Privacy
To make a song, Giftwaves has to ask you for something personal: a name, and a story about someone you love. This page is the straight answer to what happens to it — where it goes, who else sees it, how long we keep it, and how to have it wiped.
The short version
- We store what you type, your email, and the song and cover that come out of it.
- Your answers are sent to the AI services that write and sing the song. Payments go to Stripe or PayPal; Giftwaves never sees your card.
- The Facebook pixel is here, because ads are how people find this site. Meta is told when you buy, and gets your email hashed, never in the clear.
- Nothing about you is sold to anyone.
- Email us and we'll delete everything about you and the person your song was for.
1.Who's responsible for it
Giftwaves is a business operating from California, United States. It runs the website giftwaves.fm and it is responsible for the information described on this page.
The contact address for Giftwaves is hello@giftwaves.fm — for questions, corrections, or "please delete all of this".
2.What we collect
- What you type into the song. The recipient's name or nickname, what they are to you, the occasion, the style of music you picked, and the story or note you wrote. Most of this is about somebody else — see section 5.
- Your email address, so the unlocked song can be sent to you and so you can find it again.
- The song itself — the audio, the title, and the cover picture made for you.
- Payment facts, not payment details. If you pay, we're told the amount, that it succeeded, and which song it was for. Your card number never reaches Giftwaves.
- How the site is used. Which steps you reached, which buttons you pressed, rough device and browser information — through PostHog (section 4).
- A little storage in your own browser, holding your half-finished song so a refresh doesn't lose your work.
3.Who it's shared with, and why
Only the services that actually make Giftwaves work. Each one gets the piece it needs and nothing more, and each handles it under its own terms:
- Google (Gemini) — your answers, to write the lyrics and paint the cover.
- Suno, through kie.ai — the lyrics and style, to record the music and vocals.
- Stripe and PayPal — to take a payment, if you make one.
- Resend — to deliver the one email that carries your unlocked song.
- PostHog — usage analytics, described below.
- Meta (Facebook) — advertising measurement, described below. It's the one thing on this list that exists for Giftwaves' benefit rather than yours, so section 4 spells out exactly what it gets.
We don't sell your information, and we'd only hand anything over if the law genuinely required it. Giftwaves does run Facebook ads, which means Meta is told when someone who saw an ad goes on to buy — read on.
4.Analytics, cookies, and session recording
Giftwaves uses PostHog to see where the site helps people and where it trips them up — pages reached, steps finished, that sort of thing. It sets a cookie and uses a little browser storage to recognise the same visit.
PostHog also records the session on the live site: the pages you saw and how you moved and clicked through them, so we can watch back where something broke. Nothing is recorded on previews or test versions of the site. You can block it with any tracker-blocking extension, and you can ask us to delete your recordings along with everything else.
Giftwaves also runs the Meta (Facebook) pixel, because Facebook and Instagram ads are how most people find this site and there's no other way of knowing which ads are worth paying for. The pixel loads only on the live site — never on previews, test versions or demo walks — and it tells Meta when you reach the landing page, start a song, open the checkout, and complete an unlock, along with the amount of that unlock.
It sets two cookies of its own, _fbp and _fbc, which let Meta recognise the same browser and remember which ad you arrived from.
Because browsers increasingly block that pixel, our server also sends Meta a message at the moment a song is unlocked — Meta calls this the Conversions API. That message carries the unlock amount, the song's id, the two cookies above, your IP address and browser, and your email address hashed: scrambled one-way with SHA-256 before it leaves our server, so Meta can check it against an address it already holds but can never read it out of what we sent. Your actual email address is never sent to Meta. Neither is the recipient's name, your story, or the lyrics — none of that is any of Meta's business.
Any tracker-blocking extension blocks the pixel. You can also turn off ad personalisation in your own Facebook and Instagram settings, and Meta describes the controls it offers at facebook.com/help/568137493302217 and your ad preferences.
5.The person the song is for
They never signed up for anything — you told us about them. So: only share what you'd be comfortable telling a friend on their behalf, and if they'd rather not be in our records, tell us and we'll remove them. We treat their name and your story about them exactly the way we treat your own information.
The gift page has a long, unguessable address, but it isn't password-protected: anyone with the link can open and play the song. That's what makes it giftable — just be deliberate about who you send it to.
6.How long we keep it
Honestly, in the state it's in today:
- Audio and cover files for songs nobody unlocked are deleted automatically after 14 days — sooner if storage gets tight, in which case the oldest go first.
- Audio and covers for unlocked songs are kept, including $0 unlocks, so your link keeps working and the song stays downloadable.
- The written part — your answers, the recipient's name, your story and your email — has no automatic deletion date yet. It sits in our records until we delete it. We'd rather tell you that than invent a tidy-sounding policy we're not running.
A proper retention schedule is on the list. In the meantime, one email and it's gone, which is the part that matters to you.
7.Your choices
Write to hello@giftwaves.fm and you can ask us to show you everything we hold about you, correct something that's wrong, or delete the lot — yours and the recipient's. We'll reply within a few days and won't ask you to justify it. Depending on where you live you may have these rights formally, under laws like the GDPR or the CCPA; you have them here regardless.
The only email we send automatically is the one delivering your unlocked song, plus any reply to something you've written to us. We don't run a marketing list, and if that ever changes it'll be something you opt into on purpose.
8.Keeping it safe
Songs and the details behind them live on a server we control, reached over encrypted connections, and payment details never reach it at all. No one can promise perfect security, and we won't pretend otherwise — but the less we hold, the less there is to lose, which is why deleting on request is a standing offer.
9.Children
Giftwaves isn't meant for children under 13 and we don't knowingly collect anything about them. If a child's details reached us, tell us and we'll remove them.
10.Changes
This page will change as Giftwaves grows — especially section 6, once there's a real deletion schedule to describe. Material changes get a new date at the top.
11.Talking to us
Everything above runs through one address: hello@giftwaves.fm. The rest of the deal — the price, the watermark, the refund — is in the terms.