Legal document

Privacy Notice

Effective date: May 29, 2026. This notice reflects the current technical operation of SingMyLine.

1. Controller

Controller: Trencsán Tamás, sole entrepreneur, trading name Csali.eu. Contact: info@singmyline.com.

Registered office and mailing address: HU-9029 Győr, Külső Bácsai út 16, Hungary. Tax number: 68855525-1-28. Sole entrepreneur registry number: 52349571.

2. Data We Process

• Registration: email address, password hash, account identifier, and registration date. Account creation is only allowed after Terms/Privacy acceptance.
• Login: session token hash, expiry date, and login cookie.
• Generation: submitted text, selected languages, style, mood, public/private setting, generated lyrics, music prompt, and audio/video file paths.
• Security: hashed IP address, rate-limit records, and application error logs.
• Credits and payments: credit events, order identifiers, package, amount, currency, payment status, billing details and tax IDs collected by Stripe where applicable, and technical Stripe responses.
• Contact form: name, email address, message content, sent date, and hashed IP address for abuse prevention.
• Public features: like/dislike reactions and public song listing.
• Content reports: reported song identifier, reason, details, optional contact email, reporter user identifier, hashed IP address, admin status, and admin notes.
• Email: data needed for signup, system, and password reset emails.

3. Purposes and Legal Bases

• Account and service operation: performance of a contract.
• Credit records, payments, and billing-related data: performance of a contract and legal obligation where applicable.
• Security, abuse prevention, and error logging: legitimate interest.
• Public gallery and reactions: part of the contractual service, based on the user's visibility settings.
• Reports and moderation of illegal or problematic public content: legitimate interest and legal obligation where applicable.
• Contact form handling: legitimate interest in responding to user requests.
• Google Analytics, if configured: consent.
• Password reset and system messages: performance of a contract.

4. Processors and Recipients

The service may use external providers for hosting, OpenRouter/AI generation, SMTP email delivery, Stripe payments, and Google Analytics if it is configured and consented to. Card payment details are handled by Stripe; SingMyLine does not store full card details.

5. International Transfers

AI, payment, or email providers may involve transfers outside the European Economic Area. Where relevant, the operator relies on contractual and technical safeguards made available by those providers. This section must be finalized based on the live provider contracts.

6. Retention

• Account data: while the account exists.
• Free or test songs: for a short period under the current rule, by default 1 day.
• Paid-package songs: for the package storage period shown, currently 3, 15, or 30 days.
• Content reports and moderation notes: until review is closed, or longer where needed for legal claims.
• Contact form messages: as long as needed to answer the request and handle related follow-up.
• Payment and accounting data: for the legally required retention period.
• Error logs: as long as needed for troubleshooting and security.

7. Your Rights

You may request access, rectification, deletion, restriction, data portability where applicable, and you may object to processing based on legitimate interest.

Requests can be sent to info@singmyline.com. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information: naih.hu.

8. Automated Decision-Making

SingMyLine uses AI models to generate creative content, but it does not make GDPR-level automated decisions that produce legal or similarly significant effects about users.

9. Sources

This notice was drafted with the transparency requirements in GDPR Articles 12-14, guidance from the Hungarian data protection authority, and ePrivacy cookie rules in mind.