Information we receive
Organizers provide a recipient name, occasion, creative direction, song preferences, privacy choice, and—if they sign in—Google account name, verified email, and profile image. Google sign-in requests only the openid, email, and profile scopes.
Contributors provide a name, optional written memory, photo and caption, and an audio recording or upload. We also store the contributor's optional permission for original voice-note playback. Organizers may add a dedication and select a cover photo. The service also records project state, generation prompts, model and treatment metadata, private access tokens, support requests, timestamps, and basic security logs.
How information is used
Information is used to create and deliver the requested song, transcribe contributions, draft lyrics, create the requested private memory card, videos and downloadable keepsakes, operate private project rooms, maintain account libraries, prevent abuse, diagnose failures, respond to requests, and meet legal obligations. Bandwagon does not use voice recordings to identify a person, build a voiceprint, clone a contributor, or train the local music and language models.
Original recordings and keepsakes
Recordings inspire lyrics by default. An original voice note is playable in the private gift only when its contributor separately opts in. Recordings submitted before this choice existed are not opted in automatically. This permission does not authorize voice cloning, public promotion or advertising.
People with the appropriate private gift link may read shared notes and photos and download the included keepsakes. A recipient can explore the music and memories in any order. Downloaded files and printed QR links should stay with their intended audience; Bandwagon cannot recall copies someone has already downloaded or printed.
Processing and sharing
Account identity is processed through Google. Application data and private audio are stored using the site's database and object storage infrastructure. Transcription, lyric planning, and music generation currently run on operator-controlled local hardware. Data may also be disclosed to service providers, professional advisers, or authorities when reasonably necessary to operate the service, protect people, or comply with law. Bandwagon does not sell personal data.
Retention and security
Project material is retained while the project remains active so organizers can return to it. Account sessions expire after 30 days. A deletion request removes active copies after verification, subject to short-lived backups, fraud prevention, dispute, tax, or legal retention needs. No internet service can guarantee absolute security; Bandwagon uses private object storage, opaque role-specific links, hashed session tokens, and restricted worker access to reduce risk.
Your choices and rights
You can decline Google sign-in and contribute through a private link. Depending on where you live, you may request access, correction, deletion, restriction, portability, or information about processing. Submit a request through Contact. We may need to verify your email or control of the relevant private link.
Children and international use
Bandwagon is not directed to children under 13. Do not submit a minor's voice or identifying details without authorization from their parent or legal guardian. Information may be processed in the United States and other locations used by infrastructure providers.