BANDWAGONMy songs

Privacy notice

Private by default, specific by design.

This notice explains what Bandwagon receives, why it is needed, where it is processed, and how to request access or deletion.

Last updated July 29, 2026

Information we receive

Organizers provide a recipient name, occasion, creative direction, song preferences, privacy choice, and—if they sign in—Google account name, verified email, and profile image. Google sign-in requests only the openid, email, and profile scopes.

Contributors provide a name, optional written memory, and an audio recording or upload. The service also records project state, generation prompts, model and treatment metadata, private access tokens, support requests, timestamps, and basic security logs.

How information is used

Information is used to create and deliver the requested song, transcribe contributions, draft lyrics, operate private project rooms, maintain account libraries, prevent abuse, diagnose failures, respond to requests, and meet legal obligations. Bandwagon does not use voice recordings to identify a person, build a voiceprint, clone a contributor, or train the local music and language models.

Processing and sharing

Account identity is processed through Google. Application data and private audio are stored using the site's database and object storage infrastructure. Transcription, lyric planning, and music generation currently run on operator-controlled local hardware. Data may also be disclosed to service providers, professional advisers, or authorities when reasonably necessary to operate the service, protect people, or comply with law. Bandwagon does not sell personal data.

Retention and security

Project material is retained while the project remains active so organizers can return to it. Account sessions expire after 30 days. A deletion request removes active copies after verification, subject to short-lived backups, fraud prevention, dispute, tax, or legal retention needs. No internet service can guarantee absolute security; Bandwagon uses private object storage, opaque role-specific links, hashed session tokens, and restricted worker access to reduce risk.

Your choices and rights

You can decline Google sign-in and contribute through a private link. Depending on where you live, you may request access, correction, deletion, restriction, portability, or information about processing. Submit a request through Contact. We may need to verify your email or control of the relevant private link.

Children and international use

Bandwagon is not directed to children under 13. Do not submit a minor's voice or identifying details without authorization from their parent or legal guardian. Information may be processed in the United States and other locations used by infrastructure providers.

TermsPrivacyMusic licenseAI disclaimerContact