Updated Oct 17, 2026
Privacy policy
Service provider and data controller
INBOLD LTD
Postal address: 7, Bell Yard, London, WC2A 2JR, United Kingdom
1. Data and purposes
The service uses your email, account or guest-session ID, quiz answers, lyrics and music settings, audio files, orders and payment statuses. These support result creation, sign-in, paid access and customer support. We do not request passports, card details, exact birth dates or the song recipient's address. If you choose Yandex or VK sign-in, we store the provider name and its user identifier linked to your confirmed email. We do not store provider tokens or passwords for external accounts.
Technical data includes IP addresses used for security checks, browser information, request times, quiz events and abuse signals. It supports rate limits, CAPTCHA checks, troubleshooting and funnel measurement. Song access is limited by authentication or a guest-session link; keep that link private unless you choose to share it.
2. Processing grounds
Account and order data is used to provide the service and verify payments. Meta advertising analytics starts automatically on the international website. Service emails do not subscribe you to marketing.
3. Providers and data transfers
The music AI provider receives the approved lyrics and music settings. UniSender Go receives the recipient address and service email. Stripe processes payments. Security checks use ALTCHA. Meta receives website actions, purchase amounts and currencies, advertising identifiers, IP addresses and browser information; names, email addresses, stories and lyrics are not included in advertising events.
The international version is hosted on a separate overseas server. Data needed for payment and generation is also processed by connected external providers.
4. Retention and deletion
Unpaid audio files are retained for 30 days; paid files for at least 365 days. File retention and generation-credit validity are separate. Download your finished recordings. Deleting a project in your account hides it; send personal-data deletion requests separately to support.
Audio files follow the retention period of your access offer. Funnel events and service-mail delivery history are purged after a technical retention period of 90 days. Account and order data is retained for contract performance, support and mandatory records; legally required records may remain after other data is deleted. On request, the controller will explain the applicable period and basis for your data.
5. Your rights
You may request processing details, a copy, correction, restriction or deletion of data, withdraw consent, and complain to a supervisory authority. Account data can be exported from your dashboard. Send other requests from your account email to support; ownership verification may be needed to prevent unauthorized requests. Withdrawal does not remove lawful grounds for mandatory retention or an existing contract.
Meta advertising analytics
This website uses Meta Pixel and Conversions API to measure advertising. They start automatically. Website actions, purchase amounts and currencies, advertising identifiers, IP addresses and browser information are shared with Meta. Names, email addresses, stories and lyrics are not shared.
Limilu retains advertising events for up to 30 days and visitor attribution data for up to 90 days after its last update. Events already sent are processed by Meta under its own policies. Necessary payment and security records are retained separately.