Privacy Policy
Last updated: January 1, 2025
1. Introduction
Sonic Bloom ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website creation and music hosting services ("Service").
Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
2. Information We Collect
Personal Information
We collect personal information that you provide to us, including:
- Name and contact information (email address, phone number)
- Billing information (credit card details, billing address) - Note: We do not store credit card information on our servers; all payment data is securely processed and stored by our payment processor, Stripe
- Profile information (artist name, bio, location, genre)
- Content you upload (music files, images, text)
- Communications with us (support requests, feedback)
Automatically Collected Information
When you use our Service, we automatically collect certain information, including:
- Device information (IP address, browser type, operating system)
- Usage data (pages visited, time spent, features used)
- Performance metrics (loading times, error rates)
- Location data (general geographic location based on IP address)
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and improve our Service. You can control cookie preferences through your browser settings.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Process transactions and manage your account
- Send you technical notices, updates, and support messages
- Respond to your inquiries and provide customer support
- Analyze usage patterns to improve user experience
- Prevent fraud and ensure security
- Comply with legal obligations
- Send marketing communications (with your consent)
AI-Generated Content Assistance
We use AI technology (Claude by Anthropic) to help generate content suggestions such as artist bios, track descriptions, and other promotional text based on information you provide:
- You maintain full control and can edit, customize, or replace any AI-generated content
- AI-generated content is created based only on information you provide to us
- We do not share your personal data with AI providers beyond what's necessary for content generation
- All AI-generated content is subject to your review and approval before it appears on your site
- You retain ownership of all content on your website, whether created by you or AI-assisted
AI assistance is optional and provided as a convenience to help you create professional content more quickly.
4. How We Share Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
Service Providers
We work with trusted third-party service providers who help us operate our Service:
- Payment processors (Stripe, PayPal) for handling transactions
- Cloud storage providers (AWS, Google Cloud) for hosting your content
- Email service providers for sending notifications and updates
- Analytics providers for understanding usage patterns
Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Artist-Fan Relationships and Data Ownership
We recognize that the relationship between you and your fans is yours. Regarding fan data:
- You own your fan email list and all contact data collected through your website
- We store fan data securely on your behalf as part of our Service
- You have the ability to export your fan data (available on Pro and Studio plans)
- Fans can opt out of your email communications at any time through unsubscribe links
- You are responsible for compliance with email marketing laws (CAN-SPAM Act, GDPR, etc.)
- We do not contact your fans directly for marketing purposes without your permission
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you before your information is transferred and subject to a different Privacy Policy.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication requirements
- Secure data centers with 24/7 monitoring
- Regular backups and disaster recovery procedures
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy:
- Account Information: Retained while your account is active
- Content: Retained until you delete it or your account is terminated
- Usage Data: Typically retained for 2 years for analytics purposes
- Payment Information: Retained as required by law and payment processors
- Support Communications: Retained for 3 years for customer service purposes
7. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request access to your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information (data preserved for 90 days after account cancellation)
- Portability: Request a copy of your data in a portable format (Pro and Studio plans include automated data export; Artist plan users can request manual export or upgrade for automated export)
- Opt-out: Unsubscribe from marketing communications
- Restriction: Request restriction of processing in certain circumstances
To exercise these rights, please contact us at hello@gosonicbloom.com. We will respond to your request within 30 days.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws than your jurisdiction.
When we transfer your information internationally, we implement appropriate safeguards to ensure your information receives adequate protection, including standard contractual clauses approved by relevant authorities.
9. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly.
If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately at hello@gosonicbloom.com.
10. Third-Party Links and Services
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.
Some features of our Service may integrate with third-party services (such as social media platforms or music streaming services). Your use of these features is subject to the privacy policies of those third parties.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:
- Sending an email notification to your registered email address
- Posting a prominent notice on our Service
- Updating the "Last updated" date at the top of this policy
Your continued use of the Service after the changes take effect constitutes acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information we collect and how it's used
- Right to delete your personal information
- Right to opt-out of the sale of your personal information (we do not sell personal information)
- Right to non-discrimination for exercising your CCPA rights
To exercise these rights, please contact us at hello@gosonicbloom.com with "CCPA Request" in the subject line.