Privacy Policy

Soundcave.io is operated by JOTA Enterprises LLC, a Florida limited liability company. This policy explains what personal data we collect through the Service, why we collect it, and what rights you have over it.

When you create and use an account, we collect:

• Account info: your email address and password (we never see or store your password in plain text — authentication is handled by our infrastructure provider, Supabase, using industry-standard hashing).
• Profile info: anything you choose to add, such as your display name, handle, bio, avatar image, and social media links.
• Smart link content: the track titles, artist names, cover art, and destination URLs you add to your links.
• Payment info: if you subscribe to a paid plan, our payment processor, Stripe, collects your card details directly. We never receive or store your full card number — we only receive a customer and subscription reference from Stripe.

When someone clicks one of your smart links, we log data to power your analytics dashboard: which streaming service or platform they clicked, an approximate country (derived from IP address, which we don't store), a general device type (mobile, tablet, or desktop), the referring page if one was sent by the browser, and — where detectable from the browser's user-agent — whether the click came from an app like Instagram or TikTok's built-in browser, or a regular browser like Chrome or Safari. We use this data to show you analytics about your own links; we don't sell it or use it to build advertising profiles of your fans.

We use a small number of strictly necessary cookies to keep you signed in and to remember your session. We also use Google Analytics to understand how visitors use our site, which sets its own cookies to distinguish visitors and measure traffic. We don't use advertising or cross-site retargeting cookies.

We use the data described above to:

• Operate and maintain your account and smart links;
• Show you analytics about clicks on your own links;
• Process payments and manage subscriptions;
• Send you service-related email (account confirmation, billing receipts, important changes to these policies);
• Detect and prevent abuse, fraud, or violations of our Terms of Service; and
• Improve the Service.

We share data only with the service providers that help us run Soundcave:

• Supabase — our database, authentication, and file storage provider;
• Vercel — our hosting provider;
• Stripe — our payment processor;
• Google Analytics — measures site traffic and usage;
• Modal — processes the audio and video files you upload to Video Maker (lyric sync and video export);
• Resend — delivers our product emails (your email address and the message content pass through it).

We don't sell your personal data, and we don't share it with third parties for their own marketing purposes. We may disclose information if required by law or to protect the rights, property, or safety of Soundcave, our users, or the public.

Product emails. Besides account emails (payments, security, password resets), we may send occasional news and tips about Soundcave to the address on your account. Every one has an unsubscribe link, and you can turn them off any time in Settings. If you signed up from the European Economic Area, the United Kingdom or Switzerland, we send these only if you turned them on yourself in Settings. When you unsubscribe, we keep your address on a list only so we don't email you again. We also stop emailing addresses that bounce or report a message as spam.

Soundcave Charts. Unless you opt out, your active smart links can be shown to other Soundcave users in Soundcave Charts: the link's title, artist name, cover art, and its rank, which we calculate from anonymous fan activity (clicks and countries). We never show who the fans are. You can opt out for your whole account in Settings, or for individual links from their editor; your links then stop appearing in the charts.

We keep your account and link data for as long as your account is active. If you delete a smart link, its analytics are deleted with it. If you delete your account, we delete your personal data within a reasonable period, except where we're required to retain records (for example, payment records) for legal or accounting purposes.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to or restrict certain processing. You can access and correct most of your account and profile data directly from your Settings page. For anything else, including account deletion, email hello@soundcave.io and we'll take care of it.

Soundcave is operated from the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S. and other countries where our service providers operate, which may have different data protection laws than your own country.

The Service isn't directed at children, and we don't knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we'll delete it.

We use reasonable technical and organizational measures to protect your data, including encryption in transit and access controls on our infrastructure. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

We may update this policy from time to time. If we make material changes, we'll notify active users by email or an in-app notice before the changes take effect.

Questions about this policy or your data? Email hello@soundcave.io.