Privacy Policy

What we collect

• Your name and email address
• Profile information you choose to add (about, roles, links, rights-society numbers, profile picture)
• Session data you create (titles, contributors, splits, notes, uploaded audio files, release information)
• Payment information processed by Stripe (we do not store card numbers — only references such as customer and subscription IDs)
• Basic technical data needed to run the service (authentication tokens, timestamps)

How we use it

We use your data solely to provide and improve the service: to let you log in, manage sessions, collaborate with others, process payments and deliver the features you've signed up for. We do not sell your data and we do not use it for advertising.

Who we share it with

We rely on a small set of trusted processors to run the service:

• Supabase — hosts our database, file storage and authentication.
• Stripe — processes subscription and one-off payments.
• Google — used for "Sign in with Google" if you choose that method.

We never share your data with anyone else without your consent, except where required by law.

How long we keep it

We keep your data for as long as your account is active. If you delete your account, we delete your personal data and session content from our systems. Limited records may be retained where required by law (for example, accounting records related to payments).

Your rights under GDPR

You have the right to:

• Access the personal data we hold about you
• Correct any inaccurate information
• Delete your account and personal data — you can do this yourself from your profile page
• Export your data on request
• Lodge a complaint with your local data protection authority

For any privacy question or request, contact us at hello@ctrlaltrelease.com.