Your GDPR rights
A practical guide to your data protection rights with Moonsong and how to use them.
Your rights at a glance
| Right | What it means | How to use it |
|---|---|---|
| Access (Art. 15) | Get a copy of your personal data and information about how we use it | Email support@sansavision.com |
| Rectification (Art. 16) | Correct inaccurate data | Change your display name in the app; for anything else, email us |
| Erasure (Art. 17) | Delete your data | Profile → Privacy & data → Delete account, or delete single projects in the app |
| Restriction (Art. 18) | Pause use of your data while an issue is resolved | Email us |
| Portability (Art. 20) | Receive the data you gave us in a machine-readable format | Email us for a JSON copy of your account data. Your songs, covers and lyrics can be exported in the app at any time |
| Objection (Art. 21) | Object to processing based on our legitimate interests | Email us and tell us what you object to |
| Withdraw consent (Art. 7(3)) | Withdraw your AI-processing permission | Profile → Privacy & data in the app |
| Complaint (Art. 77) | Complain to a data protection authority | See below |
How to make a request
- Email support@sansavision.com from the address you use to sign in to Moonsong. Use the subject "Moonsong privacy request".
- Tell us which right you want to use. If you can, say which projects or data it is about.
- We confirm receipt and give you a reference. To check progress, reply to that confirmation email.
If you write from another address, we may ask you to confirm the request from your account email. We never ask for your sign-in code or link, and we don't need identity documents for ordinary requests.
Timing and cost
We respond without undue delay and within one month of receiving your request. For complex or numerous requests we can extend this by up to two further months; if so, we tell you within the first month and explain why. Requests are free of charge. If a request is manifestly unfounded or excessive, we may charge a reasonable fee or decline, and we will explain our reasons.
Our legal bases
- Contract (Art. 6(1)(b)): running your account, storing your projects, generating what you ask for, credits and exports.
- Your permission: AI features only run after you allow AI processing in the app, and you can withdraw that at any time.
- Legitimate interests (Art. 6(1)(f)): security, rate limiting, abuse and fraud prevention, automated safety checks, service logs and cost reconciliation.
- Legal obligation (Art. 6(1)(c)): bookkeeping records and keeping evidence of consent.
Details for each type of data are in the Privacy Notice.
Controller and complaints
The controller is Sansa Group AB (org. nr 559111-9507), Soldathemsgatan 20, 415 28 Göteborg, Sweden. Contact: support@sansavision.com.
You can complain to the supervisory authority where you live, work or where an alleged infringement took place. Our lead authority is:
Integritetsskyddsmyndigheten (IMY), the Swedish Authority for Privacy Protection
Box 8114, 104 20 Stockholm, Sweden
www.imy.se
We'd appreciate the chance to resolve your concern first, but you don't have to contact us before complaining.