Privacy Policy
Last updated 2026-09-14
This Privacy Policy explains how GOATX Intermediações Ltda., a Brazilian single-member limited liability company (sociedade limitada unipessoal) (Avenida Paulista, 1471, Sala 1110, Bela Vista, São Paulo, SP, 01311-927, Brazil), operating Sungletter (https://sungletter.com), collects and uses information.
Your song is private by default
A song you create is visible only to you unless you explicitly turn sharing on. Turning sharing on creates an unguessable link; anyone without that link cannot find or hear your song. Turning sharing off at any time makes the link stop working immediately.
What we collect
The story you tell us (text or a voice recording), the recipient's name and relationship to you, your email address, payment and billing details (processed by Stripe — see below), device/browser information, and how you found us (e.g. which ad, if any).
Voice recordings
If you record your story instead of typing it, the raw audio is used only to transcribe your story and is deleted no later than 30 days after upload. The transcript (and the song made from it) is kept as part of your account.
AI processing
Your story is sent to third-party AI providers (for transcription, content moderation, lyric writing, and music generation) solely to produce your song. These providers process the data under their own commercial terms and do not use it to train models on our behalf beyond what is contractually required for us to receive a result.
Payments
Payments are handled by Stripe, Inc. We never receive or store your full card number. Stripe may retain fraud-prevention signals (such as your IP address and device fingerprint at the time of purchase) as part of processing your payment and defending against chargebacks — see Stripe's Privacy Policy.
Cookies and similar technology
We use a first-party cookie to recognize your browser across a single visit (so your song and place in the flow aren't lost) and, with your context, advertising identifiers (such as Meta's click/browser IDs) to measure which campaigns led to a purchase.
If you pick a language — by following a link that names one, or by using the language switcher — we store that choice in a first-party cookie for up to a year, so the site keeps speaking the language you chose. It holds nothing but the language name, and you can change it at any time from the switcher at the top of the page.
To protect the free preview from automated abuse we also compute a non-unique device signal from your browser's settings (screen size, time zone, language, browser version) together with a random identifier stored in your browser, and we hash them before storing them for up to 90 days. We use Cloudflare Turnstile, which processes browser and network signals (including your IP address) to tell people from automated traffic — see Cloudflare's privacy policy. These signals are not used for advertising.
We derive the country you are visiting from (never your city or exact location) from your IP address using an offline database on our own server, so we can understand which countries our visitors come from; your IP address is not sent anywhere for this. IP geolocation by DB-IP, licensed under CC BY 4.0.
We do not sell your personal information.
Retention and deletion
We keep your songs, story, and account information for as long as your account exists. You can request deletion of your account and associated content at any time by emailing hello@sungletter.com; some records (such as transaction records) may be retained longer where required by law or for fraud/dispute defense.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to certain processing. Contact us at hello@sungletter.com to exercise these rights.
Children
Sungletter is not directed to children under 13, and we do not knowingly collect information from them.
Changes
We may update this policy from time to time; the date at the top of this page reflects the latest revision.