Privacy Policy

Last Updated: November 18, 2025

At Rock N' Roll Basement, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and share your personal information.

1. Information We Collect

Account Information

• Email address (for authentication and communication)
• Name and profile information (if provided)
• Authentication tokens (from Google OAuth or email magic links)

Content and Usage Data

• Music projects, songs, lyrics, and audio files you create or upload
• Collaboration data (chat messages, video sessions, comments)
• Usage analytics (features used, session duration, error logs)
• Device and browser information (IP address, user agent, device type)

Third-Party Service Data

We use the following third-party services that may collect data:

• Supabase (authentication and database)
• Vercel (hosting and analytics)
• Daily.co (video conferencing)
• Ably (real-time messaging)
• OpenAI (AI features)
• Google OAuth (optional sign-in)

2. How We Use Your Information

We use your information to:

• Provide and improve our platform services
• Enable real-time collaboration features
• Send important service updates and notifications
• Respond to support requests and troubleshoot issues
• Analyze usage patterns to improve user experience
• Ensure platform security and prevent abuse
• Comply with legal obligations

3. Data Security

YOUR DATA IS PROTECTED

We implement industry-standard security measures including:

• End-to-end encryption for sensitive communications
• Secure HTTPS connections for all data transmission
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Encrypted database storage
• Regular automated backups

4. Data Sharing and Disclosure

We do NOT sell your personal data. We may share your information only in these limited circumstances:

• With Collaborators: Project members you invite can see shared project content
• Service Providers: Third-party services necessary to operate the platform (hosting, video, messaging)
• Legal Requirements: When required by law, court order, or to protect our rights
• Business Transfers: In the event of a merger, acquisition, or sale (with notice to users)

5. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correct: Update inaccurate or incomplete information
• Delete: Request deletion of your account and associated data
• Export: Download your content in standard formats
• Opt-out: Unsubscribe from marketing emails (service emails may still be sent)
• Withdraw Consent: Revoke permissions for data processing

To exercise these rights, contact us at privacy@cronkwaters.com

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account:

• Your personal information is deleted within 30 days
• Content you created remains accessible to collaborators (unless you delete it first)
• Anonymized usage data may be retained for analytics
• Backups are purged within 90 days

7. Cookies and Tracking

We use cookies and similar technologies for:

• Session management and authentication
• User preferences and settings
• Analytics and performance monitoring
• Security and fraud prevention

You can control cookies through your browser settings, but some features may not work properly if cookies are disabled.

8. Children's Privacy

Our platform is not intended for users under the age of 13. We do not knowingly collect personal information from children. If we discover that a child has provided us with personal data, we will delete it immediately.

9. International Data Transfers

Your data may be stored and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. Third-Party Links

Our platform may contain links to external websites or services. We are not responsible for the privacy practices of these third parties. Please review their privacy policies before providing any information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or platform notifications. Your continued use of the platform after changes indicates acceptance of the updated policy.

12. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

13. GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data is your consent, contract performance, and legitimate business interests.