Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, company name (for business accounts)
• Audio Files: Musical works uploaded for copyright registration (processed temporarily, not permanently stored)
• Registration Metadata: Song titles, artist names, release years, descriptions
• Payment Information: Collected by our payment processor (Stripe) - we do not store full credit card numbers
• Business Information: Company details, API usage data for business accounts

1.2 Automatically Collected Information

• Usage Data: IP address, browser type, device information, access times
• Blockchain Data: Transaction hashes on Polygon network (public blockchain)
• Acoustic Fingerprints: Digital audio signatures (SHA-256 hashes) derived from uploaded files
• Cookies: Session cookies for authentication and analytics

1.3 Information from Third Parties

• Platform Partners: If you access CUA through Q the Music or other integrated platforms, we receive basic account information from those platforms
• Blockchain Networks: Public transaction data from Polygon network

2. How We Use Your Information

We use collected information to:

• Provide Service: Generate copyright registrations, certificates, and verification pages
• Process Payments: Handle subscriptions and transaction fees via Stripe
• Blockchain Registration: Record immutable timestamps on Polygon network
• Communications: Send registration confirmations, certificate delivery, service updates
• Improve Service: Analyze usage patterns, debug issues, enhance features
• Legal Compliance: Comply with DMCA requests, legal obligations, protect rights
• Security: Prevent fraud, unauthorized access, and abuse

3. How We Share Your Information

We do NOT sell your personal information. We share information only in these circumstances:

3.1 Service Providers

• Stripe: Payment processing
• Supabase: Database hosting
• Railway: Application hosting
• Cloudflare: CDN and security services
• Polygon Network: Blockchain verification (public ledger)

3.2 Business Partners

• Q the Music: If you access CUA through Q the Music, registration data is shared with them
• Platform Integrations: If you use CUA via third-party platforms, basic registration status is shared

3.3 Legal Requirements

We may disclose information if required by law, court order, or to:

• Comply with legal processes (subpoenas, warrants)
• Enforce our Terms of Service
• Protect rights, property, or safety of Her Own Sky, users, or public
• Investigate fraud or security issues

3.4 Business Transfers

In the event of merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Data Retention

• Audio Files: Deleted immediately after processing (30-60 seconds)
• Acoustic Fingerprints: Retained indefinitely for copyright protection
• Registration Metadata: Retained indefinitely (required for certificate validity)
• Blockchain Records: Permanent (immutable on public blockchain)
• Usage Logs: Retained for 90 days
• Account Information: Retained until account deletion requested

5. Your Rights

Depending on your location, you may have the right to:

• Access: Request copies of your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal/contractual obligations)
• Portability: Receive your data in machine-readable format
• Opt-Out: Unsubscribe from marketing emails
• Restrict Processing: Limit how we use your data

To exercise these rights, contact: support@herownsky.com

6. Data Security

We implement industry-standard security measures:

• Encryption: SSL/TLS for data in transit, encryption at rest
• Access Controls: Role-based permissions, API key authentication
• Secure Infrastructure: Railway (production), Supabase (database)
• Regular Audits: Security monitoring and vulnerability scanning

However, no method of transmission or storage is 100% secure. Use the Service at your own risk.

7. International Users

Our servers are located in the United States. If you access the Service from outside the US, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

GDPR Compliance (EU Users)

• Legal basis for processing: Contract performance, legitimate interests, consent
• Data controller: Her Own Sky LLC
• EU Representative: Not currently designated (service primarily US-based)

8. Children's Privacy

CUA is not intended for users under 13 years old. We do not knowingly collect information from children under 13. If we discover we have collected such information, we will delete it immediately.

9. Third-Party Links

Our Service may contain links to third-party websites (Q the Music, Her Own Sky, etc.). We are not responsible for the privacy practices of these sites. Review their privacy policies separately.

10. Cookies and Tracking

We use cookies for:

• Authentication: Session management
• Analytics: Usage tracking (anonymized)
• Preferences: User settings

You can disable cookies in your browser, but this may affect Service functionality.

11. Do Not Track Signals

We do not currently respond to Do Not Track (DNT) browser signals.

12. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights

To exercise CCPA rights: support@herownsky.com

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with a new "Last Updated" date. Continued use of the Service after changes constitutes acceptance.

14. Contact Us

For privacy questions or requests: