Privacy Policy

What we collect, why, for how long, and how to erase it. · Last updated September 2026

1. Summary

We collect the minimum needed to run a music platform: account data, order/license records, playback analytics (aggregated, hashed) and support conversations. No ad networks, no data sales, ever.

2. What we collect

Account: name, email, bcrypt/argon2 password hash, avatar, preferences.
Commerce: orders, licenses, subscription status. Card data never touches our servers — PayPal processes payments.
Analytics: anonymous events (plays, clicks) tied to a rotating hashed visitor id, not to your identity.
Security: login IPs and admin action audit logs, kept for accountability.
Chat: messages you send to PIA Bot; only leave your email if you type it.

3. Why (legal bases)

Contract (delivering purchases/memberships), legitimate interest (security, anti-fraud, product analytics), consent (newsletter — you can opt out from every email or in your account page).

4. Who we share with

Processors only: PayPal (payments), our print-on-demand partners (shipping name/address), Google Drive (encrypted audio storage, access-controlled), SMTP provider (transactional email), optional AI provider for chat answers (message text only, no names).

5. Retention

Account/commerce data while your account exists (law may require keeping invoices longer). Analytics events roll off. Password reset tokens die in 1 hour. You can request export or erasure at davidq1269@msn.com — we respond within 30 days.

6. Cookies

Strictly necessary session cookie (login + cart) and a language preference cookie. No tracking/advertising cookies. reCAPTCHA v3 (Google) protects forms; its use is subject to Google's policies.