SoundPure ← Back to SoundPure

Privacy Policy

1. Who we are

SoundPure ("we", "us", "our") is an online audio processing service available at soundpure.eu. For any privacy-related enquiries, contact us at: privacy@soundpure.eu.

2. What data we collect

We collect the following categories of personal data:

• Account data: name, email address, password (hashed — never stored in plain text)
• Profile data: phone number (optional), marketing preferences
• Billing data: subscription plan, payment history, Stripe customer ID. Full card details are handled exclusively by Stripe and never stored on our servers.
• Usage data: credit consumption per tool, plan type, subscription dates
• Technical data: browser session tokens (used for authentication only)

We do not store, listen to, or retain the audio files you upload. All audio processing happens either in your browser (client-side) or on our processing server where files are deleted immediately after processing is complete.

3. How we use your data

• To provide and maintain the SoundPure service
• To manage your account and subscription
• To process payments via Stripe
• To send transactional emails (account confirmation, billing receipts)
• To send marketing communications, only if you have explicitly opted in
• To improve our service through aggregated, anonymised usage analysis

4. Legal basis for processing (GDPR)

• Contract performance: processing necessary to provide the service you signed up for
• Legitimate interest: service security, fraud prevention, abuse detection
• Consent: marketing emails (you can withdraw consent at any time)
• Legal obligation: retention of billing records as required by Italian and EU tax law

5. Third-party processors

We share data with the following sub-processors, each bound by their own GDPR-compliant privacy terms:

• Supabase Inc. — database and authentication (supabase.com)
• Stripe Inc. — payment processing (stripe.com/privacy)
• Railway Corp. — backend server hosting (railway.app)
• Hostinger International — frontend hosting (hostinger.com)

We do not share your data with any other third parties, advertisers or data brokers.

6. Data retention

• Account data is retained for as long as your account is active
• Upon account deletion, personal data is removed within 30 days
• Billing records are retained for 10 years as required by Italian tax law
• Audio files are never permanently stored — they are deleted immediately after processing

7. Your rights under GDPR

As a data subject you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Restriction — ask us to limit how we use your data
• Objection — object to processing based on legitimate interest
• Withdraw consent — for any processing based on consent (e.g. marketing)

To exercise any of these rights, contact us at privacy@soundpure.eu. We will respond within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali — garanteprivacy.it).

8. Cookies

We use a minimal number of cookies. Please refer to our Cookie Policy for full details.

9. Security

We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption, hashed passwords, and role-based access controls on our database. No method of transmission over the internet is 100% secure; we strive to use commercially acceptable means to protect your data.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

For any privacy-related questions or to exercise your rights: privacy@soundpure.eu