Privacy policy

Privacy Policy

Last Updated: April 28, 2026

Heartune ("we", "us", "our") operates this website and related services ("Services").

This Privacy Policy explains how we collect, use, and share your information when you visit, make a purchase, share a Heartune gift, or interact with our website, marketing, and social channels.

We are powered by Shopify Inc., which provides our e-commerce platform and processes data on our behalf.

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Personal Information We Collect

We collect the following categories of personal information:

Contact details: name, email, billing address, phone number.

Payment information: processed securely by Shopify Payments, PayPal, or other third-party processors; we do not store full card details.

Order and creative details: the products you purchase, your package preferences, recipient names, occasions, personal stories, memories, and any other content you submit so we can craft your custom song.

Device and usage data: IP address, browser type, operating system, referring URLs, and how you interact with our website.

Marketing & analytics data: cookies and pixels used by Google Ads, Meta (Facebook) Ads, and Shopify Analytics to measure performance and show personalized ads.

Gift recipient data: if you share a Heartune gift link, the recipient's IP address and browser may be logged by our servers when they open the link, so we can deliver the song.

2. How We Use Your Information

We use your information to:

  • Process and fulfill your orders, including writing your custom lyrics and producing your song.
  • Communicate with you about your purchase or support request.
  • Improve our website and personalize your experience.
  • Send you marketing updates or special offers (only if you consent).
  • Show you ads on Google, Facebook, Instagram, or other platforms based on your activity on our site.
  • Detect and prevent fraud or unauthorized activity.
  • Comply with legal obligations (for example, tax or accounting).

3. AI Processing

To create your custom song, the personal details and stories you provide at checkout are processed by AI services we use as part of our creative pipeline, including:

  • Anthropic (Claude) — used to draft custom lyrics from your story.
  • Suno — used to generate the musical composition based on your approved lyrics.

These providers process your input under their own data agreements and do not use your content to train their public models. We do not share your name, email, or payment information with these AI providers — only the creative details needed to generate your song (story, occasion, names you've chosen to include in the lyrics).

You can read more here:

4. Cookies and Tracking Technologies

We use cookies, tags, and pixels to operate our store and analyze performance.

  • Essential cookies keep your shopping cart and checkout working.
  • Analytics cookies (Shopify, Google Analytics) help us understand how visitors use our store.
  • Advertising cookies (Google Ads, Facebook Pixel) help show you relevant ads and measure conversions.

You can manage or disable cookies in your browser, or set preferences using our cookie banner when you first visit the site.

To learn more about targeted advertising and how to opt-out:

5. How We Share Information

We may share your personal information with:

  • Shopify, our hosting and e-commerce provider.
  • Supabase, our database and file-storage provider, where your order details and finished song files are stored.
  • AI service providers (Anthropic, Suno) for the creative production of your song, as described in Section 3.
  • Email and webhook automation providers used to deliver your song and send order updates.
  • Service providers who assist with payments, analytics, or marketing.
  • Advertising partners (Google, Meta) to deliver relevant ads, in compliance with applicable laws.
  • Government authorities if required by law or to prevent fraud.

We do not sell or share your personal information for money or for cross-context behavioral advertising in violation of applicable law.

SMS Disclosure: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties under any circumstances.

6. Data Retention

We retain your data as long as needed to provide the Services, comply with legal obligations, and resolve disputes.

Your finished song and gift link remain accessible to you indefinitely so you can return to them whenever you wish.

You can request deletion at any time by contacting us.

7. Your Rights

Depending on your location (EU, UK, Canada, California, etc.), you may have rights to:

  • Access and receive a copy of your personal data.
  • Request correction or deletion.
  • Withdraw consent to marketing at any time.
  • Opt-out of targeted advertising.
  • Opt-out of the sale or sharing of personal information (where applicable).

To exercise these rights, email us at hello@heartune.love.

8. Security

We use reasonable technical and organizational measures to protect your data, including encrypted database storage and tokenized access to your delivery and gift pages.

However, no system is 100% secure, and you should avoid sending sensitive information via unencrypted email.

9. International Data Transfers

Your data may be transferred and processed outside your country, including in Canada and the United States.

We rely on lawful transfer mechanisms such as Standard Contractual Clauses when required by the EU or UK.

10. Children's Privacy

Our Services are not directed to children. We do not knowingly collect personal data from children under the age of 13 (or 16 in regions where that is the local minimum, including the EU and UK).

If you believe a child has submitted personal data, please contact us and we will delete it.

11. Updates

We may update this Privacy Policy to reflect new practices or legal requirements.

Changes will be posted here with a new "Last Updated" date.

12. Contact

For questions about this Privacy Policy or your data:

Heartune hello@heartune.love 9981 Whalley Boulevard, Unit 3002 Surrey, BC V3T 0G6, Canada

For EU data subjects, Heartune is the data controller responsible for processing your information.