1. What We Collect
- Account data: Email address, display name, profile photo (if Google sign-in).
- Content: Audio files, comments, and version notes you upload or create.
- Usage data: Pages visited, features used, and approximate location (country-level) via PostHog analytics.
- Error data: Stack traces and session context when errors occur, via Sentry.
2. How We Use It
- To provide the Service (store, deliver, and display your audio files and comments to you and the collaborators you invite).
- To send transactional emails (invite, comment notifications, status updates).
- To send onboarding emails to new accounts (you can unsubscribe at any time).
- To diagnose errors and monitor application health.
We do not use your audio files or content to train models, improve our systems, or for any purpose other than delivering them to the people you choose to share them with.
3. Third-Party Processors
We share data with the following processors to operate the Service:
- Supabase (EU/Ireland) — database and authentication.
- Cloudinary — audio file storage and delivery.
- Resend — transactional email delivery.
- PostHog (EU) — product analytics.
- Sentry — error monitoring.
- Vercel — hosting and edge delivery.
4. Data Retention
We retain your data for as long as your account is active. When you delete your account, your data is deleted within 30 days, except where we are required to retain it by law.
5. Your Rights (GDPR)
If you are in the European Economic Area, you have the right to:
- Access the personal data we hold about you.
- Request correction or deletion of your data.
- Object to or restrict processing.
- Request a portable copy of your data.
To exercise these rights, email admin@bandaid.dev. We respond within 30 days.
6. Cookies
We use strictly necessary cookies for authentication (Supabase session) and optional analytics cookies (PostHog). You can opt out of analytics cookies via your browser settings or by contacting us.
7. Email Opt-Out
Every notification email includes an unsubscribe link. You can also opt out of all emails from your account settings.
8. Contact
Data controller: AudioReview (bandaid.dev). Questions or data requests: admin@bandaid.dev.