Privacy Policy

1. Introduction

Sissy Cloud ("we", "us", "our") operates the website sissycloud.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our Service. By using Sissy Cloud, you consent to the practices described in this policy.

2. Information We Collect

Account Data

When you create an account, we collect your email address and password (securely hashed) through our authentication provider, Supabase Auth. You may also provide a display name and avatar image.

Profile Data

You may optionally add a bio, avatar, and other profile information that is visible to other users on your public profile page.

Usage Data

We collect information about how you interact with the Service, including play history (tracks listened to and duration), likes, follows, comments, playlists created, and search queries. This data is used to provide listening statistics and improve the Service.

Connected Accounts

You may choose to connect third-party accounts (such as Patreon) to your Sissy Cloud profile. When you do, we receive and store limited information from the connected service, such as your account identifier, display name, and membership/pledge status. We do not access your payment details or private messages on connected platforms.

Payment Data

Payments are processed by Stripe. We do not store your credit card number or payment method details. We receive and store your Stripe customer ID and subscription status (plan type, billing period, active/cancelled) to manage your premium access.

Uploaded Content

If you upload audio files, we store the audio data in secure cloud storage along with metadata you provide (title, description, category, tags, cover image, visibility setting).

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Process payments and manage subscriptions
• Display your public profile and content to other users
• Link and verify connected third-party accounts (e.g., Patreon) you choose to associate with your profile
• Generate your personal listening statistics
• Send service-related communications (e.g., subscription confirmations, password resets)
• Enforce our Terms of Service and protect against misuse
• Comply with legal obligations

4. Cookies and Tracking

We use essential cookies to keep you logged in and maintain your session. For a detailed breakdown of all cookies and similar technologies we use, please see our Cookie Policy.

5. Third-Party Services

We rely on the following third-party service providers to operate Sissy Cloud:

• Supabase — Authentication, database (PostgreSQL), and file storage for audio and cover images.
• Stripe— Payment processing for premium subscriptions. Stripe's privacy practices are governed by Stripe's Privacy Policy.
• Vercel — Hosting and content delivery network for the Service.
• Patreon— Optional account linking. If you connect your Patreon account, we exchange data with Patreon to verify your membership status. Patreon's privacy practices are governed by Patreon's Privacy Policy.

Each of these providers processes data according to their own privacy policies. We encourage you to review them.

6. Data Storage and Security

Your data is stored securely on cloud infrastructure provided by Supabase and Vercel. All data is transmitted over HTTPS encryption. Database access is protected by Row Level Security (RLS) policies, ensuring that users can only access data they are authorized to see. Audio files are stored in private storage buckets and accessed via time-limited signed URLs.

While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have the following rights:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Request correction of inaccurate or incomplete data.
• Erasure — Request deletion of your personal data. You can delete your account in your Settings page.
• Data Portability — Request your data in a structured, commonly used format.
• Restriction — Request restriction of processing in certain circumstances.
• Objection — Object to processing based on legitimate interests.
• Withdraw Consent — Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at info@sissycloud.com. You also have the right to lodge a complaint with your local data protection supervisory authority.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Play history is retained to generate listening statistics. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., payment records for tax purposes).

9. Children's Privacy

Sissy Cloud is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a user is under 18, we will promptly delete their account and associated data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

info@sissycloud.com