Privacy Policy

1. Information We Collect

The Company collects the following categories of information.

Account information

Your email address, a hashed version of your password, whether your account has been activated, your preferred country and currency, and the date your account was created.

Profile and public content

Your channel display name, username, description, avatar, banner and page background images, external links, comments, follows, and bookmarks. This information is visible to other users of the Service.

Items and uploads

The audio, artwork, and images you upload, together with the titles, descriptions, prices, and licensing information you provide for them.

Order information

What was purchased, the price and currency, the status of the order, and the shipping information needed to deliver a physical product.

Payment connection information

Where you connect an account with a Third-Party Payment Provider in order to receive payments, the merchant or account identifier that provider returns to the Company and the permissions you granted. The Company never receives or stores your credentials with that provider, or your card details.

Order communications

Messages, and any images attached to them, exchanged between a Customer and a Seller in connection with an order.

Activity information

A record of actions taken on the Service, such as purchases, follows, comments, and shipment updates, together with the time of the action. Changes to a shipment are recorded so that abuse can be traced.

2. How We Use Information

The Company uses the information it holds to:

• process, fulfill, and support transactions;
• operate, maintain, and secure the Service;
• display public profiles, Items, and comments;
• send you email related to your transactions and your account; and
• investigate suspected fraud or abuse, enforce the Terms of Service and the Acceptable Use Policy, and comply with legal obligations.

3. Cookies and Sessions

The Company uses a session cookie to keep you signed in. It is strictly necessary for the Service to function and is not used for advertising. A session expires after three days, and its expiry is extended each time you use the Service. The Company does not use third-party advertising cookies or cross-site tracking.

4. Information Shared with Sellers

Sellers have access to the shipping information for orders placed with them, for the purpose of delivering purchased products, and to the order communications relating to those orders. The Acceptable Use Policy requires Sellers to use that information only to fulfill the order it relates to. Sellers are responsible for handling that information in accordance with their own obligations.

5. Service Providers

The Company relies on third parties to operate the Service. These include providers that:

• host the Service and store uploaded files;
• deliver transactional email;
• protect the Service against automated abuse and spam; and
• process payments and handle Seller onboarding.

Cloudflare is used for bot detection and spam reduction. For that purpose it processes visitor information, including IP address and browser characteristics, when you use the Service.

Where you buy or sell, the applicable Third-Party Payment Provider receives the information it needs to process the transaction. The Company may support more than one Third-Party Payment Provider, and the one used for a given transaction depends on what the Seller has connected. Payment providers act as independent controllers of the information they receive and handle it under their own privacy policies.

Providers that process information solely on the Company's behalf are not permitted to use it for their own purposes.

6. No Sale of Information

The Company does not sell your information, and does not share it for cross-context behavioral advertising.

7. Communications Between Buyers and Sellers

Communications between buyers and sellers are ephemeral and persist only for 60 days after an order is placed. Communications between buyers and sellers are not private, and neither buyers nor sellers should divulge personal information outside what is related to a transaction.

8. Retention and Deletion

The Company retains information for as long as your account is open, and afterwards for as long as it is needed for the purposes described in this Privacy Policy.

When you delete an Item that has never been purchased, the Company deletes the Item and the files associated with it. When you delete an Item that has been purchased, the Company removes it from the Service but retains the underlying record, so that Customers keep access to what they paid for and so that the Company can meet its tax, accounting, and dispute obligations. Deleting a channel or an account works in the same way.

Order records, including shipping information, are retained for as long as tax, accounting, and dispute purposes require. Order communications are deleted 60 days after the order is placed.

9. Your Rights

Depending on where you live, you may have the right to:

• access the information the Company holds about you;
• correct information that is inaccurate or incomplete;
• delete information, subject to the retention rules described above;
• receive a copy of the information you provided in a portable format;
• object to, or ask the Company to restrict, certain processing; and
• withdraw your consent, where processing is based on consent.

To exercise any of these rights, contact legal@noise.box. The Company will respond within the period the applicable law allows. You may also complain to your local data protection authority.

Where the EU or UK General Data Protection Regulation applies, the Company relies on the following legal bases: performance of a contract, for account, order, and delivery information; legitimate interests, for securing the Service, preventing abuse, and displaying public profiles and Items; legal obligation, for tax and accounting records; and consent, where the Company asks for it.

10. California Residents

If you are a California resident, you have the right to know what personal information the Company collects, uses, and discloses, the right to delete that information, the right to correct it, and the right not to be treated differently for exercising any of these rights. As stated above, the Company does not sell personal information and does not share it for cross-context behavioral advertising. To exercise a right, contact legal@noise.box.

11. International Transfers

The Company operates from the United States, and information is processed there. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection law may differ from the law of your own country.

12. Security

The Company takes reasonable technical and organizational measures to protect the information it holds, including encryption in transit and storing passwords only in hashed form. No method of transmission or storage is completely secure, and the Company cannot guarantee absolute security.

13. External Links

The Service may contain links to external websites. These links are not monitored by the Company, and any external websites are governed by their own privacy policies. The Company is not responsible for the privacy practices of third-party websites.

14. Children

Children under the age of 16 should not use the Service. The Company does not knowingly collect information from children under the age of 16.

15. Changes to this Privacy Policy

The Company may update this Privacy Policy at any time and without prior notice. Any changes will be effective immediately upon posting to the Service, and your continued use of the Service after any such change constitutes your acceptance of the revised Privacy Policy.

16. Contact

Questions about this Privacy Policy or other legal matters may be directed to legal@noise.box.