Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account credentials: email address, display name, and password (hashed and never stored in plaintext).
• Profile data: photos, bio text, display preferences, and any information you choose to make visible on your public profile.
• Quiz responses: answers to the Synqd Archetype Quiz, used to compute your Music DNA dimensions and archetype classification.
• Communications: messages sent between users, support requests, and feedback submitted to us.

1.2 Information from Connected Services

When you connect a music streaming account (Spotify, Apple Music, Last.fm, SoundCloud, or other supported platforms), we receive listening history, top artists, recently played tracks, and playlist data. We access this data through OAuth tokens you explicitly authorize. You may revoke access at any time through your streaming service's connected-app settings, which will disconnect your music data from Synqd.

1.3 Automatically Collected Information

• Device and usage data: browser type, operating system, screen resolution, page views, feature interactions, and session duration.
• Log data: IP address (truncated for privacy), access timestamps, referring URLs, and error reports.
• Cookies and local storage: authentication tokens, session identifiers, user preferences, and PWA installation state. See Section 7 for details.

1.4 Payment Information

If you subscribe to Synqd Plus, payment processing is handled by Stripe, Inc. Synqd does not store your full credit card number, CVV, or bank account details on our servers. We retain only a Stripe customer identifier and subscription status. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

2. How We Use Your Information

We use collected information to:

• Operate and maintain the Synqd platform, including account creation, authentication, and profile management.
• Compute your Music DNA profile, sonic archetype classification, and compatibility scores with other users.
• Facilitate connections between users based on complementary Music DNA dimensions.
• Process subscriptions, billing, and account tier management for Synqd Plus.
• Communicate with you regarding account activity, security alerts, and service updates.
• Improve, debug, and optimize the platform through aggregated analytics and user behavior research.
• Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information or listening data to third parties for advertising or any other purpose.

3. Music Data Privacy

Your listening history and streaming data are used exclusively to compute your Music DNA profile, assign your sonic archetype, and facilitate compatible connections. Synqd does not sell, rent, or share your streaming data with third parties. Your connected-account OAuth tokens are encrypted at rest and never displayed publicly. Other users see your archetype and dimension scores, not your raw listening history or specific track data, unless you explicitly choose to share that information on your public profile.

You may disconnect a streaming service at any time from your account settings. Upon disconnection, we cease receiving new data from that service, though previously computed Music DNA dimensions derived from historical data remain part of your profile unless you request deletion.

4. Data Sharing and Disclosure

We may share information in the following circumstances:

• Other users: Your public profile (display name, archetype, dimension scores, photos, and bio) is visible to other authenticated users. You control what appears on your public profile through account settings.
• Service providers: We engage third-party providers for infrastructure hosting, payment processing (Stripe), email delivery, and analytics. These providers are contractually bound to process data only as instructed and to maintain appropriate security measures.
• Legal requirements: We may disclose information in response to valid legal process (subpoenas, court orders, government requests) where required by law, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the successor entity. We will notify you via email and update this policy before any such transfer.

We do not sell, rent, or trade your personal information for marketing or commercial purposes.

5. Data Security

We implement industry-standard technical and organizational measures to protect your information, including: encryption of data in transit (TLS 1.3) and at rest (AES-256 for sensitive fields), hashed and salted password storage (bcrypt), role-based access controls limiting internal data access to personnel who require it for operations, regular security assessments and vulnerability monitoring, and automated monitoring for anomalous access patterns. No method of electronic storage is fully secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we initiate deletion of your personal data within 30 days, except where retention is required by law (e.g., financial records for tax compliance). Anonymized, aggregated data that cannot reasonably be used to identify you may be retained indefinitely for research and analytics purposes. OAuth tokens for connected services are deleted upon disconnection or account deletion.

7. Cookies and Tracking Technologies

Synqd uses essential cookies and local storage to maintain your session, store authentication tokens, remember preferences (such as theme and language), and support Progressive Web App functionality. We do not use third-party advertising trackers or sell data to ad networks. Analytics data we collect is first-party only and used to improve the platform. You may configure your browser to reject cookies or clear local storage, though this may affect functionality such as persistent login.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request an export of your data in a machine-readable format.
• Objection: Object to processing of your data for specific purposes.
• Restriction: Request that we limit the processing of your data under certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond to verifiable requests within 30 days. We do not discriminate against users who exercise their privacy rights.

9. Children's Privacy

Synqd is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly. If you believe a minor has provided personal data to us, please contact [email protected].

10. International Data Transfers

Our services are primarily hosted in the United States. If you access Synqd from outside the United States, your data may be transferred to and processed in the United States. By using our services, you consent to such transfers. We implement appropriate safeguards for international data transfers in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by sending you an email notification. Your continued use of Synqd after any changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

12. Contact

For privacy-related questions, data access requests, or concerns about this policy, contact us at [email protected]. We aim to respond to all inquiries within 30 days.