Last updated: 22 October 2026. This policy explains what data is collected on the site, how it is used and what your rights are. Database owner and controller: Yaniv Cohen (MYSONG), support@mysong.biz. This English text is a courtesy translation; the Hebrew version is binding.
Data you provide: First name, email address, phone (if provided), the type of relationship with the recipient, the recipient’s name, the occasion, the musical style and tone, and a personal story or memory you chose to share. In a group song: also the name and email address of each participant and the memory they added. Data about a third party: Details about the person the song is dedicated to, as provided by you. Payment details are not stored with us and are processed directly by the payment company.
Comments on social networks: When you comment on one of our posts or ads on Facebook or Instagram, we keep your username, your account identifier on the platform, the text of the comment and its time — as they are publicly displayed on the platform.
Private messages: When you send us a private message on Facebook Messenger or Instagram, we keep your account identifier on the platform, the content of the messages and their time. In private messages we do not ask for payment details, sensitive information or the personal story for the song — these are provided in the questionnaire on the site.
WhatsApp and email inquiries: when you message us on WhatsApp or email support@mysong.biz, we keep your phone number or email address, the content and time of your message, and our reply.
Photos and files: photos and files that you upload on your order page or send us in a message or by email, so that we can include them in the clip or in the production of your order, are kept with the order and used only for it — not for publication, marketing or passing on to others, other than our storage and email providers and quality-checking the clip with an artificial intelligence tool. By sending them you declare that you have the right to use them and that the people in them know about it (and for a minor, with the parent's consent).
For writing, composing and producing the ordered song; for contacting you about the order, payment and delivery; for sending up to three email reminders to complete an order you started and did not finish (you can stop them at any time, using the link in each reminder); for answering service enquiries; and for meeting accounting and legal obligations. The data will not be used for marketing without separate, explicit consent.
We use comments posted on our pages in order to reply to them. The reply to a comment may be written and published automatically with the help of an artificial intelligence tool; comments that need personal attention are passed to a person for review. Before processing, phone numbers and email addresses are removed from the comment. Messages you send us on the order page may also be answered automatically with the help of an artificial intelligence tool, in a reply marked as such and with a way to reach a person. Messages about cancellation, refunds, complaints or discounts are always handled by a person. Here too, phone numbers and email addresses are removed from the message before processing. Private messages you send us on Messenger or Instagram may also be answered automatically with the help of an artificial intelligence tool, in a reply marked as such; you can write "agent" at any time and the conversation will be passed to a person. Messages about cancellation, refunds, complaints, discounts or legal matters, and messages from someone with an open order, are always handled by a person. Before processing, phone numbers and email addresses are removed from the message, and only the text of the message is passed to the artificial intelligence provider. We use messages only to reply to your enquiry, and not for marketing mailings. Inquiries you send us on WhatsApp or by email may also be answered automatically with the help of an artificial intelligence tool, in a reply marked as such; you can ask for a human representative at any time (on WhatsApp, write "agent"). Inquiries about cancellation, refund, complaint, discount or a legal matter are always handled by a person. Before processing, phone numbers and email addresses are removed from the inquiry, and only the text of the inquiry is passed to the AI provider. If a WhatsApp inquiry comes from the number given in the order, we will use it to identify the order and reply to you about it: status and target date, links to pages that have already been delivered or sent to you (the order page, the gift page, the clip), the status of your correction rounds, and opening a correction request. The automatic WhatsApp reply is provided on 053-283-4291. We use inquiries only to reply to you, and not for marketing mailings.
The data is passed to infrastructure and processing providers solely to deliver the service: hosting and database (Supabase), site hosting (Vercel), email delivery (Resend), the support mailbox (Google), payment processing, AI-based music production tools, Meta (Facebook, Instagram and WhatsApp) as the platform on which the comment was posted or the message was sent, and an artificial intelligence provider for drafting replies to comments and to service requests. Some providers store or process data outside Israel, including in the European Union and the United States. Any further disclosure is made only at the demand of a competent authority or a court order.
The data is stored in a secure database with restricted access permissions and encryption in transit. Retention periods: Order details, invoices and payment records — 7 years, as required by tax record-keeping law; The personal story you provided and the song file — two years from delivery, so we can restore the song for you if you lose it; Website form inquiries and leads that did not become an order — 30 days; Comments on social networks and our replies to them — 12 months; Private messages on Messenger and Instagram and our replies to them — 90 days from the last message in the conversation (a conversation that became an order — the details relating to the order are kept as part of it, according to the periods above); WhatsApp and email inquiries and the replies to them — 12 months from the last inquiry (an inquiry that became an order — the order-related details are kept as part of the order, according to the periods above); Photos and files you provided for producing the clip — 2 years from delivery, like the song; An incomplete questionnaire draft — 30 days from its creation, see section 6. At the end of the period the data is deleted or anonymised. We cannot guarantee absolute immunity from intrusion, but we apply accepted measures to protect the data.
