Privacy Policy

suan.fm is responsible for the personal information described in this policy. Questions and privacy requests can be sent to legal@suan.fm.

The information we collect depends on how you use the Service and may include:

• Account and sign-in information. Your email address and, when you use Google, Apple, or X to sign in, the basic account details the provider makes available for authentication, such as your provider account identifier, name, email address, and profile image.
• Profile information. Your handle, display name, profile image, biography, preferences, and account role or status.
• Content and interactions. Tapes, messages, dedications, visual designs, music selections and related metadata, recipient details you provide, visibility choices, saves, pins, comments, reports, and similar actions.
• Device and service data. IP address, browser and device type, request times, pages or features used, authentication and security events, and diagnostic, rate-limit, and error logs.
• Communications. Messages you send to support or legal contacts and transactional email delivery records.
• Data stored on your device. The Service may use browser storage for drafts, edit recovery, sign-in state, and other preferences needed to make the Service work.

SUAN does not use a social provider’s access or refresh tokens to read or post to your social account beyond what is needed to complete sign-in.

We receive information directly from you, automatically from your browser or device, from other users when they create or share something involving you, and from service providers such as authentication, hosting, email delivery, and music services.

We use personal information to:

• create and secure accounts and authenticate users;
• create, store, deliver, display, and share tapes as directed by users;
• operate profiles, playback, search, drafts, and other Service features;
• send sign-in codes, delivery notices, and other service communications;
• provide support and respond to privacy, legal, or safety requests;
• prevent fraud, abuse, unauthorized access, and violations of our Terms;
• moderate content, investigate reports, and protect users and the Service;
• debug, maintain, and improve reliability and performance; and
• comply with law and enforce our agreements.

Where a legal basis is required, we rely on performance of our agreement with you, legitimate interests in operating and protecting the Service, consent where requested, and compliance with legal obligations. You may withdraw consent at any time, without affecting earlier processing based on consent.

We may disclose personal information in the following circumstances:

• As you direct. Public profiles and public tapes can be seen by anyone. Recipient or sharing features make information available to the people you choose.
• Service providers. Vendors that help provide hosting, security, authentication, databases, file storage, email, support, music search, or playback process information for us. These include services such as Cloudflare and Supabase.
• Third-party services. If you choose a social sign-in provider or interact with an embedded music service, that service receives information under its own privacy policy.
• Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, respond to legal process, prevent harm, investigate abuse, or protect rights and security.
• Business changes. Information may be transferred as part of a financing, reorganization, sale, merger, or transfer of all or part of the Service, subject to appropriate protections.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use personal information for targeted advertising.

We use cookies and similar browser storage needed for authentication, security, drafts, edit recovery, and preferences. We do not currently use advertising cookies. Your browser may let you clear or block storage, but doing so can prevent sign-in or other features from working and may remove locally saved drafts.

We keep account information and user content while your account is active or for as long as needed to provide the Service. We keep other records only for as long as reasonably necessary for the purposes described here, including security, moderation, dispute resolution, legal compliance, and backup recovery. Retention periods vary based on the type of record and legal or operational need.

You may request account or data deletion by emailing legal@suan.fm. When an account is deleted, some records may remain for legal, safety, fraud-prevention, or audit purposes. If another person already claimed a gift tape, a limited, frozen creator snapshot, such as the name and profile image shown when it was sent, may remain so the recipient can keep the gift. We will no longer use that snapshot to feature or promote the deleted account.

SUAN and its service providers may process information in countries other than the one where you live. Where required, we use contractual or other safeguards intended to protect information transferred across borders.

We use administrative, technical, and organizational safeguards designed to protect personal information. No online service or storage system can be guaranteed to be completely secure, so you should protect access to your email and sign-in providers and contact us if you suspect unauthorized use.

You can choose whether a profile or tape is public, update certain profile information, and remove locally stored drafts through your browser. Depending on where you live, you may also have rights to access, correct, delete, or receive a copy of personal information; object to or restrict certain processing; withdraw consent; or appeal a decision about a privacy request.

Send requests to legal@suan.fm. We may need to verify your identity before completing a request. You may also have the right to complain to your local data protection or privacy regulator. We will not discriminate against you for exercising an applicable privacy right.

For California residents, SUAN has not sold personal information or shared it for cross-context behavioral advertising during the preceding 12 months.

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 provided personal information, contact us so we can review and delete it where appropriate.

Links, embedded players, social sign-in services, and other third-party features are governed by the third party’s own terms and privacy practices. This policy does not cover how those third parties independently use information.

We may update this policy as the Service or law changes. We will post the revised policy with a new effective date and provide additional notice when required.

For privacy questions or requests, email legal@suan.fm.