Privacy Policy

1. Information We Collect

Account Information

When you register for an account, we collect your name, email address, and password. Your password is securely hashed and never stored in plain text.

Payment Information

Payment transactions are processed by our third-party payment provider, Omise. We do not store your bank account details, credit card numbers, or other sensitive financial information on our servers. We retain transaction records including purchase amounts, payment method type, and transaction status for billing and accounting purposes.

Usage Data

We collect usage data to operate and improve the Service, including listener statistics, play logs, stream activity, and general usage patterns within the platform.

Uploaded Content

When you upload audio files (songs, spots), we store the files along with associated metadata such as title, artist, album, duration, and file size. This information is necessary to provide the broadcasting functionality of the Service.

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Process payments and manage your coin balance and station subscriptions
• Send service-related notifications, including billing alerts, subscription reminders, and account security notices
• Monitor and improve platform performance and reliability
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations

3. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Secure database storage with encrypted connections
• S3-compatible cloud storage for media files with access controls
• Token-based authentication for API access
• Optional two-factor authentication (TOTP) for enhanced account security
• Rate limiting to prevent brute-force attacks

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

4. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

• Session cookies: Essential for authentication and maintaining your logged-in session
• Preference cookies: To remember your theme preference (light/dark mode) and UI layout settings such as sidebar state
• Error monitoring: We use Sentry for error tracking and performance monitoring to improve service reliability

We do not use third-party advertising or marketing cookies. You can manage your cookie preferences through your browser settings or our cookie consent controls.

5. Payment and Refund Policy

Payments for coin purchases are processed securely through Omise, supporting PromptPay and Internet Banking payment methods.

6. Third-Party Services

We integrate with the following third-party services to provide the platform:

• Omise — Payment processing for coin purchases
• DigitalOcean Spaces — Cloud storage for audio files and media content
• Sentry — Application error monitoring and performance tracking
• Shoutcast/DNAS — Audio streaming infrastructure

Each third-party service operates under its own privacy policy. We encourage you to review their policies for information about how they handle data.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained while your account remains active
• Uploaded media files are stored as long as your account is active
• Transaction and billing records are retained for accounting and legal compliance purposes
• Play logs and listener statistics are retained for service operation and analytics

Upon account deletion, we will remove your personal data within a reasonable timeframe, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Export: Request a portable copy of your data

To exercise any of these rights, please contact us using the information provided below.

9. Children's Privacy

The Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal data from a child under 13, we will take steps to delete such information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and may notify you through email or an in-app announcement. We encourage you to review this page periodically for any changes.

11. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at [email protected].