Koraclave
DRAFT — this document is a working template and has not yet been reviewed by a lawyer. Every section is marked [FOR LEGAL REVIEW — CONFIRM-3]. It becomes binding policy only after that review.

Privacy Policy (DRAFT)

Last updated: August 24, 2026 — DRAFT, not yet in force

1. What we collect [FOR LEGAL REVIEW — CONFIRM-3]

  • Account data: your email address and password hash (or your Google account identity if you sign in with Google), managed by our authentication provider, Supabase.
  • Purchase data: what you bought, when, and for how much. Card details are handled entirely by our payment processor (Stripe) — we never see or store card numbers.
  • Library data: the custom albums you build and the tracks in them.
  • Technical data: ordinary server logs (IP address, request time) kept briefly for security and debugging.

2. What we do NOT do [FOR LEGAL REVIEW — CONFIRM-3]

We do not sell or share your personal data for advertising. We use no third-party ad trackers. Cookies are used solely to keep you signed in.

3. Where your data lives [FOR LEGAL REVIEW — CONFIRM-3]

Account and purchase data is stored with Supabase (hosted database/auth). Audio files are stored with Cloudflare R2. Payments are processed by Stripe. Each provider processes data under its own terms as our processor.

4. Your rights [FOR LEGAL REVIEW — CONFIRM-3]

You can access, correct, or delete your account data — email dmmatsinhe@gmail.com. Deleting your account removes your login and custom albums; purchase records are retained as required for tax and accounting.

5. Changes and contact [FOR LEGAL REVIEW — CONFIRM-3]

Material changes will be announced on this page. Questions: dmmatsinhe@gmail.com.