Privacy Policy
Last updated: [DATE TBD]
This Privacy Policy explains what personal data RightsFreeSound ("we", "us") collects when you use this site, how we use it, who we share it with, and what choices you have. By using this site, you agree to the practices described below.
1. Information We Collect
Account data. When you create an account, our authentication provider (Supabase) stores your name, email address, and a hashed password. If you sign in with Google, we receive whatever profile information Google provides for that sign-in, typically your name, email address, and profile photo.
Billing and payment data. All payments are processed by Paddle, our payment provider and Merchant of Record. We do not collect or store your card details. Paddle collects and stores billing information such as your name, email, and billing address, which it uses to process payments and to meet invoicing and tax obligations.
Usage data. We store data related to your use of the site, including tracks you favorite, your purchase and subscription history, and your download history. This data is stored in our database (Supabase).
Contact form submissions. If you contact us through our contact form, we store the name, email address, and message you submit.
Technical data. Our hosting provider, Cloudflare, automatically logs standard web server data such as your IP address, browser and device information, and general (country-level) location. We use country-level location only to support accurate price localization through Paddle. This data is not used for advertising purposes.
Cookies. We use only functional, session-based cookies required to keep you signed in via Supabase Auth. We do not use third-party advertising or retargeting cookies, and we do not run ad campaigns.
2. How We Use Your Information
We use the information above to:
- Create and maintain your account, and keep you signed in
- Process purchases and subscriptions, and issue license PDFs
- Provide access to purchased or licensed tracks and downloads
- Respond to messages sent through our contact form
- Maintain the security and proper functioning of the site
- Comply with tax, accounting, and other legal obligations
3. Legal Basis for Processing
We process your personal data because doing so is necessary to perform our contract with you (creating your account, fulfilling purchases and licenses), to comply with legal obligations (such as tax record-keeping handled by Paddle), and because of our legitimate interest in operating and securing the site.
4. Who We Share Data With
We do not sell your personal data to third parties. We share data only with service providers who help us operate the site (our sub-processors):
- Supabase — database and authentication hosting
- Paddle — payment processing, billing, and tax compliance, acting as Merchant of Record for all purchases
- Cloudflare — site hosting, content delivery, and storage of audio and image files
- Google — only if you choose to sign in with your Google account
5. Data Retention
We retain account and usage data for as long as your account remains active. Billing records are retained by Paddle for as long as required to meet invoicing and tax obligations. Contact form messages are retained only as long as needed to respond to and resolve your inquiry.
6. Security
We rely on the security infrastructure of our providers — Supabase, Paddle, and Cloudflare — to protect your data, including encrypted storage of passwords and encrypted transmission of data over HTTPS. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.
7. Children's Privacy
This site is not directed at, and is not intended for use by, anyone under the age of 18. We do not knowingly collect personal data from children.
8. Your Rights
You can review and update your name and email address at any time from the Account Information tab in My Account, and change your password from the Password Change section on the same page. To request access to, correction of, or deletion of your personal data, or if you have any other privacy question, please contact us.
9. International Users
Our customers are located worldwide. By using this site, you understand that your data may be processed by us and by our service providers (Supabase, Paddle, Cloudflare, Google) in countries other than your own, which may have different data protection laws than your home country.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date above. Continued use of the site after changes are posted means you accept the revised policy.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please get in touch.