Privacy Policy

1. Data controller

The data controller responsible for your personal data is the publisher identified in the “Who we are” section above. For any question about this policy or your data, contact us at [email protected].

2. What data we collect

We only collect the data we need to operate the service. Depending on how you use Songfindr, this may include:

• Account data: your name, email address, and password (passwords are stored in hashed form by our authentication provider, never in plain text).
• Authentication data: if you sign in with Google, we receive your name, email address, and profile picture from Google. We never receive your Google password.
• Profile and preference data: your customer segment, language, and settings.
• Billing and transaction data: your purchase history, licenses, subscription status, and billing details. Card numbers are processed and stored solely by our payment provider (Stripe) - we never see or store your full card number.
• Content you create: playlists, projects, favorites, and any names or descriptions you add to them.
• Technical and usage data: IP address, approximate country (used to display the correct currency), browser and device information, pages viewed, and interactions with the site.
• Communications: messages you send us for support or quotes.

3. Why we use your data and on what legal basis

We process your data for the following purposes:

• To create and manage your account and provide the service - legal basis: performance of our contract with you.
• To process payments, subscriptions, and issue licenses and invoices - legal basis: performance of our contract and compliance with legal obligations.
• To provide customer support and respond to your requests - legal basis: performance of our contract and our legitimate interest.
• To secure the service, prevent fraud, and debug problems - legal basis: our legitimate interest.
• To measure how the service is used and improve it through privacy-focused analytics - legal basis: our legitimate interest in maintaining and improving the service.
• To send you service-related emails (e.g. welcome, password reset, payment confirmations) - legal basis: performance of our contract.
• To comply with accounting, tax, and other legal obligations - legal basis: legal obligation.

4. Service providers and data sharing

We do not sell your personal data. We share it only with the service providers (processors) that help us run Songfindr, and only to the extent needed:

• Stripe - payment processing and subscription management.
• Resend - transactional email delivery.
• PostHog (EU region) - privacy-focused product analytics.
• Bunny CDN - file storage and content delivery for audio and images.
• Cloudflare - DNS, security, and geolocation for currency display.
• We may also disclose data where required by law, or to protect our rights, safety, or property.

5. International transfers

Some of our providers (such as Stripe) may process data outside the European Economic Area. Where this happens, the transfer is protected by appropriate safeguards - typically the European Commission’s Standard Contractual Clauses - so that your data continues to receive an equivalent level of protection.

6. How long we keep your data

We keep your account data for as long as your account is active. After you delete your account, we remove or anonymize your personal data, except where we must retain certain records (for example invoices and transaction records) to meet legal, accounting, and tax obligations, which we keep for the legally required period.

7. Cookies and similar technologies

We use cookies and similar technologies that are strictly necessary to run the service (for example to keep you signed in and to remember your language and cart). We also use privacy-focused analytics to understand how the service is used so we can improve it; this is based on our legitimate interest. You can object at any time, or block non-essential cookies through your browser settings.

8. Your rights

Under the GDPR, you have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw your consent at any time. You can exercise most of these rights from your account, or by emailing [email protected]. You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) or your local supervisory authority.

9. Data security

We take reasonable technical and organizational measures to protect your data, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the authorities of any breach where required by law.

10. Children

Songfindr is not directed to children. You must be at least 16 years old (or the minimum age required in your country to consent to data processing) to create an account. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the service after an update means you accept the revised policy.