Privacy Policy
Version 0.1-placeholder · Effective 2026-10-07
Placeholder: this is not the final Privacy Policy. Final copy will replace it before launch.
About this policy
PLACEHOLDER: This privacy policy is placeholder text for the AudioConnect beta. The facts below are accurate, but the final wording is pending legal review and will replace this text before launch.
What we collect
Your account details (name, email, role), the profile, credits, availability and portfolio content you add, files you upload, recommendations, and the records needed to run the service, such as sign-in sessions and legal acceptances.
Who processes your data and where
Railway hosts the app, the Postgres database and the Redis store for sessions and rate limits, in europe-west4 (Netherlands, EU). Cloudflare stores uploaded files in R2 (EU jurisdiction bucket) and proxies network traffic. Resend sends transactional email from the EU (Ireland). Sentry receives error reports in the EU (Germany); session replay is off and user details are not collected. Plausible provides privacy-friendly analytics hosted in the EU; it uses no cookies, collects no personal data, and page addresses are stripped of tokens before they are sent. Daily database backups are stored in a private Cloudflare R2 bucket in the EU.
Cookies and device storage
We set only strictly necessary cookies, to keep you signed in. We use no analytics or advertising cookies, so there is no cookie banner. YouTube (youtube-nocookie.com) and Vimeo (with do-not-track) videos on profiles load only after you click Play, and YouTube or Vimeo may then set their own cookies. If you tick "Remember my choice", we store the key audioconnect.embed-consent in your browser's local storage (for example {"youtube":true}) so that provider's videos load directly next time. It is created only by that choice, holds nothing else, and clearing this site's data removes it.
How long we keep data
When you ask to delete your account, it is erased after a 30-day grace period; within that period you can contact support to restore it. Erased data remains in database backups for at most 27 days before those backups expire.
Your rights
Under UK and EU GDPR you can access, correct, delete or download your personal data and object to its use. On the Account page (/account) you can delete your account and use Download my data. Recommenders can withdraw a recommendation using the link in their confirmation email. For any other request, including access, correction, objection or a complaint, email support@audioconnect.io. You can also complain to the UK Information Commissioner's Office (ICO) or your EU data protection supervisory authority.