Privacy Policy
Last updated: February 2026 • GDPR Compliant
Privacy at a Glance
We collect minimal data
Only what's needed to provide service
No third-party sharing
Your data stays with us
Delete on cancellation
We don't keep your data after you leave
GDPR compliant
Full data protection rights
1. Data We Collect
| Data | Purpose |
|---|---|
| Email address | Account login, communications |
| Business name | Account identification |
| Password (encrypted) | Account security |
| Subscription plan | Service delivery |
| Payment info | Billing (via Stripe) |
| Device identifiers | Session management |
| IP address | Security, session validation |
What We Do NOT Collect
- ❌ GPS/location tracking
- ❌ Data about your customers or visitors
- ❌ Audio recordings from your venue
- ❌ Personal data of your employees
2. How We Use Your Data
- ✅ Providing access to music streaming
- ✅ Account management and login
- ✅ Ensuring one device per location
- ✅ Service updates and billing notices
- ✅ Responding to your support inquiries
We do NOT sell your data or use it for third-party marketing.
3. Data Sharing
We do NOT share your data with any third parties for marketing purposes.
Service providers (Stripe for payments, Supabase for database) only process data as necessary and are bound by data protection agreements.
4. Data Retention
| Status | What Happens |
|---|---|
| Active subscription | Data kept while subscribed |
| After cancellation | Data deleted |
| Legal requirement | May retain if required by law |
5. Your Rights (UK GDPR)
You have the right to:
- Access – Request a copy of your data
- Rectification – Correct inaccurate data
- Erasure – Request deletion of your data
- Restriction – Limit how we use your data
- Portability – Receive your data in portable format
- Objection – Object to certain processing
6. Cookies
We use only essential cookies for login and security. No advertising or third-party tracking cookies.
7. Contact Us
For privacy questions or to exercise your rights, contact: privacy@sonosfera.com
You can also contact the ICO (ico.org.uk) if unsatisfied with our response.
Your privacy matters to us. We only collect what we need and never sell your data.