Legal

Privacy Policy

Last updated: March 2026

1. Information We Collect

We collect information you provide directly:

  • • Account info: email address, display name, profile picture
  • • Payment info: processed by Stripe — we never see your card number
  • • Content: audio files, pack metadata, comments you post
  • • Communications: support emails, DMCA notices

We also collect automatically:

  • • IP addresses (for security, rate limiting, and DMCA compliance)
  • • Browser/device info (user agent for download audit logs)
  • • Usage data: plays, downloads, purchases, follows

2. How We Use Your Information

  • • To operate and improve the Platform
  • • To process payments and distribute earnings via Stripe Connect
  • • To enforce our Terms of Service and copyright policy
  • • To maintain download audit logs for chargeback and DMCA defense
  • • To send transactional emails (purchase receipts, DMCA notices)
  • • To detect and prevent fraud and abuse

We do not sell your personal data to third parties.

3. Data Sharing

We share data only with:

  • • Stripe — for payment processing and artist payouts
  • • Supabase — our database and file storage provider
  • • Law enforcement — when required by valid legal process
  • • Copyright holders — buyer IP addresses may be disclosed in valid DMCA proceedings

4. Data Retention

  • • Account data: retained while account is active
  • • Purchase records and license acceptances: retained for 7 years (legal requirement)
  • • Download logs: retained for 2 years
  • • DMCA notices: retained indefinitely
  • • Audio files: retained until deleted by the uploader or removed for policy violations

5. Your Rights

You have the right to:

  • • Access your personal data
  • • Correct inaccurate data
  • • Delete your account (note: purchase records are retained per legal requirements)
  • • Export your data

To exercise these rights, email privacy@stemgod.com

6. Security

All audio files are stored in private buckets — they are never publicly accessible. Download URLs are signed with short expiry times. We use Row Level Security in our database to ensure users can only access their own data. Payment data is never stored on StemGod servers.

7. Contact

Privacy questions: privacy@stemgod.com