Privacy Policy

SketSong.com is operated personally by Putu Adi, an individual based in Badung, Bali, Indonesia. It is not currently operated through a separate incorporated company or other legal entity. The operator is responsible for the data described in this policy and can be reached at support@sketsong.com.

This policy applies to:

• the public website at sketsong.com
• the member area available after signing in
• account authentication
• the Google Drive storage integration
• support communications
• subscriptions and payments, where you use them

Account and identity data

• your email address
• your user ID within the service
• profile or display information made available by the authentication provider
• your account status

Song development data

The working material you create in SketSong, which may include ideas, project metadata, demo and release metadata, lyrics, story and production notes, credits, genres, moods, tags, relationships between works, playlists, albums, and workflow or readiness information.

Google Drive connection data

• the email address of the Google account you connect for storage
• identifiers for the Drive connection itself
• identifiers for folders the application creates
• file identifiers and file metadata that SketSong needs in order to organize and play your media
• an encrypted refresh token, stored on the server
• a short lived access token, requested only when an operation needs one

Audio and media

Your primary audio stays in the Google Drive account you connect. SketSong stores the references and metadata it needs in order to organize, find, and play that audio, rather than the audio itself. Small application assets such as artwork and thumbnails may be held in private application storage where the product uses them.

Payment and subscription data

• the plan you selected and its price
• order and transaction identifiers
• the payment provider reference
• payment status and payment attempts
• subscription status and period
• founder pricing eligibility and allocation records, where they apply

SketSong does not store your card number, CVV code, banking PIN, online banking password, or complete payment credentials. Those are handled by the payment provider.

Support and communication data

Messages you send, along with any screenshots, troubleshooting details, transaction evidence, and the history of the correspondence.

Technical and security data

• authentication and session information
• request and security logs
• timestamps
• error information
• browser or device information where infrastructure providers make it available

Cookies and local storage

SketSong uses cookies and browser storage that are essential to running the service: keeping you signed in, protecting the sign-in and Google Drive authorization flows against cross-site request forgery, maintaining session continuity, and remembering application preferences where the product offers them.

SketSong does not use advertising cookies, behavioral advertising, or third-party analytics or tracking scripts.

• directly from you, when you sign in, create work, or contact support
• from Supabase Auth, when you authenticate
• from Google OAuth and Google Drive, after you give consent
• from the payment provider, in transaction responses, when you make a purchase
• from application and infrastructure logs generated while the service runs

• to create, secure, and maintain your account
• to provide the song development workflow
• to organize, retrieve, and play your media
• to connect and maintain your Google Drive integration
• to apply the limits and entitlements of your plan
• to process and reconcile payments and subscriptions
• to respond to support requests
• to prevent fraud and abuse
• to maintain the security and integrity of the service
• to improve reliability and fix problems
• to comply with legal obligations

SketSong's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

SketSong requests only the Google permissions it needs in order to provide the Google Drive integration you can see in the product.

The Drive permission currently used is the drive.file scope. This scope allows SketSong to work with files that are created by, or specifically used with, the application. It does not allow SketSong to browse, read, or index the rest of the content in your Google Drive.

The email address of the connected Google account is used to identify which Drive account is connected to your SketSong account, so that you can tell your storage account apart from the account you sign in with.

Google Drive data is used only to store, organize, retrieve, and play the files you ask SketSong to work with. In particular, Google user data is:

• not sold
• not used for advertising of any kind
• not transferred to data brokers or information resellers
• not used for credit, lending, or creditworthiness decisions
• not used to train generalized or general purpose artificial intelligence models

Google user data is transferred to others only where it is necessary to provide or improve the visible features of the service, to comply with applicable law, or as part of a security investigation, consistent with the Limited Use requirements.

• refresh tokens are stored encrypted on the server, never in your browser
• access tokens are short lived and requested only when an operation needs one
• tokens are not written to public pages or intentionally exposed in browser logs
• SketSong staff access to authorization data is limited to what operating the service requires

You can revoke SketSong's access to your Google account at any time through your Google Account permissions settings. You can also disconnect or reconnect your Drive from within SketSong where that functionality is available.

Revoking access in Google stops SketSong from reaching your Drive files. It does not by itself delete the metadata SketSong holds about your work. To have that removed, use the account deletion process in section 12.

SketSong shares data only as far as is necessary to deliver the service, keep it secure, process payments, provide support, or meet a legal obligation. The categories of recipient are:

• Supabase, for authentication and application data storage
• Google, for account authorization and Google Drive access
• Hostinger, for hosting, content delivery, and infrastructure
• Duitku, for payment processing when you make a purchase
• other technical providers required to operate the service
• legal or regulatory authorities, where lawfully required

SketSong does not sell personal data, and does not sell Google user data.

The infrastructure providers listed above may process or store data outside Indonesia, according to their own infrastructure and contractual terms. SketSong does not promise that all data is stored only in Indonesia.

• active account data is kept while your account is active and is needed to provide the service
• after a verified account deletion request, SketSong targets deletion or anonymization of active account data within 30 calendar days
• residual copies may remain in backups for up to 90 days before those backups age out
• support communications may be kept for up to 24 months after a case is closed, unless they are needed longer for security, a dispute, or a legal obligation
• payment, tax, transaction, audit, fraud prevention, dispute, and other legally required records may be kept longer where that is reasonably necessary or required by law

Files stored in your own Google Drive are not deleted by deleting your SketSong account. They stay in your Google account and remain under your control.

Because of the backup and legal retention periods above, SketSong cannot promise that every record is erased immediately or that every record is erased at all.

Subject to applicable law, you can request:

• access to the personal data held about you
• correction of data that is inaccurate or incomplete
• deletion of your account and associated data
• withdrawal of consent, where processing is based on consent
• disconnection of your Google Drive, or revocation of Google access
• information about how your data is processed
• to object to processing, or to lodge a complaint, where applicable law provides that right

Requests can be sent to support@sketsong.com. Identity verification may be required before a request is acted on, so that account data is not disclosed or deleted at the request of someone else.

Self-service deletion is not yet available in the application. Until it is:

• email support@sketsong.com from the address associated with the account
• include the account email address so the request can be matched
• expect a verification step before the request is processed

Your SketSong account data and metadata are then handled according to the retention rules in section 10. Files in your Google Drive remain in your Google account and are not deleted by this process. Revoking Drive access on its own does not erase the metadata SketSong holds.

SketSong applies reasonable technical and organizational measures, including:

• authenticated access to the member area
• server-side authorization checks on data access and changes
• row level protections in the database, so records are scoped to their owner
• encryption of Google refresh tokens
• private storage for application images
• least privilege integrations, requesting only the permissions a feature needs
• monitoring and access controls

No online service can guarantee absolute security. These measures reduce risk; they do not eliminate it.

SketSong is intended only for users aged 18 or older, and is not directed at children. If you believe someone under 18 has provided personal data to SketSong, please contact support@sketsong.com so it can be removed.

To state it plainly:

• SketSong does not sell personal data
• SketSong does not sell Google user data
• SketSong does not use Google user data for targeted advertising
• SketSong does not transfer Google user data to data brokers
• SketSong does not use Google user data for creditworthiness or lending decisions
• SketSong does not use Google user data to train generalized artificial intelligence models

This policy may be updated as the service, its providers, or applicable legal obligations change. When it changes, the Last updated date at the top of this page is revised, and where a change is material and it is practical to do so, notice will also be given in the service.

Related documents: the Terms of Service and the Payment & Refund Policy.

Questions about this document, or requests relating to it, can be sent to the operator of SketSong.com: