1. Introduction
Harmony ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, password, profile picture
- Payment Information: Credit card details, billing address (processed and stored by Stripe)
- Profile Information: For artists - bio, music genres, social media links, artist story
- Communication: Messages you send through our contact forms or support channels
2.2 Automatically Collected Information
- Usage Data: Pages visited, time spent on pages, clicks, scrolling behavior
- Device Information: IP address, browser type, operating system, device identifiers
- Cookies: We use cookies and similar tracking technologies (see Section 9)
2.3 Information from Third Parties
- Authentication Providers: If you sign in with third-party services (Google, Facebook), we receive basic profile information
- Payment Processor: Stripe provides us with payment confirmation and transaction details
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Platform
- Process subscriptions and financial transactions
- Send transactional emails (receipts, subscription confirmations, account notifications)
- Communicate with you about your account or our services
- Send marketing communications (with your consent)
- Detect, prevent, and address fraud and security issues
- Comply with legal obligations
- Analyze usage patterns to improve user experience
- Facilitate connections between Angels and Artists
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process your data based on:
- Contract: To fulfill our agreement with you (subscriptions, account services)
- Consent: For marketing communications and non-essential cookies
- Legitimate Interests: To improve our services, prevent fraud, and ensure security
- Legal Obligation: To comply with applicable laws and regulations
5. How We Share Your Information
5.1 With Artists
When you support an artist, they can see your name, badge number, subscription amount, and the date you became their Angel. They cannot see your payment details or contact information unless you provide it directly.
5.2 With Service Providers
- Stripe: Payment processing and financial transactions
- Supabase: Database hosting and authentication
- Vercel: Website hosting and content delivery
- Email Service: Transactional and marketing emails
5.3 For Legal Reasons
We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights or the safety of users.
5.4 Business Transfers
If Harmony is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.
5.5 With Your Consent
We may share your information for other purposes with your explicit consent.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide services. After account deletion, we may retain certain information for legal, accounting, or security purposes:
- Transaction Records: 7 years (legal requirement)
- Account Information: 90 days after deletion request
- Usage Logs: 12 months
7. Your Privacy Rights
7.1 All Users
- Access: Request a copy of your personal data
- Correction: Update inaccurate information in your account settings
- Deletion: Request deletion of your account and personal data
- Opt-Out: Unsubscribe from marketing emails
7.2 EEA Users (GDPR Rights)
- Portability: Receive your data in a machine-readable format
- Restriction: Request limitation of processing in certain circumstances
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent for processing at any time
- Lodge a Complaint: File a complaint with your local data protection authority
7.3 California Users (CCPA Rights)
- Know: Request disclosure of personal information collected
- Delete: Request deletion of personal information
- Opt-Out: Opt out of sale of personal information (Note: We do not sell personal information)
- Non-Discrimination: Right not to be discriminated against for exercising privacy rights
To exercise these rights, contact us at contact@harmonyand.me. We will respond within 30 days.
8. Data Security
We implement appropriate technical and organizational measures to protect your information:
- SSL/TLS encryption for data in transit
- Encryption of sensitive data at rest
- Regular security audits and penetration testing
- Access controls and authentication requirements
- Employee training on data protection
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
9. Cookies and Tracking Technologies
9.1 Types of Cookies We Use
- Essential Cookies: Required for the Platform to function (authentication, security)
- Analytics Cookies: Help us understand how users interact with the Platform
- Functional Cookies: Remember your preferences and settings
- Marketing Cookies: Used to deliver relevant advertisements (with consent)
9.2 Managing Cookies
You can control cookies through your browser settings. However, disabling essential cookies may limit Platform functionality.
10. Children's Privacy
Harmony is not intended for users under 18 years of age. We do not knowingly collect information from children. If we learn we have collected information from a child under 18, we will delete it immediately.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses for EEA data transfers
- Privacy Shield certification (where applicable)
- Adequacy decisions by the European Commission
12. Third-Party Links
The Platform may contain links to third-party websites (artist social media, streaming platforms). We are not responsible for the privacy practices of these sites. Please review their privacy policies.
13. Marketing Communications
With your consent, we may send you:
- Newsletter updates about Harmony features
- New artist announcements
- Platform updates and improvements
- Special offers and promotions
You can unsubscribe at any time by clicking the unsubscribe link in our emails or adjusting your account settings.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on the Platform. Continued use after changes constitutes acceptance.
15. Data Protection Officer
For privacy-related inquiries, you can contact our Data Protection Officer at:
Email: privacy@harmonyand.me
16. Contact Us
For questions about this Privacy Policy or our data practices, please contact us at:
Email: contact@harmonyand.me
Last Updated: [DATE]