Privacy policy

What we collect

• Your account: first and last name, email address, and a password (stored only as a secure hash). If you use "Continue with Google", Google shares your name, email address and profile picture with us; we never see your Google password.
• Purchases: the tiers you buy, amounts, dates and payment references. Card and other payment details go directly to Stripe; we never see or store them.
• Shipping (Tier 3 and above): the name and address you give at checkout for the Blockchain Money Chain, and its tracking details.
• The song NFT: the wallet address you enter when you claim it.
• Requests you send: booking requests (name, email, phone, event details), Tier 4 consultation answers, and copyright (DMCA) notices (name, contact details and the notice itself).
• Technical data: our hosting and sign-in providers keep standard server logs (such as IP address, browser type and time of request) for security and troubleshooting.

How we use it

• To run your account and give you the content and perks of your tier.
• To take payments, issue refunds, and keep the records the law requires.
• To ship the Blockchain Money Chain to you.
• To mint and update your song NFT.
• To answer your booking and consultation requests and copyright notices.
• To send service emails: account confirmation, password reset, request receipts, shipping updates. We do not send marketing emails or sell your information.
• To keep the site secure and prevent abuse.

We rely on our contract with you (your membership and purchases), our legal obligations (for example tax records), and our legitimate interest in keeping the service secure.

The blockchain is public and permanent

The song NFT lives on the Base blockchain. Anyone can see that your wallet address holds it, along with its tier, how many purchases it records and when it was minted. Each purchase is recorded only as an opaque code: no amounts, names, emails or addresses are ever put on the blockchain. Blockchain records cannot be changed or deleted by anyone, including us: if your NFT is burned (for example after a refund), its history stays visible. Only claim the NFT to a wallet you are comfortable linking to it.

Who processes your data for us

• Supabase: accounts, sign-in and our database.
• Stripe: payments, refunds and tax calculation.
• Resend: sending our emails.
• Vercel: hosting the website.
• Google: only if you choose "Continue with Google".
• Base (blockchain network): the song NFT, as described above.

These providers may process data in the United States and other countries, under their own privacy and security commitments.

Cookies

We use only the cookies needed to keep you signed in. There are no advertising, analytics or tracking cookies. Stripe may set its own cookies on its checkout page to prevent fraud.

How long we keep it

We keep your account data while your account is open. When you ask us to delete your account, we delete your profile, sign-in, requests and NFT records. Payment records may be kept as long as tax and accounting law requires. Blockchain records cannot be deleted.

Your choices and rights

• See and edit your name on your account page.
• Ask us for a copy of your data, to correct it, or to delete your account: email [contact email].
• Depending on where you live (for example the EU, UK or some US states), you may have further rights, including objecting to some uses and complaining to your data protection authority.

Children

The site is not meant for anyone under 18, and we do not knowingly collect their data.

Changes

If we change this policy, we will update the date above, and tell members by email when the changes matter.