Your story stays
between us.

To craft a song that's truly yours, we need a few specific things. Here's everything:

• Your story details — names, occasion, relationship, the memories and details you share through our questionnaire.
• Contact information — your email address and phone number (and your name, so we know how to address you).
• Delivery preferences — language, mood, and any specific date you need it by.
• Payment information — handled entirely by Razorpay. We never see or store your card details.
• Technical information — when you visit, we automatically receive your IP address, browser and device type, and cookie identifiers set by Meta's pixel and Google Analytics. We use these only to measure whether our ads are working, understand how the site is used, and keep the site secure.

Mostly one reason: to make your song and deliver it to you.

Your story details become the lyrics. Your email is where we send the finished song. Your payment is processed so we can keep making songs for other people too.

The one other reason: to understand which of our ads actually reach the right people, we share a limited, one-way encrypted (hashed) version of your email, phone, and name with Meta — never your story, never your lyrics, never anything readable. We never sell your information, and we don't share it with data brokers.

A small team at Heartscript uses your story to create your song. Everyone who handles it is bound by a confidentiality agreement.

We use a few third-party services that touch some of your data:

• Razorpay — to process payments securely. They handle your card/UPI details, not us.
• Supabase — to store your order details on our behalf, behind authentication.
• Email delivery — to send your song and confirmations to your inbox.
• Meta (Facebook & Instagram) — to measure how well our ads perform, we share hashed identifiers and the technical information above. This helps us spend less on ads and keep our prices fair. Meta never receives your story or lyrics.
• Google Analytics — to measure site traffic and how visitors move through the site, so we can keep improving it. Google receives the technical information above and which pages you view — never your story, your lyrics, or anything readable.

That's it. No data brokers, and no one outside these services ever sees your story.

We keep your story and order details indefinitely so we can answer questions if you reach out months later (“could I get a copy of the lyrics again?” is a common one).

You can ask us to delete everything at any time. We'll do it within 7 days and confirm by email.

You can email us at hello@heartscript.in any time to:

• Get a copy of what we have on file about you
• Correct anything that's wrong
• Delete your account and all associated data
• Ask any question you have about how we use your information

We use the essential cookies needed for the site to function (e.g., remembering your order while you're filling it out). We also use the Meta Pixel, which sets cookies to measure whether our Facebook and Instagram ads lead to visits and orders — it never sees the contents of your story. You can opt out of ad tracking through your browser settings or your Meta ad preferences.

We also use Google Analytics, which sets cookies to understand how visitors use the site — which pages they see and how they got here — so we can make it better. It never sees the contents of your story. You can opt out of Google Analytics across every site you visit with Google's opt-out browser add-on.

Heartscript is intended for adults (18+) who are buying a gift. If a song is being made for a child, the buyer is still an adult and is responsible for the story details they share.

If we ever change how we handle your data, we'll update this page and note the date below. For meaningful changes, we'll also email anyone who's ordered from us in the last year.