Privacy Policy

• Account Registration Data: Name, email address, and password (hashed) when you create an account.
• Profile Information: Display name, biography, profile picture/avatar, primary and secondary music genres, social media links (Instagram, X/Twitter, TikTok, YouTube, Spotify, SoundCloud, Facebook, personal website), and any other information you add to your public profile.
• Audio Content: Audio track files you upload to the Service, including associated metadata (title, description, genre tags, version labels, upload notes). Audio files are encrypted at rest using AES-256-GCM encryption.
• User-Generated Content: Comments, feedback, ratings, reactions, and messages you create or send on the platform.
• Pool Activity: Feedback pools you create or join, pool submissions, moderator roles, and participation history.
• Payment Information: When purchasing credits or a Pro subscription, your payment is processed by Stripe. We do not store your full credit card number or banking details — only transaction IDs, subscription status, and billing history. See Section 7 for more on payment processing.
• Communications: Messages you send to us via email or our support chat, including feedback or support tickets.
• Consent Records: Records of your consent choices (e.g., cookie consent, marketing preferences, terms acceptance) including timestamps and policy version at time of consent.

• Usage Data: Pages visited, features used, time spent on specific sections, clicks, search queries within the app, and general interaction patterns.
• Device and Technical Data: IP address, browser type and version, operating system, device type, screen resolution, language settings, and referring URLs.
• Session Data: Session identifiers, login timestamps, session duration, and authentication events.
• Performance Metrics: Page load times, error logs, and crash reports used to improve Service stability.
• Analytics Events: Custom events we track to understand feature usage (e.g., track uploads, pool joins, feedback given). These are tied to your user ID internally but reported in aggregate for analytics purposes.
• Cookies and Similar Technologies: See Section 9 (Cookies) for full details.

• Authentication Providers: If you sign in via a third-party provider (e.g., Google), we receive your name, email address, and profile picture from that provider, as permitted by your account settings with them.
• Payment Processors: Stripe provides us with confirmation of successful transactions, subscription status, and payment method type (e.g., card last 4 digits).
• Referral Data: If you were referred to Feedback Loop by another user, we store the referral token and link it to your account upon registration.

• Create and manage your account.
• Store and serve your uploaded audio tracks and versions.
• Enable pool creation, membership, and submission workflows.
• Facilitate peer feedback, comments, ratings, and reactions.
• Manage your credit balance and process credit transactions (earning and spending credits).
• Enable direct messaging and social connections between users.
• Display your public profile to other users on the Loopers page.
• Send transactional notifications (e.g., new feedback received, pool invite accepted, connection requests).

• Analyse usage patterns to understand which features are most valuable.
• Personalize content recommendations and in-app suggestions.
• Track and award achievements and badges based on your platform activity.
• Run A/B tests to improve platform design and usability.
• Monitor platform performance and fix bugs.

• Generate AI feedback on your tracks using third-party large language model APIs. Your audio content and associated context are transmitted to these APIs solely to generate requested feedback. We do not use your content to train external AI models without explicit consent.
• Power the in-app support chat assistant.

• Detect, investigate, and prevent fraudulent transactions, abuse, and security incidents.
• Enforce our Terms of Service and Community Guidelines.
• Comply with applicable laws, regulations, and lawful governmental requests.
• Maintain data breach incident records and fulfill regulatory reporting obligations where required.

• Send you product updates, new feature announcements, or promotional offers — only if you have opted in.
• You may withdraw consent at any time via Settings or by contacting us.

The following information is visible to other registered users of the Service as part of the platform's core collaboration features:

• Your public profile: display name, bio, avatar, genre tags, social links, and badges/achievements.
• Tracks you have set as "public" or submitted to a pool.
• Comments and feedback you leave on others' tracks.
• Your activity in shared pools.

Tracks you mark as "private" are only visible to you and users you explicitly share them with.

We engage the following categories of trusted third-party service providers who process data on our behalf under strict data processing agreements:

• Cloud Infrastructure & Hosting: For storing data, audio files, and running the application.
• Payment Processing: Stripe, Inc. — for handling credit card payments and subscription billing. Stripe's privacy policy is available at stripe.com/privacy.
• AI/LLM Providers: For processing AI feedback requests on your tracks. Audio content is transmitted only when you explicitly request AI feedback.
• Analytics: For aggregated usage analytics to improve the Service.
• Email Delivery: For sending transactional and notification emails.

• In response to valid legal process (court order, subpoena, or other lawful request).
• To protect the rights, property, or safety of Feedback Loop, our users, or the public.
• In connection with an investigation of fraud, intellectual property infringement, or other illegal activity.

If Feedback Loop is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service before your data is transferred and becomes subject to a different privacy policy.

You have the right to request a copy of all personal data we hold about you. You can submit a Subject Access Request (SAR) from your Privacy Center in the app, or by emailing privacy@feedbackloop.studio.

You can update most of your profile data directly in your account settings at any time. For other corrections, contact us.

You may request deletion of your account and personal data. We will delete your data within 30 days, except where retention is required by law (e.g., financial records). You can initiate this from your Privacy Center or by contacting privacy@feedbackloop.studio.

You can export your data in a structured, machine-readable format (JSON) via the Privacy Center. This includes your profile, track metadata, comments, and activity history.

You may request that we restrict processing of your data in certain circumstances (e.g., while disputing accuracy or pending an erasure request).

You may object to processing of your data for marketing purposes or where we rely on legitimate interests as the legal basis. To opt out of marketing emails, use the unsubscribe link in any email or update your notification preferences in Settings.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. California residents have the right to confirm this and to request disclosure of any sharing practices.

We will not discriminate against you for exercising any of your privacy rights. You will continue to receive the same quality of service regardless of any requests you make.

• Essential / Strictly Necessary: Required for the Service to function. These include session cookies for authentication, CSRF protection tokens, and load balancing. Cannot be disabled.
• Preference / Functional: Remember your settings and preferences (e.g., notification preferences, view modes). Optional.
• Analytics: Help us understand how users interact with the platform, which features are most used, and where performance can be improved. Optional.
• Marketing / Targeting: Used to show you relevant content or track the effectiveness of campaigns. Optional. We will only set these with your explicit consent.

You can manage your cookie preferences at any time via the cookie banner (accessible from the footer) or your browser settings. Note that disabling essential cookies will impair the Service's functionality.