Songs To Your Eyes
Last updated: 1 October 2026
This policy explains what Songs To Your Eyes Ltd ("Songs To Your Eyes", "we", "us"), a company located in the United States, collects when you use our websites — songstoyoureyes.com and licensing.songstoyoureyes.com, including the music catalogue, the search Assistant, Music Match, member accounts, purchases, licences and downloads (together, the "Service") — how we use it, and your rights. By using the Service you consent to this policy.
Our catalogue connector for AI assistants, at mcp.songstoyoureyes.com, has its own, shorter policy: https://mcp.songstoyoureyes.com/privacy.
The short version: we collect what a music catalogue and licensing store needs to let you search, listen and buy, and to prove a licence later. We run no advertising and never sell your data. Messages you send our search Assistant are processed by Google's Gemini AI service, the text of your search request is also processed by TypeSafe, which helps order the results, and both are deleted from our systems within about a day. The main site uses Google Analytics only if you accept it.
When you browse and listen (no account needed). The first time you open the catalogue we set a cookie holding a random listening ID. Each time a track plays we record that ID, your IP address, the track and the time; these records are deleted after 30 days and are used to count plays and to detect bulk copying of the catalogue. When you act on a track — play, download, add to a playlist, favourite, or download a zip — we also record the action, the search that led you to it and its position in the results, together with the listening ID and, if you are signed in, your account. We use these records to improve how our search ranks music. Your account is unlinked from them after 24 months; the rest is kept.
What you search for. The text of a search is kept in a search cache so the same search is answered faster next time; the cache holds no IP address, account or other identifier. If you are signed in, we also keep your recent searches so you can find them again; you can clear them at any time from Recent Searches.
The search Assistant. When you use the Assistant, we keep the conversation — your messages, the brief it works from and the tracks it has already shown you — so it can follow up. That includes the text of any brief document (PDF, Word or text file) you upload; we read the text out of the file and do not keep the file itself. Conversations are deleted automatically 24 hours after your last message (our clean-up runs every six hours). To answer you, the Assistant sends your recent messages to Google's Gemini service (see Section 4). To order the tracks it finds, it also sends the text of your request, together with our descriptions of those tracks, to TypeSafe (see Section 4). The opening message of a conversation is also kept in the search cache described above.
Music Match. When you upload an audio file to find music that sounds like it, the file is analysed on our own servers and is not kept. We keep the file's name and a numeric "sound profile" with your Assistant conversation, and they are deleted with it.
Account information. When you sign in, our identity provider (WorkOS) handles authentication and passes us your email address and, if provided, your name. We store these with your account, together with sign-in records (time, type of event, technical result), your browser's user-agent string, the IP address you signed up from and last signed in from, and the country those addresses belong to — looked up in a database on our own servers, not sent to anyone. When someone creates an account, we email ourselves a notice with their name, email address and country.
Your library. If you are a member, we store the favourites, playlists (including any cover image you upload) and shared playlist links you create, and the stem mixes you render. Stem mixes are deleted 30 days after they are made.
Purchase and licence records. When you buy, we store what you bought, the amount, the licensee name and any production title you provide at checkout, the licence number and licence page issued to you, and payment references from our payment processor. We never see or store your card number — payment is handled entirely by Stripe. When you sign a licence online, we also keep the contact, address and project details you enter, the signer's name, title and email, the IP address and browser user-agent the signature came from, the signature you draw, and the signed licence document.
Download records. Each download (or refused download attempt) of licensed files is logged with the file, the licence, the time, and the IP address the request came from. This is the audit trail that lets us answer "was it delivered?" in a dispute, and it is retained as part of the licence record.
YouTube Content ID. If your plan includes it and you add your YouTube channel, we store the channel and send its channel ID to SourceAudio, which administers Content ID for our catalogue, so that claims on your videos are released. We identify you to SourceAudio only by your account number, never your name or email.
Quote requests. If you ask for a custom quote, we store your email address, the coverage you ask about, your message, the track it concerns and the IP address it came from, and email the request to our team.
Emails we send you. We keep a record of the transactional emails sent to you about your purchases (recipient, subject, delivery status) — so "did you send it?" is answerable.
Correspondence. If you email info@songstoyoureyes.com we keep the correspondence.
Server logs. Like any website, our hosting providers record each request — including the IP address and the page address, which for a search includes the search text — under their own terms.
