
04Legal Basis (Art. 6 GDPR)
• Performance of contract (Art. 6(1)(b) GDPR) — for providing the service, generating songs, and processing payments • Consent (Art. 6(1)(a) GDPR) — for optional communications beyond the core service • Legitimate interests (Art. 6(1)(f) GDPR) — for service security and fraud prevention
05Disclosure to Third Parties
Your data is shared with the following service providers exclusively for the purpose of providing our service: • Meta / WhatsApp — message delivery and conversation handling • Stripe — payment processing (PCI-DSS certified) • Supabase — database hosting (EU servers) • ElevenLabs — AI music generation • OpenAI — song title and cover art generation No data is sold to third parties. All processors are bound by data processing agreements.
06Data Retention
Personal data is only stored for as long as necessary for the stated purposes: • Account data (phone number, plan) — until you request deletion • Generated songs and audio files — permanently available via share link, deleted upon request • Conversation data — retained for service improvement, anonymized after 12 months • Payment data — in accordance with statutory retention periods (up to 10 years per § 147 AO) • Usage data — anonymized after 12 months
07Your Rights (Art. 15–21 GDPR)
You have the right at any time to: • Access your stored data (Art. 15 GDPR) • Rectification of inaccurate data (Art. 16 GDPR) • Erasure of your data (Art. 17 GDPR) • Restriction of processing (Art. 18 GDPR) • Data portability (Art. 20 GDPR) • Object to processing (Art. 21 GDPR) • Withdraw given consent To exercise your rights, contact us at: [email protected]
08Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is: Berliner Beauftragte für Datenschutz und Informationsfreiheit Friedrichstr. 219 10969 Berlin https://www.datenschutz-berlin.de
09Cookies and Analytics
The SongLove WhatsApp landing page (whatsapp.songlove.ai) uses Plausible Analytics for aggregate, privacy-friendly traffic statistics. Plausible does NOT use cookies, does NOT collect personal data, does NOT track users across websites, and is fully GDPR/TTDSG compliant — therefore no cookie banner is required. All data is processed in the EU. More info: https://plausible.io/data-policy. During checkout (handled by Stripe), Stripe may set essential cookies strictly required to process your payment. These cookies are not used for tracking or marketing.
10Changes
We reserve the right to update this privacy policy as needed to reflect changes in the law or our service. The current version is always available at whatsapp.songlove.ai/privacy.