Your story stays yours.

Story to Music writes and records personalised songs. This page covers everything that happens at storytomusic.com — the website you are reading, the studio where you write a brief, and the library where your finished songs live.

We decide what happens to the information described here, which in law makes us the data controller for it. If you want to talk to us about any of it, write to support@storytomusic.com.

Three things come from you, and one comes from your browser.

Your account

Your name and email address, and a password or a Google sign-in. Our sign-in partner Clerk holds this. We never see your password.

Your brief

Everything you type into the studio: who the song is for, the occasion, the memories, the inside jokes, the style and mood you pick. This is the raw material for the song.

Your purchase

What you bought, when, and how much you paid. Card numbers go straight to Stripe and never touch our servers.

Your visit

Your browser tells us your device type, browser version, rough location from your IP address, and which pages you opened. Ordinary web-server information.

We only keep information when there is a reason for it. Here is every reason, and the legal ground underneath it.

We are a small team, so parts of the job are done by specialists. Each one only gets the piece it needs, and each one is bound by a contract to use it for nothing else.

• Clerk — sign-in, passwords and account security.
• Stripe — card payments, receipts and fraud checks.
• Neon — the database that holds your account and song records.
• Cloudinary — storage for the audio files and cover artwork.
• OpenAI — writes the lyrics from your brief.
• Replicate — records and mixes the song from those lyrics.
• Google Analytics — counts visits, and only if you accept analytics cookies.
• Our email provider — carries support replies and receipts to you.

Some of these companies are based in the United States, so your information travels there. That transfer is covered by standard contractual clauses, the safeguard European law provides for exactly this.

Beyond that list, we share information in one situation only: when a court, a regulator or the law requires it. Not for money. Not for marketing.

Your brief is the most personal thing you give us, so it gets its own section.

It is sent to the writing and recording services listed above for one purpose: making your song. Under the business terms we hold with them, your text is not used to train their public models. When the song is done, the brief stays attached to it in your library so you can see what you asked for.

Your song is private by default. It is not listed anywhere public, not shown to other customers, and not used in our marketing unless you tell us in writing that we may.

Nothing is kept forever. Here are the clocks.

Account details

While your account is open. Deleted within 30 days of you closing it.

Songs, lyrics and artwork

While your account is open — that is your library. Deleted with the account.

Payment records

Seven years. Tax law requires it, and we cannot shorten it.

Support emails

24 months, so we can see the history if you write again.

Analytics

14 months, then it expires on its own.

Server logs

30 days, for security and debugging.

Download anything you want to keep before you close your account. Once songs are deleted we cannot bring them back.

Wherever you live, we apply the same rights to everybody. You do not need to explain why you want any of them.

• See it. Ask for a copy of everything we hold about you.
• Fix it. Have anything wrong corrected.
• Delete it. Have your account and songs erased.
• Take it. Get your information in a file you can move elsewhere.
• Pause it. Ask us to hold processing while a question is settled.
• Object to it. Tell us to stop where we rely on legitimate interest.
• Withdraw consent. Analytics cookies or product emails — take it back anytime.
• Complain. Take it to your national data protection authority.

Write to support@storytomusic.com and we will act within 30 days. It is free. If a request is unusually large we will say so before we start, never after.

Story to Music is sold to adults. You must be 18 or over to open an account and buy credits. We do not knowingly collect anything directly from a child.

Songs for children are a different matter, and they are welcome — a birthday song for a six-year-old is one of the kindest things this site makes. In that case the adult writes the brief, and the child’s details are used for one thing only: the song.

If you are a parent or guardian and believe a child gave us information directly, email us and we will delete it.

We use a small set of cookies: the ones that keep you signed in, the ones that keep checkout working, and two that count visits. We set no advertising cookies and we build no advertising audiences.

The two counting ones are the only ones we ask about. A banner asks on your first visit, and nothing analytics-related loads until you accept — decline and the script is never fetched. You can change that answer at any time from the cookie policy.

The full list — every cookie name, what it does and how long it lasts — is on the cookie policy.

• Everything travels over an encrypted connection. No exceptions.
• Stored files and database records are encrypted where they sit.
• Card details never reach our servers — Stripe handles them end to end.
• Staff access is limited to the people who need it, and it is logged.
• Our suppliers are reviewed before we send them anything.

No system is perfect, and anyone who tells you otherwise is selling something. If a breach ever put your information at risk, we would tell the regulator within 72 hours and tell you directly without delay.

We will update this page when the way we work changes. Small edits — a clearer sentence, a renamed supplier — go up with a new date at the top.

Anything that materially affects you gets an email and a notice on the site 30 days before it takes effect. If you do not like the change, you can close your account in those 30 days and nothing new applies to you.

This version is dated 20 August 2026.