Privacy Policy – xsong.pl
Last updated: 20 April 2026
1. Data controller
The controller of your personal data is:
FutureCreate Daniel Piasecki
ul. Rzeczna 1, 64-234 Mochy, Poland
VAT: PL9231514985
Email: [email protected]
2. What data we collect
When using xsong.pl we collect:
- Contact data: first name, email address
- Order data: recipient's name, occasion, music genre, preferences, and any memories/messages entered in the form
- Payment data: transaction information (amount, currency, status) — card details are processed exclusively by Stripe and never reach our servers
- Technical data: IP address, browser type — collected automatically by the server
3. Purpose and legal basis
| Purpose | Legal basis |
| Fulfilling the order (creating and delivering the song) | Art. 6(1)(b) GDPR — performance of contract |
| Sending order confirmation and delivery emails | Art. 6(1)(b) GDPR — performance of contract |
| Handling complaints | Art. 6(1)(c) GDPR — legal obligation |
| Accounting and record keeping | Art. 6(1)(c) GDPR — legal obligation (5 years) |
4. Data recipients
Your data may be shared with:
- Stripe Payments Europe, Limited — payment processing
- Resend Inc. — transactional email delivery
- Cloudflare, Inc. — network infrastructure and security
We do not sell your personal data to third parties.
5. Data retention
- Order data is retained for 5 years from the transaction date (tax law requirement)
- Technical logs are retained for 90 days
- Data can be deleted earlier upon request, unless a legal obligation prevents it
6. Your rights (GDPR)
You have the following rights:
- Access — right to obtain a copy of your data
- Rectification — right to correct inaccurate data
- Erasure — right to request deletion ("right to be forgotten")
- Restriction — right to restrict processing
- Portability — right to receive data in a machine-readable format
- Objection — right to object to processing
To exercise these rights, contact us at: [email protected]
You also have the right to lodge a complaint with your local data protection authority.
7. Cookies
xsong.pl uses only essential cookies for session management and authentication. We do not use advertising or tracking cookies.
8. Security
We implement appropriate technical and organizational measures to protect data against unauthorized access, loss, or destruction. All connections are encrypted via HTTPS/TLS.
9. Changes
We reserve the right to update this Policy. The current version is always available at xsong.pl/polityka-prywatnosci.