Privacy policy
Updated 11 October 2026
Account information
We verify your shared account through the existing authentication provider and store your account ID, email, and display name in the separate SongShelf service. Your password is submitted directly to that authentication provider; SongShelf does not store passwords. Shared sign-in cookies can recognize your session across aicytk.com subdomains.
Download and order records
We store credit grants, download requests, transfer status, and any SongShelf order records to deliver files, prevent duplicate charges, and provide support. Download history shows your latest 100 requests. Credit and order records remain while the account exists and as needed to resolve payment or service issues.
Temporary files and diagnostics
Prepared audio files are kept for up to 24 hours and may be removed earlier to protect server capacity. Download links expire after 24 hours; a valid retry can prepare the file again. Search-result handles expire after two hours; active download tasks retain the metadata needed for their retry window. Operational timing and availability metrics are retained for up to 90 days. We use the connecting IP for a short-lived rate limit.
Service providers
Cloudflare delivers this website and file transfers. Our service verifies authentication with Supabase. When purchases are enabled, the configured payment provider processes payment details; SongShelf does not store card details. Providers may process requests in different regions.
Your choices
Signing out here ends the SongShelf session on this browser without signing you out of HeartSong. Contact support@aicytk.com to request access, correction, or deletion of SongShelf account data. Necessary order and security records may be retained where required.