Privacy Policy - Streamtunes

1. Introduction

Welcome to Streamtunes ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://streamtunes.net (the "Service") and use our music streaming platform.

Streamtunes is operated as a business registered in the State of Nevada, United States. By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described in this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account or use our Service, we may collect the following information:

Email Address: Required for account registration, login, communication, and email verification. Your email serves as your primary account identifier.
Password: Required for account security. Passwords are securely hashed using industry-standard cryptographic algorithms and are never stored in plain text.
Passkey Credentials: If you choose to use passkey authentication (WebAuthn/FIDO2), we store your public key credentials, attestation data, and related metadata necessary for secure passwordless authentication. Private keys never leave your device.
Theme Preferences: Your selected display theme preference (Light or Dark mode).

2.2 Information Collected Automatically

When you access the Service, we may automatically collect certain information:

Usage Data: Information about how you interact with the Service, including songs you preview, listen to, like, dislike, or add to playlists.
Technical Data: Device information, browser type, operating system, and IP address collected through standard web server logs and analytics.

2.3 Information We Do NOT Collect

We want to be clear about the information we do NOT collect:

We do NOT collect your name, physical address, phone number, or date of birth.
We do NOT collect or store your complete payment card details (these are handled exclusively by our payment processor).
We do NOT collect location data beyond what may be inferred from IP addresses.
We do NOT use cookies for third-party advertising or tracking across other websites.

3. Payment Processing and Payment Processor Integration

All payment transactions on Streamtunes are processed through our Payment Processor. When you subscribe to our service:

3.1 Information Shared with our Payment Processor

Order Details: The subscription amount and order reference ID
Currency: Transactions are processed in U.S. Dollars (USD)

3.2 Information We Receive from our Payment Processor

Order ID: A unique identifier for each transaction
Transaction Status: Whether the payment was completed, cancelled, or failed
Subscription ID: For monthly subscriptions, our Payment Processor provides a subscription identifier
Payment Timestamps: When payments were made and next billing dates

3.3 What We Store

We store the following payment-related information in our database:

Payment Processor order IDs and subscription IDs (not your Payment Processor account details)
Transaction amounts and status
Subscription status and billing dates

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 Account Management

Creating and maintaining your user account
Authenticating your identity when you log in
Sending email verification and password reset messages
Processing account changes and deletions

4.2 Service Provision

Providing access to music streaming
Managing your playlists and preferences
Processing subscriptions

4.3 Service Improvement

Understanding how users interact with our Service
Improving the functionality and user experience
Developing new features and services

4.4 Communication

Sending transactional emails (verification, subscription updates)
Responding to your inquiries and support requests
Notifying you of important changes to our Service or policies

4.5 Security and Legal Compliance

Protecting against fraudulent, unauthorized, or illegal activity
Enforcing our Terms of Use
Complying with legal obligations

5. Information Sharing and Disclosure

We take your privacy seriously and limit how we share your information:

5.1 We Do NOT Sell Your Personal Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5.2 Service Providers

We may share information with trusted third-party service providers who assist us in operating the Service:

Payment Processor: Payment processing
Email Service Providers: Sending transactional emails (verification, notifications)
Cloud Hosting: Secure data storage and service hosting

These providers are contractually obligated to use your information only for the services they provide to us and to maintain appropriate security measures.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

Valid legal process (subpoenas, court orders, or similar requests)
Requests from law enforcement or government authorities
Protection of our rights, property, or safety, or that of our users or the public

5.4 Business Transfers

If Streamtunes is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Service of any change in ownership or uses of your personal information.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

Password Security: Passwords are hashed using industry-standard cryptographic algorithms (ASP.NET Core Identity's default password hasher). We never store passwords in plain text.
Passkey Security: Passkey authentication uses public key cryptography. Your private keys never leave your device, and we only store the public key portion.
Encryption: Data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
Access Controls: Access to personal information is restricted to authorized personnel who need it to operate, develop, or improve our Service.
Secure Infrastructure: Our Service is hosted on secure cloud infrastructure with appropriate security certifications and compliance measures.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

Active Accounts: Your account information is retained as long as your account remains active.
Subscription Records: Transaction history is retained for legal/accounting purposes.
Account Deletion: When you delete your account, we delete your personal information, including your email, password hash, passkey credentials, playlists, and preferences. Some information may be retained in backups for a limited period or as required by law.

8. Your Rights and Choices

You have certain rights regarding your personal information:

8.1 Access Your Information

You can access and review the personal information we hold about you through your account management page.

8.2 Update Your Information

You can update your email address, password, and preferences through your account settings.

8.3 Delete Your Account

You have the right to delete your account at any time through your account management page. Please note that account deletion is permanent and will result in the loss of all your playlists.

8.4 Passkey Management

You can add, remove, or rename passkeys associated with your account at any time through your account management page.

8.5 Subscription Cancellation

You can cancel your subscription at any time through your account management page. After cancellation, you will retain access until the end of your current billing period.

8.6 Communication Preferences

You will receive essential transactional emails (verification, subscription confirmations, important account notices) as necessary for the operation of the Service. You cannot opt out of these essential communications while maintaining an account.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will promptly delete such information. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Streamtunes is based in the United States, and your information may be processed and stored in the United States. By using the Service, you consent to the transfer of your information to the United States, which may have data protection laws that differ from those in your country of residence.

11. Third-Party Links

The Service may contain links to third-party websites or services (such as our Payment Processor). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites or services you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Update the "Last Updated" date at the top of this Privacy Policy
Notify you via email or prominent notice on the Service for significant changes

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Streamtunes
Nevada, United States
Website: https://streamtunes.net
Email: customerservice@streamtunes.net

We will respond to your inquiry within a reasonable timeframe.

14. Acknowledgment

BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ THIS PRIVACY POLICY, UNDERSTAND IT, AND AGREE TO BE BOUND BY ITS TERMS. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, YOU MUST NOT USE THE SERVICE.