Privacy policy

1. Information We Collect

Information You Provide:

• Account information (name, email)
• Professional information (role, location, bio, portfolio)
• Session details and communications
• Profile photos
• Audio files and song submissions uploaded through the platform
• Location (only the city you set on your profile or sessions)

Information Collected Automatically:

• Device information (type, OS)
• Push notification tokens (Firebase Cloud Messaging, Apple Push Notification Service)
• Usage data (features accessed, session duration)

2. How We Use Your Information

• Provide and operate the platform
• Match professionals with sessions
• Facilitate communication between users
• Send notifications and updates
• Improve and develop new features
• Ensure security and prevent fraud

3. Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR:

• Performance of a contract (Art. 6(1)(b)): Account creation, professional matching, and communication between users, necessary to provide the service you signed up for.
• Legitimate interest (Art. 6(1)(f)): Security, fraud prevention, and service improvement. We have a legitimate interest in keeping the platform safe and making it better.
• Consent (Art. 6(1)(a)): Push notifications. You can enable or disable these through your device settings at any time.

4. How We Share Your Information

• With other users: Your profile is visible to labels/professionals
• Brief submissions: Audio files you submit to a brief are shared with the brief owner solely for listening and evaluation purposes. No usage rights are granted through submission alone.
• Service providers: Cloud hosting (Supabase), notifications (Firebase)
• Legal requirements: When required by law

We do not sell your personal information.

5. Your Rights

Under the GDPR and applicable data protection laws, you have the right to:

• Access (Art. 15): Request a copy of your personal data
• Rectification (Art. 16): Correct inaccurate or incomplete information
• Erasure (Art. 17): Request deletion of your account and personal data
• Restriction (Art. 18): Request restriction of processing of your data
• Portability (Art. 20): Receive your data in a structured, machine-readable format
• Objection (Art. 21): Object to processing based on legitimate interests
• Withdraw consent (Art. 7(3)): Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing

To exercise these rights, use the one-click request forms on Privacy choices or email support@noiiise.com. We will respond within 30 days.

You also have the right to lodge a complaint with a data protection supervisory authority in your country of residence.

The names, faces, roles, organisations, messages, figures and other details shown in the examples, mockups and illustrations on our website are fictional and for illustration only. Any resemblance to real persons, living or dead, or to real organisations is coincidental, and the photos of people in these examples do not depict the people named next to them. This does not apply to the members of our team presented as such on our About us page. If you believe your name or image appears on our website and you want it removed, email support@noiiise.com and we will remove it.

6. Data Security

We use encryption (TLS, AES-256), access controls, and security monitoring to protect your data.

7. International Data Transfers

Your data may be processed in the following locations:

• Supabase (database & auth): AWS Frankfurt, Germany (EU). No transfer outside the EU
• Firebase Cloud Messaging (Google): United States, covered by the EU-US Data Privacy Framework
• Apple Push Notification Service: United States, covered by the EU-US Data Privacy Framework
• Cloudflare (CDN & edge): Global edge network, protected by Standard Contractual Clauses (SCCs)
• Cloudflare R2 (audio file storage): Audio submissions are stored in Cloudflare R2 object storage, protected by Standard Contractual Clauses (SCCs)

8. Data Retention

We retain your data while your account is active. Audio files you upload remain stored until you delete them or delete your account. After account deletion, personal data is anonymized or removed within 30 days. Uploaded audio files are permanently deleted upon account deletion or upon your request. Backups containing personal data are purged within 90 days.

9. Children's Privacy

Noiiise is intended for music industry professionals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us at support@noiiise.com and we will promptly delete it.

10. Data Controller

The data controller responsible for your personal data is:

Noiiise OÜ
Registry code: 17584092
Tornimäe tn 5, Kesklinna linnaosa, 10145 Tallinn, Estonia
Email: support@noiiise.com

11. Cookies & Local Storage

Noiiise does not use cookies for tracking, advertising, or analytics. We use browser local storage solely to maintain your authenticated session. No cookie consent is required because we do not set any non-essential cookies.

12. Contact Us

For any questions about this Privacy Policy or your personal data, contact us at:

Email: support@noiiise.com