Privacy Policy
Version 1.3 · last updated: 15 October 2026
In short: we collect only what we need to make your song and issue your receipt or invoice. No advertising cookies, no tracking, no selling of data. Fonts and content load from our own server; the only external thing on the page is a visit counter that uses no cookies. We don't pass your data to third parties for marketing.
1. Data controller
BAUFIZIK EOOD („БАУФИЗИК“ ЕООД), company no. 207427793, 39 Tsanko Tserkovski St., office 214, 5000 Veliko Tarnovo, Bulgaria, represented by Avram Rusev Avramov.
Contact for all personal data questions: sales@pesenta.bg
2. What data we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Name, email, phone (optional) | performing your order, issuing the sales receipt, sending the finished song, contacting you — including a reminder if a payment wasn't completed | Art. 6(1)(b) — performance of a contract and steps before it |
| Your story and the details for the song (may include personal data about you and third parties) | writing the lyrics and creating the music with music-generation software (Suno, USA) | Art. 6(1)(b); for third parties' data — you declare that you have the right to share it |
| Invoicing data | issuing an invoice and accounting | Art. 6(1)(c) — legal obligation |
| IP address and technical logs | technical operation and security of hosting | Art. 6(1)(f) — legitimate interest |
We do not knowingly collect data about children; orders are accepted only from persons over 18. We do not profile and do not make automated decisions.
Where you came from. We remember the first page you opened and where you arrived from — only for the duration of your visit and only in your browser, without cookies — and send it with your order so we know which pages are useful.
Photos for the cover. If you upload photos with your order, they reach us as attachments to the order email, resized by your browser. We use them only for the song's cover and personal page and keep them as long as the order itself.
Telling the story by voice. If you use "Or tell it by voice", the recording of your voice reaches us as an attachment and is used for the same purpose as your written story (making the song). Turning speech into text is done by your browser — in some browsers (e.g. Google Chrome) through the speech service of its maker, under that maker's privacy policy. It is entirely optional; you can type the story instead.
3. Who has access to the data (processors)
We use a small number of providers without which the service can't work. Data is shared with them only as far as necessary:
| Provider | What for | What data | Policy |
|---|---|---|---|
| Suno (Suno, Inc., USA) | generating the music and vocals from the song's lyrics | the lyrics and style instructions; NO email, phone or payment data is sent | policy |
| FormSubmit (formsubmit.co) | receiving orders from the order form and delivering them to our email | all data entered in the form | policy |
| Google (Gmail) | the mailbox where we receive and keep correspondence | order data and follow-up communication | policy |
| Cloudflare (Web Analytics; Workers) | counting page visits and anonymous actions without cookies; storing your order story and issuing the sales receipt | IP address (processed instantly, not stored), page address, referrer, browser and device type; the order story and order number | policy |
| Brevo (Sendinblue SAS, France) | sending the automatic emails — the sales receipt and reminders | email address and the content of the email | policy |
| GitHub Pages (hosting) | technical operation of the website; standard server logs | IP address and technical data when loading the site | policy |
| Stripe Payments Europe | processing card payments | payment data — entered directly with Stripe, not with us | policy |
We do not sell or rent data to third parties for marketing purposes.
4. How long we keep data
- unfulfilled or declined orders — up to 12 months from submission
- data on issued invoices and receipts — 10 years, as required by accounting law
5. Cookies and local storage
The website uses no cookies — not for tracking, analytics or advertising — so there's no cookie banner either. To count visits we use Cloudflare Web Analytics, which sets no cookies, stores nothing in your browser and doesn't track individual visitors. We also count a few actions anonymously — playing a sample, opening the order form, recording by voice, sending an order: only the action's name, the page (without the address parameters) and the time, with no cookies, no IP address and no visitor ID. They are kept in our own database at Cloudflare and used only to learn what on the site helps. The only things we keep are functional entries in your device's localStorage (they are not sent to us):
| Key | Purpose | How long |
|---|---|---|
pesenta_orders | a “My orders” list, visible only on your device | until you clear your browser data |
pesenta_lang | remembers that you ordered from the English site, so the page after payment is in English | until you clear your browser data |
You can delete them at any time in your browser settings. Stripe may set its own cookies on its payment page — they are described in Stripe's policy.
6. Your rights
At any time you can ask us for access to your data, rectification, erasure (“the right to be forgotten” — except data the law requires us to keep), restriction of processing, portability, and you can object. Write to the email above — we reply within 30 days.
If you believe we process your data unlawfully, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg, 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia) or with the data protection authority of your EU country of residence.
7. Security
The website is served over HTTPS. Orders are kept in a protected mailbox with two-factor authentication. Only the people working on your song have access to the data.
8. Changes to this policy
When we change it, we publish the new version here with a new date and version number. We will mark significant changes visibly on the website.