Privacy Policy

• Your email — to send the song link, delivery confirmation, and (if you opt in) occasional product updates.
• Song inputs — recipient name, relationship, traits, memories. These are sent to our AI providers to generate the lyrics and audio.
• Song outputs — generated lyrics and audio files, stored so you can replay and share them.
• Payment metadata — handled by Stripe. We receive a token and the amount paid; we do NOT receive or store your card details.
• Basic analytics — IP, browser, referrer, campaign tag. Used to fight spam and understand how the product is used.

We share the minimum necessary data with the services that power RoastSong:

• Anthropic — to generate lyrics from your inputs.
• ElevenLabs — to generate the audio from the lyrics.
• Supabase — our database and file storage host.
• Stripe — to process payments.
• Resend — to send transactional email.
• Vercel — to host the site and serve traffic.

We do not sell your data. We do not run ads on RoastSong.

We use a small number of first-party cookies for session state, campaign attribution (the ?campaign= tag), and affiliate attribution (the rs_aff cookie set by /a/[slug] links). No third-party advertising cookies.

Songs and inputs are retained while your account exists so you can replay and share them. You can request deletion at any time by emailing us. Stripe payment records are retained according to Stripe’s own policy and applicable tax law.

We share data only with the service providers that run the product: Stripe (payments), Supabase (database and file storage), Vercel (hosting), PostHog (product analytics), Resend (transactional email), and the AI providers that generate song audio, lyrics, and video on our behalf. Each processes data under its own data processing agreement.

For visitors in the EU, UK, and EEA, our analytics run in cookieless mode: nothing is stored on your device for analytics purposes and session recording is disabled, which is why we don’t show a cookie banner. Strictly necessary cookies (for example, keeping you signed in to a purchase) are still used.

The descriptions you type about your roast subject are personal data about a third party. You’re responsible for having a reasonable basis to share them (it’s a roast between people who know each other — keep it that way). Songs and the inputs behind them are deleted on request: the subject of a song can email privacy@roastsong.fm with the song link and we’ll take it down and delete the underlying inputs.

Depending on where you live (EU/UK GDPR, California CCPA, etc.) you may have rights to access, correct, or delete the personal data we hold about you. Email privacy@roastsong.fm and we’ll respond within 30 days.

RoastSong is for users 13 and older, in line with TikTok, Instagram, and Snapchat’s minimum-age policies. We don’t knowingly collect data from anyone under 13 (COPPA compliance). If a parent or guardian believes their under-13 child has signed up, email us and we’ll delete the relevant data within 14 days. Users 13–17 should have a parent or guardian review these terms before using the service.

Material changes to this policy will be reflected by updating the “Last updated” date. Continued use after a change means you accept the updated policy.

Privacy questions: privacy@roastsong.fm