We collect no demographic information, no advertising identifiers, and no data from data brokers or social networks.
| Cookie | Set by | Purpose | Lasts |
|---|---|---|---|
| stye_session | licensing site | keeps you signed in | up to 30 days |
| stye_auth_state | licensing site | protects the sign-in step against forgery | 10 minutes |
| stye_stream | licensing site | random listening ID (Section 1) | 30 days |
| stye_member | licensing site, readable across songstoyoureyes.com | tells our pages you are a member so they show the right buttons; holds no identifier | up to 30 days |
| Google Analytics (_ga, and _ga_ followed by an ID) | main site, only if you accept | counts visits to songstoyoureyes.com | as set by Google |
The first four are needed for the Service to work. The licensing site sets no analytics, advertising or third-party cookies, and we use no web beacons or fingerprinting. On the main site, Google Analytics loads only after you accept it in the cookie banner, and you can change your choice at any time from the link at the foot of the page.
The catalogue also keeps a few preferences in your browser's local storage — your recent briefs, theme, volume, layout, language and stem-mix settings — so they are still there next time. They stay on your device; you can remove them by clearing this site's data in your browser.
To provide the Service: let you search and listen, run the Assistant, create and secure your account, process purchases, deliver files, issue licence certificates, register Content ID channels, and answer support requests. To improve the Service: make search rank music better, using the search and listening records described in Section 1. To meet legal obligations: tax and accounting records of sales. To protect the Service: detect bulk copying of the catalogue, and investigate abuse of download links and refusals logged in the audit trail. To contact you about your purchases (transactional email only). Marketing email is sent only if you separately opt in via our newsletter, which has its own unsubscribe. We do not sell or rent personal information, and we do not share it for anyone's marketing.
| Provider | What they do | What they handle |
|---|---|---|
| Stripe | payment processing | your payment details, email, purchase amounts |
| WorkOS | sign-in | your email, authentication |
| Google (Gemini API) | understands Assistant messages and search text | the Assistant's instructions, your recent messages (including text from brief documents you upload) and search text — never your email, account or IP address |
| TypeSafe | orders the Assistant's results by how well each track fits your request | the text of your Assistant request and our catalogue's descriptions of the tracks found, never your email, account or IP address |
| Google Fonts | supplies the fonts our pages use | your IP address and browser details, when a page loads |
| Google Analytics | visit statistics for songstoyoureyes.com, only if you accept | pages visited, device and browser details, approximate location |
| SourceAudio | YouTube Content ID administration | your YouTube channel ID and our account number for you |
| Supabase | our database (hosted in Canada) | account, licence, download, search and listening records |
| Cloudflare | file storage and delivery | the files you download, playlist cover images, signed licences; standard connection data |
| Fly.io | application hosting (licensing site) | requests to the Service in transit; request logs |
| Netlify | hosting for songstoyoureyes.com | requests to the main site; request logs |
| Resend | sending transactional email | your email address and the email content |
| Google Workspace / Gmail | our internal business email | purchase, quote-request and new-account notices we send ourselves |
Each processes data under its own terms.
We are a United States company; our database is hosted in Canada and our application in Canada/the US; our providers operate globally. If you are located elsewhere (including the EU/UK), your information will be transferred to and processed in these countries. Where GDPR applies, transfers rely on the safeguards our processors provide (including standard contractual clauses).
Depending on your jurisdiction (including under GDPR if you are in the EU/UK), you may request: access to and a copy of your personal information; correction; deletion (except records we must keep — e.g. the licence and sales records that prove your own licence and satisfy tax law); restriction of or objection to processing; and portability. Write to info@songstoyoureyes.com. Records that carry no identifier — the search cache, and listening records once their 30 days are up — cannot be traced back to you. If you are in the EU/UK and believe your rights are infringed, you may also complain to your local data-protection authority. Legal bases where GDPR applies: performance of our contract with you (most of Sections 1 and 3); legal obligation (tax and accounting records); legitimate interests (service security, the download audit trail, improving search, defence of legal claims); consent (Google Analytics on the main site).
Personal information is protected by commercially reasonable technical and administrative safeguards: encrypted transport everywhere, credentialed access, payment handled solely by Stripe, and sign-in handled by WorkOS — we never see or store a password. No internet service can guarantee absolute security.
The Service is for adults entering commercial licences. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact info@songstoyoureyes.com and we will delete it.
We do not sell or share personal information as defined by the CCPA/CPRA, and have not in the preceding 12 months. California residents may exercise the rights in Section 7 (access, deletion, correction) via info@songstoyoureyes.com; we do not discriminate for exercising them.
Changes will be posted on this page with an updated date. We will not use previously collected information in a materially different way without notice.
Songs To Your Eyes Ltd 655 Mallard Ct., Arnold MD 21012 USA info@songstoyoureyes.com