Privacy Policy

1. Overview

Psalmos ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and share information when you use the Psalmos platform at psalmos.io. By using the Platform, you agree to the practices described in this policy.

2. Information We Collect

Information you provide directly:

• Account information: name, email address, password
• Billing information: payment details processed securely via Stripe (we do not store card numbers)
• Communications: messages you send to our support team
• Waitlist submissions: name and email

Information collected automatically:

• Usage data: pages visited, tracks previewed, searches performed, licenses purchased
• Device information: browser type, operating system, IP address
• Cookies and similar tracking technologies for session management and analytics

3. How We Use Your Information

• To provide and improve the Platform and licensing services
• To process payments and manage your subscription
• To send transactional emails (purchase confirmations, license documentation)
• To send the Psalmos newsletter, if you have subscribed (you may unsubscribe at any time)
• To analyze usage patterns and improve catalogue curation
• To comply with legal obligations
• To prevent fraud and enforce our Terms of Service

4. Sharing of Information

We do not sell your personal information. We may share information with:

• Service providers — including Stripe (payments), Resend (email delivery), Clerk (authentication), Mixpanel (analytics), and Supabase (database hosting). Each provider has their own privacy policy and data processing agreements with us.
• Label partners — in aggregate, anonymized form only, to report usage and inform catalogue decisions. Individual user data is never shared with rights holders.
• Legal authorities — if required by law, subpoena, or to protect the rights and safety of Psalmos or its users.

5. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze how the Platform is used. You may disable cookies in your browser settings, but doing so may affect the functionality of the Platform. We do not use third-party advertising cookies.

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide the service. License records are retained for a minimum of 7 years for legal and accounting purposes. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to or restrict certain processing activities
• Data portability — receive a copy of your data in a structured format
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@psalmos.io. We will respond within 30 days.

8. International Data Transfers

Your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. By using the Platform, you consent to the transfer of your information to these countries. We ensure that appropriate safeguards are in place with our service providers through data processing agreements and, where applicable, Standard Contractual Clauses approved by the European Commission.

9. Legal Basis for Processing (EEA/UK)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

• Contract performance — to provide the Platform, process licenses, and manage your account
• Legitimate interests — to improve our services, prevent fraud, and analyze usage patterns, where these interests are not overridden by your rights
• Consent — to send marketing communications such as our newsletter (you may withdraw consent at any time)
• Legal obligation — to comply with applicable laws, regulations, and legal processes

10. Security

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, and access controls. Payment processing is handled entirely by Stripe and is PCI-DSS compliant. While we take reasonable precautions to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

11. Children's Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

12. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt out of the sale of your personal information (Psalmos does not sell personal information)
• The right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us at privacy@psalmos.io. We will verify your identity before processing your request and respond within 45 days.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the Platform at least fourteen (14) days before they take effect. Your continued use of the Platform after the effective date of any modifications constitutes acceptance of the updated policy.

14. Contact

For privacy-related inquiries, contact us at privacy@psalmos.io.