Data and payment security. The whole site is encrypted (HTTPS). Payment takes place on the secure payment page of a licensed, PCI-DSS compliant payment provider; card details are entered directly with the provider, never pass through us and are never stored by us. Access to data in our system is limited to authorised staff only, through personal accounts with login-attempt limits and activity logging, and the team members who produce your song do not see your contact details. In the event of a security incident we will act as the law requires, including notifying you and the Privacy Protection Authority where required.
The right to access the data held about you; the right to request correction of inaccurate data; and the right to request deletion, subject to statutory retention duties (in particular the 7-year record-keeping duty). A person the song was dedicated to may also exercise these rights regarding data provided about them. Requests should be sent to support@mysong.biz, and we will reply within 30 days.
Deleting a comment on the platform does not immediately delete it from our records; you can ask us to delete it at support@mysong.biz, and we will delete it within 30 days.
Deleting a private conversation on the platform does not immediately delete it from our records; you can ask us to delete it in a private message to us or at support@mysong.biz, and we will delete it within 30 days.
You can ask to delete a WhatsApp or email inquiry at support@mysong.biz, and we will delete it within 30 days.
You can ask to delete photos and files you sent at support@mysong.biz, and we will delete them within 30 days (if the clip has already been delivered, the clip itself stays with you).
We keep in your browser, in local storage (localStorage), a draft of the questionnaire you filled in — so you don’t lose what you wrote if you close the page. Until you have provided an email address and accepted the Terms of Use and the Privacy Policy, the draft is stored on your device only. From that point it is also stored with us, so that you can come back and complete the order and so that we can remind you to do so (unless you asked us not to). The copy in your browser is deleted when the order is sent, after 14 days, or when you clear your browser data; the copy we hold is deleted or anonymised after 30 days if the order was not completed, and photos or files you uploaded are permanently deleted within a further 7 days.
To measure the site and improve our advertising we use Google Analytics (_ga cookies, up to two years) to count visits and see at which step visitors leave, and the Meta pixel (_fbp and _fbc cookies, up to 90 days) to know which Facebook and Instagram ads led to orders. We also count visits with our own tools and Vercel’s, without cookies; this browsing data is kept for up to 180 days. To know which advertising brought orders, when payment for an order is received we attach to it where you came from on that visit — the campaign or ad name, the name of the referring website (not its full address) and the landing page — and this is kept together with the order. If you arrived by clicking an ad (Google, Meta or TikTok), the click ID is kept in your browser for up to 90 days and attached to the order. The traffic source attached to an order does not include your IP address and is not passed to any third party. We also measure our TikTok ads, with no TikTok script or cookies on the site: the ad click ID is kept in your browser for up to 90 days, and our server reports a visit or the start of an order to TikTok together with your IP address and browser type. From your browser, only general usage data goes to Meta and TikTok — which page, which step, the order amount. Google receives similar usage data and, for visitors whose tools are active (in Israel: those who did not choose “Essential only”; in Europe: those who chose “Accept all”), also what the next paragraph describes about conversion measurement and advertising. When a payment is received, our server reports the purchase to Meta and TikTok (amount, currency and order number; Meta also receives the IP address, browser type and the _fbp/_fbc cookies captured when the order was placed) and adds your email address and phone number only in hashed form (SHA-256, one-way encryption) — so they can match the purchase to an ad without receiving the details themselves. Your name, story and song lyrics are never sent to them. The link to your personal page is masked before anything is sent.
Unless you choose “Essential only” (in Europe: if you choose “Accept all”), we also use Google Analytics to measure conversions and to show our ads on Google to people who visited the site (remarketing audiences). For this, Google may link the visit to your advertising ID or to your Google account, if you turned on ads personalization there; Google Ads cookies are stored (such as _gcl_au, up to 90 days). If you choose “Essential only” (in Europe: until you accept), this tag does not load. You can control ads personalization at adssettings.google.com. Names, stories and lyrics are never sent to Google, and your private order link is replaced by a generic address in measurement.
The choice is yours: when you enter the site a notice offers “Essential only”, and you can change your choice at any time in the cookie settings. Choosing “Essential only” stops Google Analytics, the Meta pixel and TikTok measurement on your device, the storing of the ad click ID in your browser and the linking of your visit to your order (only the campaign details in the link you came through are kept), deletes their cookies, and also stops the purchase report from our server. For visitors from Europe these tools load only after explicit consent.
The service is intended for people aged 18 and over. An order by a minor requires a guardian’s approval.
support@mysong.biz
We will update this policy from time to time. The date of the last update appears at the top of the document.