Privacy Policy
The mix you upload, the vocal we separate from it and any private preview alignment are kept for five days after processing, then deleted automatically. A locked preview opens in the editor for you alone, with no downloads. When you unlock a full result, its saved timings remain with the track until you delete it. We do not host, store or supply a lyrics corpus.
1. Who we are
LyriSync is a trading name of Toby Johnson, operating from the United Kingdom. The business address is being added. That operator is the data controller for the personal data described here. Contact us with any request about your data.
2. What we hold, and for how long
| What | Kept for | Why |
|---|---|---|
| The mix you upload, and the vocal we separate from it | Five days from processing, then deleted automatically. Deleting the alignment from your library deletes them immediately instead | So you can come back and make adjustments, or reattach the audio after the five days to keep working. Within that window we may also use them, together with any corrections you make, to measure and improve the accuracy of the aligner; see section 3 |
| The words you pasted (or added as a .txt file) and their saved start and end times after a full result is unlocked | Until you delete the track | So you can re-open, correct and re-export the unlocked result. |
| The private full alignment of a locked preview | Five days after processing, then deleted automatically. Deleting the track removes the private preview sooner. | So you can open, play and edit the whole song in the editor before choosing whether to unlock exports. It is shown only to you, without subtitle files, downloads or stems. |
| How far you moved a timing by hand, and where in the track it was. Only if you switch this on in Settings | Until you delete the track, or your account | To find out which kinds of song the aligner gets wrong. Numbers only: never the words, the audio or the track name. Off unless you turn it on; see section 3 |
| Track name and duration | Until you close your account | To label your work and to meter credits. It is part of the record of what each job was charged for, so it stays after you delete the track |
| Your email address | Until you close your account | It is how you sign in, and where we send purchase receipts and one notice before an unpaid free preview is deleted (each notice has a link to stop them) |
| The IP address of each signed-in session | Until you sign out or the session expires | To keep accounts secure, and to spot several accounts opened from one place to collect the free sign-up minutes. We only flag these for a person to look at; the flag never blocks anyone by itself |
| The IP address a track was started from, on an account using legacy free minutes | 2 days | To spot several accounts collecting free minutes from one connection. If two other accounts that have not bought minutes used free minutes from the same connection in the last 2 days, a third is asked to buy minutes before it can run a track. It can also show a reminder of our Terms. The address is also checked against a list of known VPN networks that we keep on our own servers; free minutes are not available from those. The address is never sent to anyone else for this check |
| Until 22 October 2026, a copy of the audio for a track started with free minutes, while it waits to be checked | Until the track is approved or cancelled, usually a minute | So a person can check a free run is a genuine use before it processes. We listen only to decide that, and delete the copy as soon as the run starts or is cancelled |
| Messages you send to LyriSync support, and replies | Until you close your account | To provide support through your account |
| Suggestions you send us | Until you close your account | To improve LyriSync. A suggestion is stored with your account so we know who sent it; we do not ask for your email again |
| Credit and payment records | As long as the law requires for accounting | Legal obligation |
| The After Effects panel, if you install it | Nothing. It holds no account, no token and no history on your computer | It only receives what you send it from this website. See section 4 |
| Basic product stage counts | 90 days, then deleted automatically | To see which stages of the signed-in workflow are used. We link a fixed stage name and time to your account, with a random event identifier to prevent duplicates. An export also records which of your saved alignments was exported, by its identifier, so we can see whether a result was used as it was or corrected first. If you choose a file and then leave the upload screen without processing it, we record one fixed state code (for example lyrics missing, out of minutes, or ready), so we can see what stops people. We do not include lyrics, audio, track names, URLs or free-form notes. This is separate from the optional correction telemetry above |
| Signup source details, only if you choose Allow in the optional prompt | Source details stay until you close your account, or until you choose No thanks while signed in. A minimal withdrawal flag stays until account closure to prevent a pending request restoring them. | To understand which public pages and source categories lead to new accounts. We store a page path, referrer hostname and limited campaign labels, not a full URL. |
We do not store card details. Payments are handled by Stripe, who receive them directly.
Tracks you process as a batch are held and deleted on exactly the same terms as a single upload: each track is its own job, and everything in the table applies to it separately. A .txt lyrics file is read in your browser; only its words are sent, as if you had pasted them.
3. What we do not do
- For five days after processing, we may use your audio together with any timing corrections you make to measure and improve the accuracy of the aligner. We never use the words you paste for this, and nothing is kept for it past the five days: when the audio is deleted, that use ends with it.
- If you switch on “Help improve the aligner” in Settings, we record how far you dragged a word and where in the track it sat, so we can see which kinds of song we get wrong. That is timing numbers and nothing else: not the words, not the audio, not the track name, and nothing that could reconstruct them. It is off unless you turn it on, switching it off stops collection straight away, and deleting a track or your account deletes what came from it. It is separate from the accuracy use of your audio described above, and does not train a model.
- We do not host, supply or build a lyrics database. You bring your own words and we return timing data. The words you pasted are saved only against your own account, only so you can come back to that track, and are never pooled, searched or shown to anyone else.
- We do not sell or share your data with advertisers.
- The website records a small set of signed-in workflow stage counts (for example, workspace opened, processing requested and export requested, or a fixed code such as lyrics missing or out of minutes when you leave the upload screen with a file chosen but not processed). These records contain no lyrics, file names or other song or file content and are deleted after 90 days. This operational count is separate from the correction-telemetry setting in Settings.
- An optional prompt asks whether you allow signup source reporting. If you choose No thanks, we do not save or send signup source details. If you choose Allow, we keep the first public page path, referrer hostname and limited UTM source, medium and campaign labels in the tab until signup completes, then associate them with the new account. We exclude existing accounts, sign-ins and accounts more than 24 hours old. We do not send full URLs, email addresses, IP addresses or device identifiers to the attribution record. Choose No thanks in signup source settings while signed in to withdraw consent and delete the source details. A minimal withdrawal flag stays until account closure to prevent a pending request restoring them. If you are signed out, No thanks stops future collection; sign in later to delete a saved record, or contact us for help. Closing your account deletes this record automatically.
- We do not listen to your uploads by hand. If you ask us to investigate a result within five days of processing, we may still hold the file; after that we will ask you to send it again.
4. The After Effects panel
The panel is optional and the website works without it. This section only applies if you install it.
No sign-in. The panel has no account and holds no token. You sign in on this website only. Nothing the panel does identifies you to us beyond the one export you send it.
The local connection. While the panel is open it runs a small server on your own computer so that "Send to After Effects" on this website reaches it. It listens only on your own machine and never on your network, it can be switched off from the panel, and it stops when the panel closes. Nothing is sent anywhere through it: it is how one program on your computer speaks to another. It accepts only the identifier of one of your own alignments plus a short lived signed permission slip issued by us, never a web address and never a script, so that a page cannot use it to run code inside After Effects.
What it sends us. That permission slip, once, to download the generated After Effects script for the track you chose to send. That is all. The panel contains no analytics, no telemetry and no crash reporting, and it contacts no server other than lyrisync.com.
Removing it. Uninstalling the panel removes it. It kept nothing else on your computer. This does not affect the alignments or designs saved to your account, which you delete from the website.
5. Legal basis
We process your account details and your files to perform the contract you enter into when you use the service (UK GDPR Article 6(1)(b)). We keep payment records to meet a legal obligation (Article 6(1)(c)). Where we use limited operational data to keep the service working and secure, including stopping abuse of the free minutes, that is our legitimate interest (Article 6(1)(f)).
We process optional signup source details only with your consent (Article 6(1)(a)). You can withdraw it using the control in section 8.
6. Processors we use
- Supabase, for authentication and the database that holds your account and your timings. Hosted in the EU.
- Modal, for the GPU processing that separates the vocal and aligns the words. That processing may also run on GPU hardware we operate ourselves in the UK, as a fallback; your audio is then held there under the same five-day rule.
- Vercel, for hosting the website itself and for the visitor statistics described under Cookies below.
- Stripe, for payments.
- Cloudflare, for Turnstile, which checks that a sign-in attempt is coming from a person rather than a script. It runs on the sign-in page and receives your IP address and some device and browser signals; it may set its own cookie. See Cookies below.
- Cloudflare also carries your audio, encrypted in transit, to our own GPU hardware when processing runs there.
Each of these processes data on our instructions. Some processing takes place outside the UK; where it does, it is covered by the transfer safeguards those providers offer.
7. Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to processing, or ask for it in a portable form. You can delete individual tracks yourself at any time from the upload screen. To close your account and remove everything, email us.
If you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first.
8. Cookies and visitor statistics
We set the cookies needed to keep you signed in. We do not run advertising or cross-site tracking.
The app also keeps a few preferences in your browser's local storage, such as the editor panel height, export and preview choices, saved Studio presets and whether you have already seen a feature announcement. They stay on your device and are not sent to us; clearing your browser data removes them.
The optional signup source prompt stores your choice in a necessary first-party preference cookie. If you allow reporting, the limited source details stay in session storage until signup or the tab closes.
Invites closed on 26 October 2026, and we no longer set an invite cookie. For invites redeemed before then, we keep the record of which account invited which, so the inviter can still be given the promised minutes, and the count of when invite links were copied.
The sign-in page also loads Cloudflare Turnstile, which checks that a sign-in attempt is coming from a person rather than a script. Turnstile can set its own cookie and receives your IP address and some device and browser signals directly from your browser; this runs only on that page, not across the rest of the site.
We do count visits, using Vercel Analytics. It records which pages are viewed and roughly where in the world the request came from. It sets no cookie, stores no identifier for you, and does not follow you to any other site, so there is nothing here to opt into or out of. It is served from this domain by the same company that already hosts it, so no additional third party receives your data.
We also measure how quickly pages load for real visitors, using Vercel Speed Insights. That is timing about the page, not about you: how long the main content took to appear, how much the layout moved while it did, and how quickly it responded when you first tapped something. It sets no cookie and stores no identifier either, and it is served from this domain by the same company, on the same terms as the paragraph above. We use it to find pages that are slow to read on a phone.
9. Changes
If we change what we keep or for how long, we will update this page and, where the change is material, tell you before it takes effect.
See also our Terms of Service.