Songs To Your Eyes
Last updated: 24 August 2026
This policy explains what Songs To Your Eyes Ltd ("Songs To Your Eyes", "we", "us"), a company located in the United States, collects when you use our licensing service — the account, purchase, licence and download pages (the "Service") — how we use it, and your rights. By using the Service you consent to this policy.
The short version: we collect what a music-licensing store needs to sell you a licence and prove it later — your email and name, your purchases, and a log of licence-file downloads. We run no advertising, no tracking cookies, no analytics trackers, and we never sell your data.
Account information. When you sign in, our identity provider (WorkOS) handles authentication and passes us your email address and, if provided, your name. We store these with your account, together with sign-in records (time, technical result) and your browser's user-agent string.
Purchase and licence records. When you buy, we store what you bought, the amount, the licensee name and any production title you provide at checkout, the licence number and licence page issued to you, and payment references from our payment processor. We never see or store your card number — payment is handled entirely by Stripe.
Download records. Each download (or refused download attempt) of licensed files is logged with the file, the licence, the time, and the IP address the request came from. This is the audit trail that lets us answer "was it delivered?" in a dispute, and it is retained as part of the licence record.
Emails we send you. We keep a record of the transactional emails sent to you about your purchases (recipient, subject, delivery status) — so "did you send it?" is answerable.
Correspondence. If you email info@songstoyoureyes.com we keep the correspondence.
We collect no demographic information, no advertising identifiers, and no data from data brokers or social networks.
The Service sets exactly two cookies, both strictly necessary: a session cookie that keeps you signed in (up to 30 days), and a short-lived sign-in-security cookie (10 minutes) used only during login to prevent cross-site request forgery. Both are HttpOnly. There are no analytics, advertising, or third-party cookies, no web beacons, and no fingerprinting. Because these cookies are strictly necessary, the Service does not show a cookie-consent banner; blocking them prevents sign-in.
To provide the Service: create and secure your account, process purchases, deliver files, issue licence certificates, and answer support requests. To meet legal obligations: tax and accounting records of sales. To protect the Service: investigate abuse of download links and refusals logged in the audit trail. To contact you about your purchases (transactional email only). Marketing email is sent only if you separately opt in via our newsletter, which has its own unsubscribe. We do not sell or rent personal information, and we do not share it for anyone's marketing.
| Provider | What they do | What they handle |
|---|---|---|
| Stripe | payment processing | your payment details, email, purchase amounts |
| WorkOS | sign-in | your email, authentication |
| Supabase | our database (hosted in Canada) | account, licence, download records |
| Cloudflare | file storage and delivery | the files you download; standard connection data |
| Fly.io | application hosting | requests to the Service in transit |
| Resend | sending transactional email | your email address and the email content |
| Google Workspace / Gmail | our internal business email | purchase notifications we send ourselves |
Each processes data under its own terms as our service provider; none is authorised to use your personal information for its own purposes.
We are a United States company; our database is hosted in Canada and our application in Canada/the US; our providers operate globally. If you are located elsewhere (including the EU/UK), your information will be transferred to and processed in these countries. Where GDPR applies, transfers rely on the safeguards our processors provide (including standard contractual clauses).
Account data: while your account exists. Licence, purchase, download and email records: retained for as long as the licence exists — a perpetual licence is proven by its records, and tax law requires sales records to be kept — after which they may be deleted or anonymised. Sign-in session records: deleted 90 days after they end. Sign-in security tokens: hours.
Depending on your jurisdiction (including under GDPR if you are in the EU/UK), you may request: access to and a copy of your personal information; correction; deletion (except records we must keep — e.g. the licence and sales records that prove your own licence and satisfy tax law); restriction of or objection to processing; and portability. Write to info@songstoyoureyes.com. If you are in the EU/UK and believe your rights are infringed, you may also complain to your local data-protection authority. Legal bases where GDPR applies: performance of our contract with you (most of Sections 1 and 3); legal obligation (tax and accounting records); legitimate interests (service security, the download audit trail, defence of legal claims).
Personal information is protected by commercially reasonable technical and administrative safeguards: encrypted transport everywhere, credentialed access, payment handled solely by Stripe, and passwordless sign-in (we never hold a password). No internet service can guarantee absolute security.
The Service is for adults entering commercial licences. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact info@songstoyoureyes.com and we will delete it.
We do not sell or share personal information as defined by the CCPA/CPRA, and have not in the preceding 12 months. California residents may exercise the rights in Section 7 (access, deletion, correction) via info@songstoyoureyes.com; we do not discriminate for exercising them.
Changes will be posted on this page with an updated date. We will not use previously collected information in a materially different way without notice.
Songs To Your Eyes Ltd 655 Mallard Ct., Arnold MD 21012 USA info@songstoyoureyes.com