1. Introduction
TogetherWeRise ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
This policy applies to users worldwide, including specific provisions for users in the European Union (GDPR), California (CCPA), and Australia (Privacy Act 1988).
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, password, profile photo
- Payment Information: Credit card details (processed by Stripe)
- Content: Audio files, feedback text, messages
- Communications: Support requests, feedback, survey responses
2.2 Automatically Collected
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, features used, timestamps
- Audio Fingerprints: Acoustic signatures for copyright protection
- Cookies: Session and preference data (see Section 7)
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process transactions and send related communications
- Connect artists with curators and facilitate feedback
- Detect and prevent copyright infringement
- Send promotional communications (with your consent)
- Comply with legal obligations
- Protect our rights and prevent fraud
4. Legal Basis for Processing (EU Users)
Under GDPR, we process your data based on:
- Contract: To provide the services you requested
- Consent: For marketing communications and optional features
- Legitimate Interest: For security, fraud prevention, and service improvement
- Legal Obligation: To comply with applicable laws
5. Information Sharing
We share information with:
- Curators: Your submitted demos for review (as requested by you)
- Service Providers: Stripe (payments), Resend (emails), cloud hosting
- Legal Requirements: When required by law or to protect rights
- Business Transfers: In case of merger, acquisition, or asset sale
We do not sell your personal information to third parties.
6. Data Retention
We retain your data:
- Account Data: For as long as your account is active, plus 30 days
- Audio Files: 90 days after submission completion
- Audio Fingerprints: Indefinitely for copyright protection
- Transaction Records: 7 years for legal compliance
- Support Communications: 2 years after resolution
7. Cookies and Tracking
We use the following types of cookies:
Essential Cookies
Required for basic site functionality
Functional Cookies
Remember your preferences and settings
Analytics Cookies
Help us understand how you use our service
You can manage cookie preferences in your browser settings.
8. Your Rights
Depending on your location, you may have the following rights:
All Users
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data
EU Users (GDPR)
- Object to processing based on legitimate interest
- Restrict processing in certain circumstances
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
California Residents (CCPA)
- Know what personal information is collected
- Know if personal information is sold or disclosed
- Opt-out of sale of personal information
- Non-discrimination for exercising rights
9. Security
We implement appropriate security measures including:
- Encryption of data in transit (TLS) and at rest
- Regular security assessments and penetration testing
- Access controls and authentication
- Employee training on data protection
10. International Data Transfers
Your data may be transferred to and processed in countries outside your residence. For EU users, we ensure appropriate safeguards through Standard Contractual Clauses or adequacy decisions. For Australian users, we comply with Australian Privacy Principle 8.
11. Children's Privacy
Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.
12. Contact Us
For privacy-related inquiries or to exercise your rights:
Data Protection Contact
Email: privacy@togetherwerise.com
We aim to respond to all requests within 30 days.
