Privacy Notice

SongSyntax Orchestral 500 is operated by Simon Watson (“we”, “us”, “our”). Simon Watson is the data controller responsible for personal data processed through the Service.

• Account data — name, email address, and login credentials you provide when signing up, including data from Google sign-in if you use it.
• Support messages — the contents of any messages you send us through the contact form or by email.
• Prompt and usage data — the answers you give in the guided conversation, the prompt sets generated for you, your saved history, and your remaining allowance and plan status.
• Device and connection data — IP address, browser type, device identifiers, and similar technical information.

Payment card details are collected and processed directly by our payment processor. We do not receive or store your full payment card information.

• To create and maintain your account and provide the Service.
• To generate, save and display your prompt history and to apply plan limits and credits.
• To respond to support requests and communicate with you about your account.
• To secure the Service, prevent fraud, and enforce our Terms and Conditions.
• To improve product features and fix bugs.
• To comply with legal obligations.

Where applicable law requires a legal basis for processing, we rely on: performance of a contract with you (to provide the Service); our legitimate interests (to secure, operate, and improve the Service); your consent (where required); and compliance with legal obligations.

We share personal data with:

• Our payment processor — which handles checkout, subscription management, payments, tax calculation, invoicing, and dispute processing.
• Hosting, database and AI infrastructure providers — for application hosting, account and history storage, content delivery, and the AI model calls that generate your prompt set.
• Authorities — where required by law or legal process.

SongSyntax Orchestral 500 does not share your prompts or personal data with third-party AI music-generation services such as Suno or Udio. The Service generates prompts for you to copy and paste into your chosen generator; those generators are not integrated with the Service and receive no data from us.

Our providers may process personal data outside the UK/EEA. Where such transfers occur, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

We keep personal data only for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

We do not save your generated prompt sets. Prompt output is returned to your browser only and is not retained in your account — copy anything you want to keep. We store a minimal usage record (date and count) to apply your plan allowance. When data is no longer needed it is deleted or anonymised.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data; to restrict or object to certain processing; to withdraw consent; and to lodge a complaint with your local data protection authority. In the UK/EEA, we aim to respond to requests within one month.

To exercise any of these rights, contact us via the contact form.

We apply appropriate technical and organisational measures — including encryption in transit, row-level access controls on your account data, and least-privilege administration — to protect personal data. No system can be guaranteed 100% secure, but we work to reduce risk.

We use essential cookies and browser storage necessary to run the Service, for example to keep you signed in. You can manage cookies through your browser settings, though signing in will not work without them.

We may update this Privacy Notice from time to time. The “Last updated” date above reflects the most recent revision.

Questions about this Privacy Notice or your personal data? Contact us through the contact form.