Privacy Policy

Account Information: When you create an account, we collect your email address, username, and display name. We use this to identify your account and communicate with you.

Content and Metadata: If you upload content or use listening features, we may store metadata about that content (such as track titles, albums, and artists) to provide the Service.

Play History: We record your listening activity within the Service (such as albums played and play counts) to power features like recently played and personalized recommendations.

Operational Logs: Like most online services, we automatically collect standard technical information when you use the Service, including IP addresses, browser type, and request metadata. This helps us maintain security and troubleshoot issues.

We use the information we collect to:

• Operate, maintain, and improve the Service
• Provide core functionality such as listening, library management, and account features, including purchases and downloads
• Communicate with you about your account or the Service
• Maintain the security of the Service and prevent abuse
• Comply with legal obligations

• We do not sell your personal data. Your information is not for sale to advertisers, data brokers, or any third parties.
• We do not use third-party advertising or tracking services. We don't run ads on the Service and don't share your data with ad networks.
• We do not access your SOUND server data. When using the SOUND server software, your music library, database, and listening history remain entirely on your own hardware. Streamline has zero access to this data.

We use the following trusted service providers (sub-processors) to operate Streamline. Each processes only the information necessary to provide its service and is bound by its own data processing agreements with us:

• Supabase — authentication, database, file storage
• Vercel — application hosting and edge functions
• Cloudflare — DNS, content delivery, DDoS protection, and asset storage
• Stripe — payment processing and artist payouts; card details are processed and stored solely by Stripe and never touch our servers
• Sentry — error monitoring and crash reporting
• Resend — transactional email (account verification, receipts, notifications)

A current list of subprocessors is available on request to [email protected].

Our infrastructure providers operate globally. Personal information may be processed and stored in the United States and in other jurisdictions through our service providers' global edge networks. Where personal data is transferred from the European Economic Area, the United Kingdom, or Switzerland to other jurisdictions, we rely on appropriate safeguards including Standard Contractual Clauses adopted by the relevant data protection authorities.

Streamline uses cookies and similar technologies for the following purposes only:

• Strictly necessary cookies: to keep you signed in, maintain your session, and prevent CSRF attacks.
• Preference cookies: to remember settings such as theme or volume.

We do not use cookies for advertising, third-party tracking, or cross-site behavioral profiling. You can control cookies through your browser settings, but disabling strictly necessary cookies will prevent the Service from functioning.

We retain personal information only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account information is retained for the life of your account and for up to 90 days after deletion for the purpose of fraud prevention and dispute resolution.
• Listening and library metadata is retained for the life of your account and is permanently deleted within 30 days of account deletion.
• Payment transaction metadata is retained for 7 years to comply with federal and state tax recordkeeping requirements.
• Operational and security logs are retained for up to 90 days.
• Email correspondence is retained for up to 3 years.

Records subject to a legal hold are retained until the hold is released.

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with the following rights regarding your personal information:

• Right to know. You may request that we disclose the categories of personal information we have collected about you, the categories of sources, the purposes for which we use that information, and the categories of third parties with whom we share it.
• Right to access. You may request a copy of the specific personal information we have collected about you.
• Right to delete. You may request that we delete personal information we have collected from you, subject to limited exceptions.
• Right to correct. You may request that we correct inaccurate personal information.
• Right to opt out of sale or sharing. We do not sell or share your personal information for cross-context behavioral advertising. There is no opt-out to exercise because the activity does not occur.
• Right to limit use of sensitive personal information. We do not use sensitive personal information for purposes beyond what is necessary to provide the Service.
• Right to non-discrimination. We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us at [email protected]. We will respond within 45 days as required by law. You may also authorize an agent to make a request on your behalf, subject to verification.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent laws provide you with rights regarding your personal data. Our lawful bases for processing your personal data are:

• Contract: to provide the Service you have requested.
• Legitimate interests: to maintain security, prevent fraud and abuse, and improve the Service.
• Consent: where you have provided it (for example, for optional features).
• Legal obligation: to comply with applicable laws.

You have the right to access, rectify, port, restrict processing of, object to processing of, and request deletion of your personal data. You may withdraw consent at any time without affecting prior lawful processing. You may lodge a complaint with a supervisory authority, including your local data protection authority.

To exercise any of these rights, contact us at [email protected]. Where we transfer personal data outside the EEA, we rely on appropriate safeguards including Standard Contractual Clauses.

Streamline is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact [email protected].

Self-service Deletion: You may permanently delete your account at any time from your Account Settings page. Deletion is immediate and removes:

• Your profile, username, avatar, and login history
• Your playlists, followed artists, and saved music
• Your SOUND server configuration and listening history
• If you are an artist or label, your artist profile, all albums and tracks you have uploaded, all artwork, and all posts and tour dates you have published. People who purchased your music will lose access.

What We Retain: Some information is kept for legal or operational reasons:

• Financial records (purchases, sales, payouts, Stripe transaction IDs) are retained for up to 7 years to comply with US tax law. Personal identifiers in these records are anonymized at deletion: your username and Stripe account ID are preserved as a snapshot for tax-form issuance, but no longer linked to a live account.
• Aggregate, non-identifying analytics (such as play counts on tracks that have since been deleted) may persist in summarized form.
• Backups may contain your data for up to 30 days before they are rotated out.

Account deletion typically completes within seconds. Audio files and images are removed from object storage immediately. If you have an outstanding Stripe Connect balance, you will be asked to contact support to settle it before deletion is permitted.

Data Access: You may request a copy of your personal data by contacting us at [email protected].

If you have any questions about this Privacy Policy or our data practices, please contact us: