Privacy
Last updated: Sept 27, 2026 · draft, to be reviewed by a lawyer before launch
👉 In short: Your chat is read on your phone. We only send a short excerpt with no phone numbers to write the song, then it's gone. We keep your song for 30 days max. We don't sell anything, don't do targeted ads, and don't train any AI on your messages.
1. Who we are
lilchat.wtf is run by [COMPANY], [address], registered in France under [number]. Data controller: [COMPANY]. Privacy contact / DPO: privacy@lilchat.wtf.
2. What we process, and what we don't
- Your WhatsApp export file: never uploaded. It's opened and analysed in your browser. Photos and videos in an export “with media” aren't even unzipped.
- A pseudonymised excerpt: first names or nicknames, some stretches of conversation and stats. Phone numbers, emails, links and long numbers are masked before sending, and surnames are removed. The excerpt is only used to understand the chat and write the lyrics. It is never stored: it stays in memory during generation (about 2 minutes) and then disappears.
- Your song: title, lyrics, artwork and audio file. It's kept for 30 days, then deleted automatically. You can delete it right away from its page.
- Technical data: a random device ID (cookie) for your free song, and a hashed IP address to prevent abuse (kept 24h).
- Analytics: anonymous events (“song played”, “link shared”…) with no chat content, no names and no song titles.
3. Why (legal bases)
- Making your song: performance of the service you request (GDPR art. 6.1.b) and your consent (art. 6.1.a).
- Preventing abuse and moderating: legitimate interest (art. 6.1.f), to protect the people mentioned and the service.
4. The people in your chat
👉 In short: Your friends didn't sign anything, so we do everything to protect them.
- You must have their OK before making a song, and you confirm it before generating.
- Lyrics are automatically moderated. No mocking looks, orientation, health or origins. No sexual content, no sensitive data, no surnames or addresses.
- Songs aren't public: they can only be opened with the link, and search engines don't index them.
- You're in a song? Tap “Report” then “I'm in this song and want it gone”: it's hidden immediately.
5. Our processors
- Anthropic (chat analysis and lyrics, Claude): USA, under standard contractual clauses. No training on your data.
- ElevenLabs and Google (audio generation): standard contractual clauses.
- Vercel (hosting, EU region), Upstash (database, EU region), PostHog (analytics, EU hosting).
6. Your rights
Access, rectification, erasure, objection, restriction, portability: email privacy@lilchat.wtf. You can also complain to the CNIL (cnil.fr) or your local data protection authority.
7. AI and transparency
Lyrics and music are generated by AI, and every song is labelled as such (EU AI Act, art. 50). Audio files may carry an invisible marker (C2PA or SynthID) showing they were made by AI.