Privacy Policy

We collect the following types of information:

• Account information: Name, email address, and authentication credentials when you create an account (directly or via Google OAuth).
• Phone number: Optionally provided for SMS verification and text alerts.
• Usage data: Information about how you interact with the Service, including pages visited, features used, and actions taken.
• Organization data: Workspace and team information associated with your organization account.
• Cookies and local storage: Authentication tokens and session preferences stored in your browser.

• To provide, operate, and maintain the Service
• To authenticate your identity and secure your account
• To send SMS verification codes and text alerts (with your consent)
• To improve and personalize the Service
• To communicate with you about your account or the Service
• To comply with legal obligations

We use the following third-party services to operate the platform:

• Google Firebase: Authentication (including Google OAuth) and real-time data storage.
• Twilio: SMS delivery for phone verification and text alerts. When you provide your phone number, it is shared with Twilio to deliver messages. See Twilio's Privacy Policy.
• PostgreSQL hosting: Relational data storage for artist, playlist, and analytics data.

These services have their own privacy policies governing how they handle your data. We encourage you to review them.

If you opt in to SMS features:

• Your phone number is stored securely and shared only with Twilio for message delivery.
• We will not sell, rent, or share your mobile opt-in information or phone number with any third parties for any purpose, except as required by Twilio to deliver messages on our behalf.
• Message frequency varies based on account activity.
• You can opt out at any time by texting STOP to +1 (833) 371-2184 or removing your number in settings.
• Text HELP to +1 (833) 371-2184 for assistance.
• Standard message and data rates may apply.

We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within a reasonable timeframe, except where we are required to retain it by law.

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of SMS communications at any time
• Export your data where technically feasible

To exercise any of these rights, contact us at the email below.

The Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such data, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy, please contact us at support@indiestack.com.