Your story remains
yours to share.

This Privacy Policy explains how Wall Way Co., Limited (“Avera,” “we,” “us”) handles information when you visit Avera Song, create a preview, order a song, or contact support. Our service is intended for people aged 18 or older.

1. Who is responsible

Data controller: Wall Way Co., Limited, WORKSHOP 60, 3/F, BLOCK A, EAST SUN INDUSTRIAL CENTRE, NO. 16 SHING YIP STREET, KOWLOON, HONG KONG, Hong Kong company registration number 3228710.
Privacy and customer support: hello@averasong.com.
A privacy officer is not separately appointed.

2. Information we collect

• Account and order details: email address, names entered for a song, occasion, story, music preferences, order status, discount or referral use, and support messages.
• Song content: lyric drafts, generated audio, selected version, and gift-page text and presentation settings.
• Payment records: order amount, currency, payment status, provider transaction identifiers and refund status. Avera does not store full card numbers or card security codes.
• Security and service data: request time, browser and device signals, IP-derived security hashes, rate-limit and abuse-prevention events, error logs, and actions needed to keep accounts and orders secure.
• Usage choices: consent for optional analytics, playback and service events, and any separate permission to publish a song as a public example.

We do not currently accept photo or voice uploads for song covers or generation. Avera creates cover art using its own branded templates.

3. How we use information

• To create your free preview and, if purchased, your complete song and gift page.
• To operate your account, provide support, send essential order and security notices, and process a payment or refund.
• To prevent repeated free-preview abuse, fraud, prohibited requests, and security incidents.
• To maintain service reliability and comply with accounting, tax, and other legal duties.
• To measure optional site usage only after you give consent. You can change this choice through Privacy settings.

We do not sell personal information. We do not send your story, names, email address, or lyrics as analytics event properties. We do not use customer stories or songs to train our own AI models.

4. AI and service providers

Lyrics are generated using Cloudflare Workers AI with the Qwen3 30B A3B model currently configured for Avera. Cloudflare Workers AI with Meta Llama Guard 3 8B screens submitted story text and lyric text for safety. Music is generated through Kie.ai’s ai-music-api/generate service using its configured Suno-compatible V6 mode. To perform these tasks, relevant story details, preferences and lyrics are sent to those providers. Providers process this information under their own terms and privacy practices.

Cloudflare also hosts the website, database, and private audio storage. Resend processes account email addresses and essential message content for sign-in and order email. Google Tag Manager loads only if you consent; it may load analytics tags selected by Avera, and we configure analytics to avoid sending your story, names, email address, or lyrics. You can reject optional analytics or change your choice using Privacy settings. We will identify the payment provider at checkout before accepting live payments; the current Avera site is in a controlled test environment, and Waffo Pancake is not currently connected to checkout.

5. Payments and public sharing

When live checkout is enabled, the payment provider processes card details on its secure checkout page. Avera receives the order and transaction status, not your full card number or security code. The payment provider’s own privacy notice applies to its processing.

Orders and gift pages are private by default. A gift page may be opened by anyone who has its published link. A song appears in the public Listening Room only after you separately choose anonymous or named publication. You may withdraw that permission for future display by contacting us.

6. Cookies, analytics and security

Avera uses a necessary, secure, HTTP-only login cookie to keep you signed in and to protect account actions. Optional analytics are disabled until consent. We use HTTPS, hashed passwords and access controls. Security signals used for preview-abuse prevention are stored as hashes where technically supported. No online service can guarantee absolute security.

7. Retention

• Account and song data: while needed to provide the service and support your account. If you request account or content deletion, we aim to delete or de-identify material within 30 days, except material we must retain for legal, security, dispute, or accounting reasons.
• Business transaction records: retained for at least seven years where required for Hong Kong tax and accounting records.
• First-party analytics events: up to 90 days.
• Safety event records: contain the check result and category, not the submitted story or lyric text, and are retained for up to 12 months for safety and abuse prevention.
• Unfinished creation form: saved in the current browser tab for up to 24 hours and is not an order until submitted.

8. International processing

Cloudflare and the AI, email, analytics and payment providers may process information in countries other than the one where you live. Where required, we use contractual and other safeguards for international transfers. You can contact us for information about the safeguards applicable to a specific provider.

9. Your choices and rights

You can ask to access, correct, export, or delete your personal information, or object to or restrict certain processing, by emailing hello@averasong.com. We aim to respond within 30 days. We may need to verify your identity before acting. Some records may be retained where required by law or needed to establish, exercise, or defend legal claims. You may also complain to the data-protection authority in your jurisdiction.

Marketing messages, if sent, will include an unsubscribe option. Essential messages about orders, payments, account security, and policy changes are not marketing and may still be sent.

10. Children

Avera accounts and purchases are for adults aged 18 or older. We do not knowingly accept an account from a child. If you believe a child has supplied personal information, contact us so we can review and remove it where appropriate. Content involving sexualization of minors is prohibited under our Acceptable Use Policy.

11. Changes and contact

We will update this page when our data practices materially change and update the effective date above. Questions or requests: hello@averasong.com, Wall Way Co., Limited, WORKSHOP 60, 3/F, BLOCK A, EAST SUN INDUSTRIAL CENTRE, NO. 16 SHING YIP STREET, KOWLOON, HONG KONG, Hong Kong company registration number 3228710.