Privacy Policy

1. Data controller

The data controller is Abracadabrax Studio, Str. Lanului 11, 900007 Constanța, Romania, which operates the Canzora service. For any privacy request, write to legal@abracadabrax.app.

2. What data we collect

Order data: your email address, the name of the person the song is dedicated to and your relationship, the occasion, the memories and the message you write, the options you select (style, voice, verses, delivery), the lyrics and audio versions produced, and your revision requests.

Payment data: amount, currency, outcome and transaction identifiers provided by Stripe. We never receive your full card number.

Technical data: IP address, estimated country and city, browser and device, landing page and advertising campaign parameters (utm, click identifiers), and navigation events within the form.

3. Why we use it

To produce and deliver the song and handle revisions (performance of the contract). To send you confirmation and delivery emails and respond to support requests (contract). To prevent fraud and abuse, and to measure how the service works and how advertising campaigns perform (legitimate interest). For advertising tracking through pixels, where covered by your cookie consent.

We do not use your story to train models, we do not sell it, and we do not use it for promotional purposes without your explicit consent.

4. Who processes data on our behalf

Stripe (payments); Google Cloud, Vertex AI (writing the lyrics from your answers); fal.ai and MiniMax (audio production from the lyrics); Railway (application and database hosting); S3-compatible storage (audio files); Resend (email delivery); PostHog (usage analytics); Meta (pixel and Conversions API, for advertising campaigns). Each provider processes data according to our instructions and its own data protection agreements.

Some of these providers are located in the United States: transfers are based on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework, where applicable.

5. How long we keep it

Order data, lyrics and songs remain available on your private page for 24 months from delivery, so you can listen to and download them again; after that they are deleted or anonymized. Accounting records are kept for as long as the law requires. You can request early deletion at any time.

6. Your rights

You can request access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest. You can withdraw your consent to advertising cookies at any time. Write to legal@abracadabrax.app: we respond within 30 days. You also have the right to lodge a complaint with the supervisory authority in your country.

7. Cookies and pixels

We use technical cookies required for the form to work (they store your answers while you fill it in) and, with your consent, measurement tools and Meta advertising pixels to understand which ads lead to an order. You can manage your preferences from the cookie banner or your browser settings.

8. Minors

The service is reserved for adults. If you believe a minor has provided us with data, write to us and we will delete it.

9. Security

Data travels encrypted (HTTPS), private pages are accessible only through links with a code that cannot be guessed, and access to our systems is limited to the people who need to manage orders.

10. Changes and contact

We will update this policy when our processing changes. Questions: legal@abracadabrax.app. Abracadabrax Studio, Str. Lanului 11, 900007 Constanța, Romania.