Privacy Notice
Effective date: October 11, 2026
Version: 1.0.0
Responsible organization: OakPoint Digital Consulting & Management Inc., an Ontario corporation operating Ghoneeti | غنيتي, Oakville, Ontario, Canada (“Ghoneeti,” “we,” “us”).
Privacy questions and requests: legal@ghoneeti.com (subject: “Privacy Request”)
General help: support@ghoneeti.com
1. What this Notice covers
This Notice explains how we handle personal information when you visit our website, write a song brief, buy or receive a song, open a gift page, contact us, or sign up for marketing emails. It also covers information about song recipients and other people named in a brief. We remain responsible for this information when we use service providers to help us.
Ghoneeti is operated from Canada and serves customers in several countries, including in the Middle East. We follow Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies, and the additional local rules that apply to our activities. Nothing in this Notice waives your mandatory rights.
2. Information we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Your details | Name, email address, language, time zone, and the country you are browsing from | You, the order form and your connection |
| Song brief | Recipient first names and nicknames, how to pronounce them, occasion, relationship, preferences, stories, memories and “must include” details | You |
| Recipients | Up to three extra email addresses, your gift message and delivery timing | You |
| Order and payment | Order reference, price, priority option, currency, payment status, payment-provider references, refund and dispute status | Our payment provider and our order records |
| Your song and support | The song, cover artwork, lyrics, gift page, correction history and support messages | Our production and support work |
| Technical and security | IP address (stored in protected form for abuse prevention), device and browser type, times of requests, error and security logs | Your device and our hosting and security services |
| Choices and records | Marketing-email choice, and the policy versions and agreements you accepted | You and our systems |
We do not receive your full card number; payments are handled by our payment provider. We do not ask for passports, government identifiers, medical, bank or password information, or intimate details in a brief.
3. Why we use it
- To provide your song: to receive and check your brief, write, produce and review the song, confirm payment, deliver your download and gift page, send copies to your recipients and help you.
- To handle corrections and disputes: to assess correction requests, keep a record of what was ordered and delivered, and respond to complaints and chargebacks.
- To keep the Service safe: to prevent fraud and abuse and protect our customers, systems and providers.
- To meet legal obligations: accounting, tax, consumer-protection and other legal requirements.
- To improve our service: to find technical problems and improve how we work, using minimized or aggregated information where possible.
- To send marketing you asked for: only if you tick the separate marketing box. You can unsubscribe at any time.
Buying a song does not sign you up for marketing, and recipients are never added to marketing lists.
4. Your brief and AI-assisted production
To make your song, we use AI-assisted writing and music-production tools provided by third parties, together with our own creative direction and review. Your brief, or the parts of it a song needs, is processed by these tools. We decide how songs are made and keep our methods confidential, but we want you to understand where your information goes.
These providers have their own terms. Some allow them to keep, analyze or reuse material submitted to them, including to improve their systems, and some warn that personal information included in submissions could be republished. We therefore cannot promise that every detail sent to a provider will be used only to make your song. We choose providers carefully, send them only what a song needs, use the privacy settings they offer, and never send your email address, payment details or recipients’ email addresses to music-generation tools.
Please share only first names and details you are comfortable having processed by these providers. Do not include addresses, contact details, exact dates of birth, sensitive information about children, health information, confidential matters or payment details. If you have a concern about a particular detail, contact us before you order.
5. Recipients and people named in songs
Your brief may include names, relationships and memories about other people. Please respect their privacy, have any permission the law requires, and leave out unnecessary sensitive details. We use this information to make the song you ordered, not to build a profile of anyone.
If you choose to send copies to up to three recipients, we use their email addresses only to deliver the song and essential delivery information, and to deal with delivery problems. We never add recipients to marketing lists. A recipient may ask us to remove or restrict their information where lawful.
Gift pages are unlisted, not password-protected. Anyone with the link can open and share it. You can ask us to switch off a gift page early.
6. Cookies and storage on your device
Order draft. While you fill in the order form, your answers are saved in your browser on your device for up to seven days after your last change, so you can come back to them. They are not sent to us until you go to checkout. The draft is removed when your payment is confirmed or when you choose “Start over,” and you can clear it by deleting your browser data. On a shared device, other users of the browser may see a saved draft.
