Privacy Policy
Last updated: October 02, 2026
1. Data Controller
The data controller for this Service is:
- Company: LyricForge AI
- Website: https://lyricforge.ai
- Privacy Contact: support@lyricforge.ai
- DPO: Not applicable
We respect and protect your privacy rights. This Privacy Policy explains how we collect, use, store, and share your personal information when you use LyricForge AI ("Service").
Please read this Policy carefully before using the Service. By using the Service, you confirm you have read and agree to this Policy. We may update this Policy periodically, and material changes will be communicated in advance via email or in-Service notification.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: Email address, display name, and password (encrypted) when you register
- Payment Information: Transaction amount, payment status. We do not store complete card numbers - card data is processed by our payment provider (see Section 5)
- Lyrics Content: The lyrics you create using our platform
- Communication Records: Emails, support tickets, and feedback you send to customer support
2.2 Information We Collect Automatically
- Device and Network: IP address, device model, operating system, browser type, timezone
- Usage Behavior: Pages visited, features used, interactions with AI tools, session duration
- Log Data: Request timestamps, error logs, performance data
3. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Provide and maintain the Service | Contract performance |
| Billing and payment processing | Contract performance |
| Customer support | Contract performance / Legitimate interest |
| Service notifications (billing, security, policy updates) | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Product optimization and analytics | Legitimate interest |
| Legal compliance | Legal obligation |
We may aggregate or anonymize data for statistical analysis. Such data cannot be identified to specific individuals.
4. Cookies and Tracking Technologies
| Type | Purpose | Can Be Disabled |
|---|---|---|
| Strictly Necessary | Maintain session, core functionality | No |
| Functional | Language preferences, personalized settings | Yes |
| Analytics | Anonymous usage statistics, product optimization | Yes |
| Marketing | Targeted advertising and performance measurement | Yes |
We do not use third-party tracking or advertising cookies. You can adjust preferences via your browser settings or our Cookie Settings.
5. Sharing and Disclosure of Personal Information
We do not sell your personal information, including "selling" as defined under applicable laws such as CCPA. We only share your information in the following circumstances:
- Service Providers: Cloud computing, payment processing, customer support, analytics - all bound by confidentiality agreements. Payment card data is processed exclusively by our PCI-DSS compliant payment processor (Waffo Pancake) and is not stored on our servers
- Legal and Regulatory Requirements: As required by law, court orders, or legitimate requests from authorities
- Business Transfers: In the event of a merger or acquisition, with advance notice and continued protection obligations
- With Your Consent: For any other purpose, only with your explicit prior consent
6. Data Security Measures
- Transmission Encryption: TLS/HTTPS
- Storage Security: Sensitive data such as passwords are encrypted or hashed
- Access Control: Principle of least privilege; employees sign confidentiality agreements
- Regular Security Audits: Periodic security audits and vulnerability scans
In the event of a security incident affecting your rights, we will notify you and relevant regulators within 72 hours of discovery. Please keep your account credentials secure and do not share them with others.
7. Data Retention Period
| Data Type | Retention Period | Action on Expiry |
|---|---|---|
| Account Information | During active period; 2 years after account deletion | Delete or anonymize |
| Transaction Records | As required by law (typically 7 years) | Delete or archive |
| Customer Support Records | 3 years | Secure deletion |
| Security Audit Logs | 12 months | Secure deletion |
| Lyrics Content | Until you delete or 90 days after account deletion | Delete |
8. Your Data Rights
To exercise the following rights, contact us. We will process your request within 30 calendar days.
| Right | Description |
|---|---|
| Right to Know | Understand what data we collect and how we use it |
| Right to Access | Obtain a copy of your personal data |
| Right to Rectification | Correct inaccurate or incomplete information |
| Right to Erasure | Request deletion of data under specific conditions |
| Right to Restrict Processing | Pause data processing under specific circumstances |
| Right to Data Portability | Receive your data in a machine-readable format |
| Right to Object | Object to processing based on legitimate interests or marketing |
| Right to Withdraw Consent | Withdraw consent for processing based on consent |
If you believe we have not handled your data properly, you have the right to file a complaint with your local data protection authority.
9. Marketing Communications and Opt-Out
With your consent, we may send marketing information about our Service via email, SMS, or in-app notifications. You can unsubscribe at any time by clicking the "unsubscribe" link in emails, disabling marketing notifications in Account Settings, or contacting us. Opting out does not affect service-related notifications (billing, security reminders).
10. International Data Transfers
Our servers and partners may be located in regions including Singapore, United States, and China. For cross-border transfers, we protect data through:
- Data Processing Agreements incorporating EU Standard Contractual Clauses (SCC)
- Transfers only to recipients providing equivalent protection levels
- Other protective mechanisms such as adequacy decisions or BCR
11. Children's Privacy
This Service is intended for users who are at least 18 years old. We do not knowingly collect information from minors below this age. If you believe your child has provided us with information, please contact us immediately and we will delete it as soon as possible.
12. Third-Party Links and Services
This Service may contain links to third-party websites or integrate with third-party services. This Policy applies only to information we directly collect. We are not responsible for third-party data practices. We recommend reviewing their policies before use.
13. Policy Changes
For material changes, we will notify you at least 15 days in advance via platform announcement or your registered email, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance of the updated Policy.
14. Contact Us
- Privacy Contact: support@lyricforge.ai
- Customer Support: support@lyricforge.ai
- Website: https://lyricforge.ai
- Service Hours: Monday to Friday, 09:00-18:00 UTC+8
This Privacy Policy is for reference only and does not constitute legal advice. We recommend consulting a qualified legal professional in your target market before official publication.