Privacy Policy

• Account data: email address, display name, and hashed password (stored by Supabase Auth).
• Billing data: payment method and subscription status, handled by Stripe. We never store raw card details.
• Gate analytics: anonymised IP hashes, user-agent strings, and event counts (visits, downloads, social actions).
• Fan contacts: email addresses and phone numbers entered by fans on your gates or update pages. These are stored on your behalf and associated with your artist account.

We use collected data to operate the Service, process payments, show you analytics, and communicate account information. We do not sell your data or fan data to third parties.

• Supabase: database and authentication hosting.
• Stripe: payment processing. Subject to Stripe's Privacy Policy.
• SoundCloud / Spotify: OAuth integration for fan unlock actions. Fan OAuth tokens are not stored; they are used only during the action verification flow and discarded.

When fans submit their email addresses through your gates, you (the artist) are the data controller for that information. You are responsible for obtaining any necessary consent and complying with applicable privacy laws when using those emails for marketing purposes.

Account and gate data is retained for as long as your account is active. You may delete individual gates or your entire account at any time. Account deletion removes live records and uploaded files immediately; encrypted backup copies expire within 30 days.

Depending on your location you may have rights to access, correct, or delete your personal data. To exercise these rights, email unlockd.real@gmail.com.

We may update this policy from time to time. We'll notify you of material changes by email or a notice in the dashboard.

Questions? Email us at unlockd.real@gmail.com.