Privacy Policy
Last Updated: December 22, 2024
1. Introduction
CR8S ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the "Service").
Please read this Privacy Policy carefully. By using our Service, you consent to the collection and use of your information as described in this policy.
2. Information We Collect
2.1 Information You Provide
We collect information you voluntarily provide, including:
- Account Information: Name, email address, username, password, and profile picture
- Payment Information: Billing address, payment method details (processed securely through Stripe and PayPal)
- Profile Data: Music preferences, curations, favorites, and listening history
- Communications: Messages, feedback, support requests, and survey responses
- User Content: Any content you upload, create, or share on the platform
2.2 Information Collected Automatically
When you use our Service, we automatically collect:
- Device Information: Browser type, operating system, device identifiers
- Usage Data: Pages visited, features used, time spent, click patterns
- Log Data: IP address, access times, referring URLs, error logs
- Cookies and Tracking: Session data, preferences, authentication tokens
2.3 Information from Third Parties
We may receive information from:
- Social media platforms if you connect your account
- Payment processors (Stripe, PayPal) regarding transaction status
- Analytics providers for aggregated usage statistics
3. How We Use Your Information
We use your information to:
- Provide Services: Process transactions, deliver content, manage your account
- Personalize Experience: Customize recommendations, remember preferences
- Process Payments: Handle subscriptions, licenses, and refunds
- Communicate: Send updates, newsletters, promotional materials (with consent)
- Improve Services: Analyze usage, develop new features, fix bugs
- Ensure Security: Detect fraud, prevent abuse, protect our platform
- Legal Compliance: Meet legal obligations, respond to legal requests
4. How We Share Your Information
We may share your information with:
4.1 Service Providers
Third-party companies that help us operate our Service, including payment processors (Stripe, PayPal), hosting providers, email services, and analytics platforms. These providers are contractually obligated to protect your data.
4.2 Artists and Rights Holders
Aggregated licensing and usage data may be shared with artists to provide royalty information and platform insights. This data is anonymized where possible.
4.3 Legal Requirements
We may disclose information when required by law, court order, or government request, or when necessary to protect our rights, safety, or property.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
4.5 With Your Consent
We may share your information for other purposes with your explicit consent.
5. Cookies and Tracking Technologies
We use cookies and similar technologies for:
- Essential Cookies: Required for authentication and basic functionality
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Help us understand how you use our Service
- Marketing Cookies: Track marketing effectiveness (optional, with consent)
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our Service.
6. Data Security
We implement industry-standard security measures to protect your personal data, including:
- SSL/TLS encryption for data in transit
- Encrypted storage for sensitive information
- Regular security audits and vulnerability assessments
- Access controls and authentication requirements
- Secure payment processing through PCI-compliant providers
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our Services. We may also retain data as necessary to:
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Maintain business records for tax and accounting purposes
- Prevent fraud and abuse
When you delete your account, we will delete or anonymize your personal data within 90 days, except where retention is required by law.
8. Your Rights and Choices
Depending on your location, you may have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal data
- Portability: Receive your data in a portable format
- Opt-Out: Unsubscribe from marketing communications
- Restrict Processing: Limit how we use your data
- Object: Object to certain processing activities
To exercise these rights, contact us at privacy@cr8s.com. We will respond within 30 days.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and compliance with applicable data protection laws.
10. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it promptly. If you believe we have collected information from a child under 13, please contact us immediately.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the CCPA:
- Right to know what personal information is collected, used, and shared
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your privacy rights
To submit a CCPA request, email us at privacy@cr8s.com or use our contact form.
12. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have rights under the GDPR:
- Right to access, rectify, and erase your data
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
Our legal bases for processing include consent, contract performance, legitimate interests, and legal obligations.
13. Third-Party Links
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: privacy@cr8s.com
Website: Contact Page
By using CR8S, you acknowledge that you have read and understood this Privacy Policy.