Songumi
Privacy policy
1. Who is responsible
The controller of your personal data is VYBE NEGOCIOS DIGITAIS LTDA (Songumi), CNPJ 31.909.645/0001-75, R. Antonio Alves de Faria, 51, Vila Bras Cubas, Mogi das Cruzes – SP, CEP 08740-265, Brazil. For any privacy question or request, write to [email protected].
This policy follows the EU and UK General Data Protection Regulation (GDPR), the Swiss data protection act and Brazil’s data protection law (LGPD).
2. What we collect
- The story you tell us: who the song is for, their name, the occasion, the qualities and memories you describe, the music style, the voice and the language. Also the lyrics and songs we create from it, and, for another song or a gift page, the same kind of details and the message you write.
- Your anime choices: for the anime music video, the people you add, their names and roles, how each one should be drawn (kind, age, skin tone, hair, eyes, glasses, beard, outfit, a detail), your consent and when you gave it, and the drawings we make from them.
- Your contact details: your email address when you ask to be told that the preview is ready or when you buy; your name and, on some storefronts, your phone number at checkout.
- Payment details: the payment provider tells us whether the payment worked, the amount, the currency and the billing country, region, city and postal code entered in the payment form. Where your card is saved for one-click purchases, we also keep Stripe’s reference, the card brand and the last four digits. We never receive the full card number.
- Technical details: your IP address, your browser’s user agent, a random browser identifier, the pages you visit, where your visit came from (including campaign parameters and Meta click identifiers) and events such as starting a preview, opening the payment form and paying.
3. Information about other people
Your story will probably include details about someone else. By sending them, you confirm that you may share them. Please leave out sensitive details the song does not need (health, religion, sex life, political opinions, ethnic origin, details about children). If you include them anyway, we use them only to make the song you asked for. For the anime music video you choose how each person looks, for example skin tone, hair and age. These choices may reveal ethnic origin. We use them only to draw the characters, with your explicit consent, and delete them as explained in How long we keep it.
4. Why we use it and on what basis
- To create, deliver and support your song, its extras and its music video, and to take payment: performing our contract with you (GDPR art. 6(1)(b); LGPD art. 7, V).
- For the anime choices, which may reveal ethnic origin and may concern children: your explicit consent (GDPR art. 9(2)(a); LGPD art. 11, I). You can withdraw it at any time by deleting your characters on your order page or by email; this does not affect a video already delivered.
- To keep the service secure and prevent fraud and abuse: our legitimate interest (GDPR art. 6(1)(f); LGPD art. 7, IX).
- To measure how our pages and our advertising perform, including the Meta Pixel and Conversions API: our legitimate interest in measuring our ads (GDPR art. 6(1)(f); LGPD art. 7, IX). You can object at any time.
- Promotional emails: only if you ticked a box to receive them (GDPR art. 6(1)(a); LGPD art. 7, I). You can unsubscribe from any of them.
- Accounting, tax and legal duties: complying with the law (GDPR art. 6(1)(c); LGPD art. 7, II).
5. How your song and video are made
Your lyrics are written by AI models (OpenAI, with Anthropic as a backup) from the details you send. The music is produced by KIE. For the music video, our own server writes a scene plan from the lyrics with the name of the person replaced by a placeholder. For the karaoke music video, Higgsfield creates the images from scene descriptions that contain no names and no people. For the anime music video, KIE draws the characters and scenes from descriptions of appearance without names (never photos), and Higgsfield animates some of those drawings, which may show the characters.
Under their business terms, OpenAI and Anthropic do not use the data we send them to train their models. KIE’s terms allow it to use what it receives to operate and improve its service; for the anime music video we send it descriptions of appearance without names, never photos. We do not make decisions about you that have legal or similarly significant effects by automated means.
7. Who we share data with
We share only what each provider needs to do its job for us:
- Stripe: payments, fraud checks and saved cards.
- Hotmart: payments on the storefronts that pay through Hotmart.
- PayPal: payments, where it is offered.
- OpenAI and Anthropic: writing the lyrics and the scene plan of the music video, finding the people in your story and checking the drawings of the anime music video (they receive the details of your story and, for the anime music video, the drawings).
- KIE: producing the music (it receives the lyrics, style and voice) and drawing the characters and scenes of the anime music video (it receives descriptions of appearance without names, and keeps the files for up to 14 days).
- Higgsfield: creating and animating the scenes of the music video (from descriptions without names or people; for the anime music video, from drawings that may show the characters).
- Brevo: sending emails (it receives your email address, name and order links).
- Meta: measuring our advertising (Pixel and Conversions API, as described above).
- Supabase: database, file storage and server functions.
- Cloudflare: hosting and delivering the website.
- Render: hosting the server that produces the music videos (it receives the song, lyrics and names needed for the karaoke and, for the anime music video, the approved characters).
- Slack: internal alerts about orders that need attention (order numbers; for a payment dispute, also the buyer’s name and email).
We may also disclose data when the law or an authority requires it, or to establish, exercise or defend legal claims. We do not sell your personal data.
8. International transfers
We are established in Brazil, and most of our providers process data in the United States or other countries outside the European Economic Area, the United Kingdom and Switzerland. We rely on adequacy decisions (such as the EU–US Data Privacy Framework) or on standard contractual clauses for these transfers.
9. How long we keep it
We keep your order, your story and your song for as long as you may need to listen to it, download it again or ask for support. Previews that were never paid are kept so you can come back to them, until they are no longer needed. Anime previews that are not bought are deleted 7 days after your last change. For a bought anime music video, we delete your appearance choices when the video is delivered and keep the character drawings for 30 days, to fix a defect or make a paid correction, then delete them; KIE deletes its copies within 14 days. Payment, invoice and refund records are kept for as long as tax and accounting law requires (in Brazil, generally five years). You can ask us to delete your data earlier, unless we must keep it by law.
10. Security
We use access controls, encryption in transit and private links to protect your data. Your order page opens with a private link: anyone with it can see the order, so keep it safe. No system is free of incidents, but we work to prevent, detect and, where the law requires it, report them.
11. Your rights
You can ask us to confirm whether we hold data about you, to give you access to it or a copy in a portable format, to correct it, to delete it, to restrict or object to its use, to tell you who we shared it with, and to withdraw any consent at any time. Write to [email protected] from the email address you used, or include your order number, so we can identify you. We answer within one month at the latest.
You can also complain to a data protection authority: in the EU, the authority of the country where you live; in the United Kingdom, the ICO; in Switzerland, the FDPIC; in Brazil, the ANPD.
12. Age
Songumi is for people aged 18 or over. If a song is about a child, it must be ordered by a parent, a legal guardian or someone they authorise, with as few details as possible. For the anime music video, only a parent or legal guardian, or someone with their permission, may choose how a child is drawn.
13. Changes to this policy
We may update this policy when the product, our providers or the law change. The version published on this page is the one in force.
14. Contact
VYBE NEGOCIOS DIGITAIS LTDA (Songumi), CNPJ 31.909.645/0001-75, R. Antonio Alves de Faria, 51, Vila Bras Cubas, Mogi das Cruzes – SP, CEP 08740-265, Brazil. Email: [email protected].
Last updated: November 5, 2026