Agreement ticks. The agreement boxes you tick on the last step are kept only in that browser tab, for up to one hour, so checkout can confirm them. They are never saved in your draft.
Essential cookies. We use a cookie to remember your language choice. Our payment provider uses cookies on the checkout to process payments and prevent fraud.
No analytics or advertising tracking. We do not currently use analytics, advertising or social-media tracking cookies or pixels. If we introduce them, we will update this Notice first and ask for your consent where the law requires it.
7. Who we share information with
We share only what each provider needs for the purposes above:
- Payment provider: processes your payment, fraud checks, refunds and disputes.
- Website hosting, file storage and database providers: run our website and securely store orders and songs.
- Email providers: send order, delivery and support emails, and our business email.
- AI-assisted writing and music-production providers: process the creative parts of your brief to make your song and artwork (see Section 4).
- Professional advisers, authorities and successors: where legally justified, such as an accounting requirement, a legal claim, a business reorganization or a lawful request.
We do not sell personal information. You can ask us for the current list of our service providers at legal@ghoneeti.com.
8. Information processed outside your country
We are based in Canada. Our providers process information in Canada, the United States and other countries, where it may be subject to the laws of those countries, including lawful access by authorities. We assess providers, minimize what we send and use contractual and other safeguards suitable to applicable law.
9. How long we keep information
| Information | How long |
|---|---|
| Order draft in your browser | Up to 7 days after your last change, or less as described in Section 6 |
| Download link and gift page | Available for 90 days after delivery, unless switched off earlier |
| Brief, lyrics, song files and correction history | Deleted or de-identified 120 days after delivery, unless a correction, dispute or legal requirement means we must keep them longer |
| Support and delivery records | Up to 24 months, unless a dispute or legal requirement means we must keep them longer |
| Order, payment, invoice and tax records | As long as tax and accounting law requires, generally up to 7 years |
| Security and technical logs | Up to 90 days, unless needed to investigate an incident |
| Backups | Overwritten on a rolling basis within 90 days |
| Marketing choices and unsubscribe records | Until you withdraw consent, and afterwards as needed to respect your choice |
Switching off a link does not delete copies you or your recipients downloaded, and providers’ own copies are kept under their terms.
10. How we protect information
We use measures proportionate to the information we hold, including encrypted connections, encryption at rest by our database provider, private file storage, staff access limited by role and protected by one-time sign-in codes, a permanent log of staff actions, and long, random gift-link codes that we store only in protected form. No online service can guarantee absolute security.
If a security incident affects personal information, we assess and contain it, keep a record, and notify affected people and regulators where the law requires.
11. Your privacy rights
Depending on where you live, you may ask to access your personal information, correct it, delete it, restrict or object to its use, receive a copy, or withdraw consent. Some requests have legal limits, for example where we must keep records for tax, fraud prevention or legal claims.
Email legal@ghoneeti.com with the subject “Privacy Request,” and tell us whether you are the buyer, a recipient or another person named in a song. We may verify your identity before acting, and we will respond within the time the law requires and explain any refusal.
You may also complain to a privacy regulator, such as the Office of the Privacy Commissioner of Canada. We encourage you to contact us first so we can help.
12. Marketing emails
Marketing emails are separate from buying a song. We send them only if you tick the marketing box. Every marketing email identifies us and includes an unsubscribe link, and we act on unsubscribe requests promptly and in any case within 10 business days. Order, delivery and support emails are still sent when needed.
13. Children
Adults may order songs for or about children. Ghoneeti is not directed at children and does not ask children for information. Please share only the information about a child that the song needs. Contact us to remove inappropriate information about a child.
14. Changes to our business
If Ghoneeti is reorganized, becomes a separate company or is sold, information may be shared with genuine advisers or successors as reasonably necessary, under confidentiality and applicable privacy law. We will update the organization and contact details in this Notice if they change.
15. Updates to this Notice
We will publish a new version with a new effective date when our practices change. Where the law requires your consent or advance notice for a new use, we will ask for it rather than relying on an update.
16. Contact us
Ghoneeti | غنيتي, operated by OakPoint Digital Consulting & Management Inc.
Oakville, Ontario, Canada
Privacy requests: legal@ghoneeti.com (subject: “Privacy Request”)
Customer support: support@ghoneeti.com