Privacy Policy

1. Introduction

SongSurf ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our service for community-powered music playlist management.

2. Information We Collect

2.1 Account Information

• Spotify account information (username, email, profile picture)
• Account creation and last login timestamps
• Subscription and billing information (if applicable)

2.2 Playlist and Music Data

• Playlist names, descriptions, and criteria you create
• Song submissions and moderation results
• Usage statistics (number of submissions, playlist activity)
• Spotify playlist IDs and metadata

2.3 Technical Information

• IP addresses and browser information
• Usage patterns and feature interactions
• Error logs and performance data
• Device and browser specifications

3. How We Use Your Information

• Service Delivery: Manage playlists, process song submissions, and AI content moderation
• Account Management: Authenticate users, manage subscriptions, and provide support
• Spotify Integration: Access and modify your Spotify playlists as authorized
• Improvements: Analyze usage patterns to improve our service and AI algorithms
• Communication: Send important service updates and notifications
• Compliance: Meet legal obligations and enforce our terms

4. Data Sharing and Third Parties

4.1 Third-Party Services

• Spotify: We access your Spotify account to manage playlists as authorized
• OpenAI: Song lyrics and metadata are processed for AI content moderation
• Hosting Services: Your data is stored on secure cloud infrastructure
• Payment Processors: Billing information is processed by Stripe (if applicable)

4.2 Data Sharing Principles

We do not sell, trade, or rent your personal information to third parties. We only share data:

• With your explicit consent
• To provide our core services (Spotify integration, AI moderation)
• When required by law or to protect our rights
• In case of business transfer (merger, acquisition, etc.)

5. Your Rights and Choices

5.1 Access and Control

• Access: View and download your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your data

5.2 How to Exercise Your Rights

You can manage your account settings and exercise your rights through your account dashboard, or contact us through our contact form for assistance.

6. Data Security and Retention

6.1 Security Measures

• Encryption in transit and at rest
• Regular security audits and updates
• Access controls and authentication
• Secure cloud infrastructure

6.2 Data Retention

• Account data: Retained while your account is active
• Playlist data: Retained for service functionality
• Usage logs: Retained for 12 months for analytics
• Deleted accounts: Data is permanently deleted within 30 days

7. Cookies and Tracking

We use essential cookies for authentication and service functionality. We do not use tracking cookies for advertising purposes. You can manage cookie preferences in your browser settings.

8. International Data Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place to protect your data in accordance with applicable privacy laws.

9. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.

10. Changes to This Policy

We may update this privacy policy periodically. We will notify you of significant changes through our service or by email. Your continued use of SongSurf after changes indicates your acceptance of the updated policy.

11. Contact Information

If you have questions about this privacy policy, want to exercise your privacy rights, or need assistance with your personal data: