← nalunastudio.com

Privacy Policy

Last updated: 2 September 2026

Naluna Studio (data controller)
5 Brayford Square, London, E1 0SG, United Kingdom
Contact: contact@nalunastudio.com

1. What we collect

Contact details: your name, email address, and phone number if you provide one.
Order content: the recipient's name and relationship to you, and the personal story or details you write for your song.
Photos and videos you upload, only if you order the "Gift Video" package.
Payment details: collected directly by Stripe, our payment processor — we never receive or store your card number.
Basic technical data: order status and timestamps, and your IP address, used only for security and to prevent abuse (e.g. rate-limiting) — never for advertising or tracking.

We do not use advertising or analytics cookies, and we do not run any tracking scripts on this site.

2. Why we process your data

To create and deliver your personalised song or video (necessary to perform our contract with you).
To process your payment and prevent fraud (necessary to perform our contract, and to comply with our legal obligations).
To respond to your support, refund, or data requests (our legitimate interest in running the service, and/or our legal obligations).

3. Who receives your data

Recipient	What they receive	Why
Stripe	Billing details, payment information	Payment processing
Our AI music generation provider	The text of your story and the names/details you provide	To generate your song's lyrics and music. Your photos and videos are never sent to this provider.
Resend	Your email address, order confirmation content	Sending your order confirmation and access link
Cloudflare (R2 storage)	Your uploaded photos/videos and finished song/video	Secure file storage
Railway (hosting & database)	All of the above, while processing your order	Running the website and database

4. International transfers

Our application server and database are hosted by Railway in the United States. If you are located in the UK or the EU, this means your personal data is transferred outside your country when you use our service. Where required, such transfers rely on the safeguards provided by our hosting and processing providers' data processing agreements (including, where applicable, Standard Contractual Clauses). Contact us if you would like more detail about a specific provider's safeguards.

5. How long we keep your data

We currently keep your order details, story, and any uploaded media for as long as your order record exists, so that you can always return and access your song or video again. We do not currently apply an automatic deletion schedule.

You can ask us to delete your personal data at any time by contacting contact@nalunastudio.com. We will remove your personal details, story, and uploaded media, except where we are required to keep certain records (such as payment/transaction records) for legal or accounting purposes, in which case we keep only what the law requires and for no longer than necessary.

6. Your rights

If you are in the UK or the EU, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at contact@nalunastudio.com. You also have the right to complain to your local data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk).

7. Children

Our service is intended for adults placing orders on behalf of themselves or others. We do not knowingly collect personal data directly from children.

8. Contact

For any question about this Privacy Policy or your data, contact contact@nalunastudio.com.