This Privacy Notice explains how Stav Danino, a licensed business (Osek Murshe) in Israel operating Frequency (the "Service", "we", "us"), collects, uses, and protects your personal data. We act as the data controllerfor personal data processed through the Service.
1. Personal Data We Collect
- Account data: name, email address, password (hashed), display name, avatar.
- Content: audio files, track metadata, lyrics, messages, and other content you upload or create.
- Usage data: features used, AI analyses run, chat messages, login timestamps, device and browser information, IP address.
- Support communications: messages you send us and our responses.
- Billing data: handled by our payment processor Paddle (see below). We receive only the subscription status, plan, and a customer reference.
2. How We Use Your Data & Legal Basis
- Provide the Service (contract performance): account creation, processing uploads, running AI analyses, displaying your dashboard.
- Billing & subscription management (contract performance): confirming your plan and renewal status via Paddle.
- Security & fraud prevention (legitimate interests): detecting abuse, protecting accounts.
- Product improvement & analytics (legitimate interests): understanding feature usage in aggregate.
- Customer support (contract / legitimate interests): responding to your requests.
- Legal compliance (legal obligation): tax records, responding to lawful requests.
3. Data Sharing & Subprocessors
We share personal data only with the following categories of recipients:
- Paddle.com Market Limited — Merchant of Record for all sales; handles payments, tax compliance, invoicing, and subscription billing.
- Supabase — database, authentication, and file storage hosting.
- Cloudflare — application hosting and edge delivery.
- AI providers — to process your audio and text for AI analyses and chat responses. Inputs are processed solely to return a result and are not used to train third-party models.
- Professional advisers (e.g., accountants, legal counsel) where required.
- Authorities where required by law.
4. International Transfers
Our subprocessors may process data outside your country, including in the EU, UK, and United States. Where required by law, transfers are protected by appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
5. Data Retention
- Account and content data: retained while your account is active, and for up to 90 days after deletion to allow recovery and meet legal obligations.
- Billing records: retained for the period required by applicable tax and accounting law (typically 7 years).
- Support messages: retained for up to 3 years.
- Aggregated/anonymized analytics: retained indefinitely.
6. Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Request correction or deletion of your personal data.
- Object to or restrict certain processing.
- Request a portable copy of data you provided.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at Stavdaninomusic@gmail.com. We respond within 30 days.
7. Security
We apply appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), encrypted storage, access controls, role-based permissions (RLS), and audit logging. No system is 100% secure; breaches that affect your data will be reported as required by law.
8. Cookies
We use essential cookies and local storage to keep you signed in and remember your preferences. We do not use advertising or cross-site tracking cookies. You can clear cookies and local storage from your browser settings.
9. Children
The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us so we can remove it.
10. Changes to this Notice
We may update this Notice. Material changes will be notified via the Service or by email. The "Last updated" date reflects the most recent revision.
11. Contact
Data controller: Stav Danino
Email: Stavdaninomusic@gmail.com