1. Who we are (Data Controller)
YouGotSung, registered under tax ID 43.285.506/0001-05, is the controller of the personal data processed on this platform.
2. Data we collect
We collect only the minimum required to deliver the service:
- Contact data: name, email and/or WhatsApp.
- Story data: information you freely share for the song composition.
- Payment data: processed directly by the payment gateway (we never store card data).
- Browsing data: IP, browser, pages visited (for security and site improvement).
3. Purposes and legal bases
- Contract execution: producing and delivering your song.
- Consent: news and promotions (opt-in, revocable at any time).
- Legal obligation: invoicing and tax record keeping.
- Legitimate interest: fraud prevention and site security.
4. Sharing
We do not sell your data. We share only with operators essential to the service:
- Payment gateway (Stripe) to process your purchase.
- Email and messaging providers to deliver your song.
- Cloud hosting infrastructure.
- Public authorities, when required by law or court order.
5. Retention period
- Purchase and song data: warranty period + 5 years (tax obligation).
- Marketing data: until consent is revoked.
- Access logs: 6 months.
6. Your rights
You may, at any time and free of charge, request:
- confirmation of processing;
- access to your data;
- correction of incomplete or outdated data;
- anonymization, blocking or deletion of unnecessary data;
- portability to another provider;
- deletion of data processed under consent;
- information about with whom we share your data;
- revocation of consent.
To exercise any right, contact us via the Contact page. We respond within 15 days.
7. Security
We adopt technical and administrative measures to protect your data: encryption in transit (HTTPS/TLS), access control, backups and continuous monitoring.
8. Cookies
We use essential cookies (for site operation) and, when authorized, analytics cookies to improve your experience. You can manage them via your browser settings.
9. Minors
Our services are intended for adults (18+). Minors must be assisted by a legal guardian, whose specific consent will be requested.
10. Data Protection Officer (DPO)
Our privacy channel is Contact, which forwards requests to the Data Protection Officer.
11. Supervisory authority
If you believe your rights have not been respected, you may file a complaint with the Brazilian ANPD (www.gov.br/anpd) or with the data protection authority of your country of residence.
12. Changes to this policy
We may update this policy at any time. The current version will always be available on this page.