Privacy policy
Soundliner ("we", "us") is an independently operated service. This policy explains what personal data we handle, why, and what rights you have. We're the data controller for information collected through soundliner.com. For anything unclear here, email support@soundliner.com.
What we collect
We collect only what we need to run the service:
- Account info: email address, and (if you set them) a display name and handle.
- Profile and content: what you put on your artist page: bio, images, links, releases, shows, galleries, timeline entries.
- Fan relationships: for fan accounts, the artists you follow; for artist accounts, aggregate follow and subscribe counts on your content.
- Release-day email waitlist: for artists' upcoming releases, the emails fans opt in with (double opt-in) and their unsubscribe state.
- Page-view analytics: anonymized views and link clicks on public pages, plus coarse country/city from IP. We don't store raw IP addresses and we don't use tracking cookies.
- Support messages: anything you send us by email.
- Operational logs: request logs and error traces used to keep the service running and secure.
Payment card details are handled by Paddle, not us. We receive a customer ID, subscription status, and billing period from Paddle — never card numbers.
Why we use it
- Provide the service: creating your account, hosting your site, delivering images, sending release-day emails you or your fans opted into.
- Keep it working: security, fraud prevention, abuse response, debugging.
- Improve it: understanding how features are used at an aggregate level.
- Support: replying to you.
- Legal obligations: tax, accounting, and other requirements.
Legal bases: performance of our contract with you (running the service), our legitimate interests (security, product improvement, aggregate analytics), your consent (release-day notifications you opt into), and legal obligations where they apply.
Who we share it with
We use a small number of processors to run Soundliner:
- Supabase: authentication and database hosting.
- Cloudinary: image storage, transformation, and delivery.
- Resend: transactional email and release-day notifications.
- Paddle: Merchant of Record for subscription payments, billing, tax compliance, and invoicing.
- Cloudflare: hosting infrastructure, DNS, and edge security.
Each processor handles data only to provide their service to us, under contract. We may also share information with professional advisers (legal, accounting) and with authorities where required by law. We do not sell personal data and we do not use your data for third-party advertising.
International transfers
Our processors operate globally, which means data may be processed outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
How long we keep it
We keep account and profile data for as long as your account is active. When you delete your account through Settings, our delete-account flow removes your profile, content, media assets, and cancels your subscription; some records are retained briefly in backups (typically up to 30 days) and longer where required by law (for example, tax records). If a paid subscription ends without renewal, your content is retained so you can resubscribe and restore your site. Aggregate, non-identifying analytics may be kept indefinitely.
Your rights
Depending on where you live, you have some or all of the following rights:
- Access a copy of your data.
- Correct data that's wrong.
- Delete your account and data (Settings → Delete account).
- Export your content.
- Object to or restrict certain processing.
- Withdraw consent — unsubscribe from any release-day email via the link in the email, or manage suppression from Settings.
- Complain to a supervisory authority in your country.
To exercise a right that isn't self-serve in the product, email support@soundliner.com. We aim to respond within one month.
Security
We use appropriate technical and organizational measures to protect your data — encryption in transit, access controls, environment isolation, and least-privilege service credentials. No system is perfectly secure; if something goes wrong that affects you, we'll tell you.
Cookies
We use essential cookies and local storage to keep you signed in and remember preferences (like theme). We do not use advertising, third-party tracking, or analytics cookies. Public artist pages do not require cookies to view.
Children
Soundliner isn't directed at children under 13 (or the equivalent age in your country). If you believe we hold data about a child that shouldn't be there, email us and we'll delete it.
Changes to this policy
We may update this policy as the product or our processors change. The effective date at the top reflects the latest version; material changes will be communicated by email or in-product notice where reasonable.
Contact
Data protection questions or requests: support@soundliner.com.