Privacy Policy

SongServant Studio (“SongServant”, “we”, “us”) is run by Servant Hood, 2579 Harmony Road, Corbyville, Ontario, Canada. This policy covers songservant.com, the SongServant web app, and the SongServant desktop app for Mac and Windows.

The person responsible for personal information at SongServant is Gabe Boisvert, Owner. You can reach them at gabeboisvert@gmail.com.

• We don't sell or rent your personal information.
• Advertising and analytics cookies are only used if you accept them, and you can change your mind at any time.
• Payments are handled by Stripe. We never see your card number.
• GIF and video files you add to a project stay on your device. They aren't uploaded to us.

• Your account. Your email address and password. Your password is stored hashed by our sign-in provider, Supabase, so nobody can read it. Supabase's sign-in logs record the IP address you sign in from.
• Your projects. Project and album names, lyric and title text, images and SVGs you place in a project (they're stored inside the project), effect and motion settings, custom effects you make (private to you), effect collections and brand kits.
• Support messages. If you use the contact form, your name, email address and message are emailed to our support inbox through Resend.
• Payments. When you upgrade, Stripe takes the payment. We keep your Stripe customer ID, plan, subscription status and the date your current period ends. We never receive your card number.
• What keeps the service working. How many free exports you've used.
• A first-export note. While our Google tag is on, the date of your first export is noted on your account. Its only use is advertising measurement: it stops a “first export” being counted twice, for example when you export again on another device. We keep it whether or not you accept cookies, so accepting later can't count an old export as new, and it's never sent to Google.

• GIF and video files live in your browser's storage (IndexedDB) or in the desktop app's data folder, and are never uploaded. With your project we keep only a small still image of the file (at most 480 pixels on its longest side), its name, type and size, and a fingerprint so the project can find the file again.
• A local copy of your projects, so the app opens quickly.
• Your cookie choice and display preferences.

Signing out doesn't erase these. On a shared or church computer, clear this site's data in your browser when you're done. Uninstalling the Windows desktop app keeps its data folder.

Always on — needed to run the site

Only if you accept

If you accept, Google also uses its own cookies on its own domains (such as doubleclick.net and google.com) to measure our ads and for remarketing. We can't read or delete those; use the controls under Advertising and measurement.

Google's tag doesn't load until you accept. Before you choose, the ad click ID and campaign tags from your link are kept in memory on that page only; if you decline, they're discarded. If you accept after moving to another page, we put them back in that page's address so Google's tag can read them.

You can change your choice at any time with Cookie settings in the site footer and in Settings. Declining after accepting deletes the cookies listed above from our site; Google's own cookies are managed in its settings.

The desktop app has no analytics or advertising tags.

• If you accept, Google Ads measures when a visit from one of our ads leads to a sign-up, a submitted sign-up form, a first export or a purchase (with the purchase amount), and Google may show you SongServant ads on other sites later (remarketing).
• If you've accepted, the ad click ID and campaign tags travel in your email confirmation link, so the sign-up is credited even if you confirm on another device. They're attached to your Stripe checkout, with the page you first landed on and when you arrived.
• We don't send your email address or name to Google with any of these measurements.

To limit personalised ads, use Google My Ad Center.

• To run SongServant: your account, sign-in, saving and syncing your projects, and exports.
• To apply your plan's export limits and bill you.
• To answer support requests.
• To keep the service secure and prevent abuse.
• With your consent, to measure visits and our advertising. The first-export note on your account is kept either way, only so a conversion is never counted twice.
• To meet our legal obligations.

• Supabase — accounts, sign-in and the project database, hosted in the United States (Supabase, AWS us-east-1).
• Stripe — payments and billing.
• Resend — contact-form email. Account emails such as sign-up confirmations are sent by Supabase, our sign-in provider, which may deliver them through Resend.
• Netlify — hosts the website and its server functions; its request logs include IP addresses.
• Google — Analytics and Ads (only if you accept). Our support inbox is also hosted by Google.
• GitHub — hosts the desktop app downloads and its update feed. The desktop app checks for updates when it starts and every 4 hours, which shows GitHub your IP address and app version.

These providers may store and process information in the United States and other countries outside Canada, where it may be accessible to courts and authorities under local law.

• Your account and projects: while your account is open.
• Projects you delete go to Trash for 30 days so you can restore them. After that, a project is permanently deleted the next time you open your dashboard; until then it stays in Trash, or until your account is deleted. You can also delete it from Trash yourself at any time.
• When we delete your account at your request, your projects, albums, custom effects, collections and subscription record are deleted with it.
• Stripe keeps payment records for as long as the law requires.
• Backups: deleted information can stay for a limited time in the routine backups our database provider, Supabase, keeps on its standard schedule, until those backups are replaced.
• The ss_attr cookie: 90 days. Your cookie choice: until you change it.

You can ask to see, correct or delete the personal information we hold about you by emailing gabeboisvert@gmail.com. There's no in-app account deletion yet, so email us and we'll do it. We'll answer within the time the law requires (generally 30 days).

You can withdraw your cookie consent at any time with Cookie settings.

We follow Canada's federal privacy law (PIPEDA) and Quebec's Law 25. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

Connections to SongServant are encrypted (TLS). Our database provider encrypts data at rest, row-level security lets each account read only its own data, and passwords are stored hashed. No system is perfectly secure; if you think something's wrong, tell us at gabeboisvert@gmail.com.

SongServant isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has given us personal information, contact us and we'll delete it.

Custom effects you make are private to your account. Only SongServant administrators can publish effects for everyone, and our admin-only review tool records which administrator acted on an effect.

If we change this policy, we'll update the date at the top, and tell you in the app or by email before a significant change takes effect. Questions: gabeboisvert@gmail.com, or write to Servant Hood, 2579 Harmony Road, Corbyville, Ontario, Canada.