Privacy Policy

Last updated: March 5, 2025

1. Introduction

This Privacy Policy describes how [Your Legal Entity Name] ("PreDrop," "we," "us," or "our") collects, uses, stores, and protects your personal information when you use our platform and services. We are committed to protecting your privacy in accordance with the Israeli Privacy Protection Law, 5741-1981, the Privacy Protection Regulations (Data Security), 5777-2017, and the EU General Data Protection Regulation (GDPR) where applicable.

[Your Legal Entity Name] is a company registered in the State of Israel and serves as the data controller for the personal information processed through the Service.

2. Information We Collect

2.1 Information You Provide

  • Account information: name, email address, artist/DJ name, profile picture, and other details you provide during registration or profile setup.
  • User content: audio files, track metadata, artwork, and other content you upload to the Service.
  • Communications: messages, feedback, and support requests you send to us.

2.2 Information Collected Automatically

  • Usage data: pages visited, features used, actions taken within the Service, and timestamps.
  • Device information: browser type, operating system, and device identifiers.
  • Log data: IP address, access times, and referring URLs.

2.3 Information from Third Parties

  • Paddle: our payment processor and Merchant of Record may share transaction data, billing country, and payment status with us. Paddle processes your payment information directly — we do not store credit card numbers or payment credentials.
  • Authentication providers: if you sign in through a third-party provider (e.g., Google), we receive basic profile information as authorized by you.

3. How We Use Your Information

We use your personal information for the following purposes:

  • Providing, maintaining, and improving the Service.
  • Processing and managing your account and subscription.
  • Analyzing your uploaded audio content (BPM detection, key detection, loudness measurement, flight score calculation) to provide the core functionality of the Service.
  • Communicating with you about your account, updates, and support.
  • Sending service-related notifications and, with your consent, promotional communications.
  • Ensuring security, detecting fraud, and preventing abuse.
  • Complying with legal obligations under Israeli and applicable international law.

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

  • Contract performance: processing necessary to provide the Service you subscribed to.
  • Legitimate interests: improving our Service, analytics, and security measures.
  • Consent: where you have given explicit consent, such as for marketing communications.
  • Legal obligation: compliance with applicable Israeli and international laws.

5. Data Storage & Security

Your data is stored using industry-standard infrastructure:

  • Account data and metadata are stored in our database hosted by Supabase.
  • Audio files are stored in Cloudflare R2 object storage with encryption at rest.
  • Artwork and profile images are stored in Supabase Storage.

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, in accordance with the Israeli Privacy Protection Regulations (Data Security), 5777-2017.

6. Data Sharing & Sub-Processors

We do not sell your personal information. We share data only with the following categories of service providers who assist us in operating the Service:

  • Paddle — payment processing, billing, and tax compliance (Merchant of Record).
  • Supabase — database hosting and authentication.
  • Cloudflare — content delivery and audio file storage (R2).
  • Vercel — application hosting.
  • ACRCloud — audio recognition for copyright identification.

We may also disclose information when required by law, court order, or governmental authority, or to protect our rights, safety, or property.

7. International Data Transfers

As PreDrop operates globally, your data may be transferred to and processed in countries outside of Israel. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with the Israeli Privacy Protection Law and, where applicable, GDPR requirements, including standard contractual clauses or adequacy decisions.

8. Cookies & Tracking

We use essential cookies required for the Service to function (e.g., session authentication). We may also use analytics tools to understand how the Service is used. You can manage cookie preferences through your browser settings. For more details, refer to your browser's documentation on managing cookies.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for a reasonable period as required by law or for legitimate business purposes (e.g., legal claims, audit requirements). Audio files and user content are deleted within 30 days of account deletion.

10. Your Rights

Under Israeli law and the GDPR (where applicable), you have the following rights:

  • Right of access: request a copy of the personal information we hold about you.
  • Right to correction: request correction of inaccurate or incomplete data.
  • Right to deletion: request deletion of your personal information, subject to legal retention requirements.
  • Right to restrict processing: request that we limit how we use your data.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object: object to processing based on legitimate interests.
  • Right to withdraw consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at support@predrop.io. We will respond within 30 days. You also have the right to file a complaint with the Israeli Privacy Protection Authority (PPA) or, for EU residents, with your local data protection authority.

11. Children's Privacy

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

13. Contact

For privacy-related inquiries or to exercise your rights, please contact us at support@predrop.io.

You may also contact the Israeli Privacy Protection Authority (PPA) at www.gov.il.