Privacy Policy

1. Who is responsible

[company legal name], [registered address], is responsible for your personal data on SoundMatch. Contact: [privacy contact email].

2. What we collect

• Account: your email address and password (stored only in hashed form), and when you signed up and last signed in.
• Profile: name, username, role, location, bio, photo, skills, what you're looking for, genres and influences.
• Music: the tracks you upload, with their title, length and file details.
• Activity: who you like and pass on, your matches, your messages, and the people you block.
• Reports: reports you make or that are made about you (see section 6).
• Consent: which version of our Terms and this policy you accepted, and when.
• Technical: our hosting providers keep standard server logs, which include IP addresses and browser details.

3. Why we use it

• to run your account and the service you asked for (suggestions, matches, chat);
• to keep SoundMatch safe: blocking, reviewing reports and preventing abuse;
• to secure the service and fix problems.

We don't sell your data, show ads, or use advertising or analytics trackers. Legal bases: [e.g. contract for running the service; legitimate interests for safety and security].

4. Who can see what

• Signed-in SoundMatch users can see your profile, photo and tracks. Photo and track files can be opened by anyone who has their link.
• Your messages are visible only to you and the person you matched with.
• Your email address, likes, passes and blocks are never shown to other users.

5. Service providers

• Supabase — database, sign-in and file storage, hosted in the EU (Frankfurt, Germany).
• Vercel — website hosting. [confirm hosting region and international transfer safeguards]
• Email delivery — [email provider, once configured]

6. How long we keep it

We keep your data while your account exists. When you delete your account, we permanently delete your account, profile, photo, music, likes, passes, matches, conversations, blocks and consent records.

Exception — safety reports: reports are kept after either person deletes their account, with the link to the account removed. A report keeps a snapshot of the reported profile (name, username, role, location, bio, photo link) and, if the two people had matched, up to the last 100 messages of their conversation, so that abuse can still be investigated. Reports are kept for [retention period].

Server logs and backups held by our providers are kept for [provider log and backup retention periods].

7. Cookies

We use only the cookies needed to keep you signed in. We don't use advertising or analytics cookies.

8. Your rights

You can view and edit your profile at any time, and delete your account from your profile page. Depending on where you live, you may also have rights to access, correct, export, restrict or object to the use of your data, and to complain to a data protection authority. To use them, contact [privacy contact email].

9. Children

SoundMatch is not for anyone under [minimum age]. See our Terms of Service.

10. Changes to this policy

If we change this policy in a meaningful way, we will publish a new version with a new effective date and ask you to accept it before you continue using SoundMatch.