draft — pending legal review

1. 01

   what we collect

   We collect as little as we can:

   • Email address: when you download a loop or buy something, so we can send your download link and receipt.
   • Download and order records: which items you downloaded or bought, when, and the license terms you accepted.
   • Payment details: entered on our payment provider's secure checkout. Card numbers never reach our servers; we only receive the order total, items and your email.
   • Technical data: IP address, browser type and request logs kept by our hosting provider, used for security and to stop abuse.
   • On your device: your light/dark mode choice, stored in your browser. It never leaves your device.
2. 02

   how we use it

   • To deliver downloads and purchases, and let you re-download them.
   • To keep a record of license terms you accepted (for example, credit and release splits on free loops).
   • To answer you when you contact us.
   • To protect the site from fraud, abuse and attacks.
   • To send occasional updates about new releases, only if you opt in. Every email has an unsubscribe link.
3. 03

   who we share it with

   We do not sell or rent your personal information, and we don't share it for advertising. We use no ad trackers. We use a small set of service providers who process data only to run the site:

   • Hosting: Vercel.
   • Database and file storage: Supabase.
   • Payments: Stripe, which processes your payment and may act as the seller of record for purchases. Its own privacy policy applies to what you enter at checkout.
   • Email delivery: our email provider, to send download links and receipts.
   • Bot protection: Cloudflare, to keep automated abuse off our forms.

   We may also disclose information if required by law, or to protect our rights in a dispute.

   Links to Telegram, Instagram and other sites are covered by those sites' own policies.

4. 04

   how long we keep it

   Order and license records are kept for as long as the license applies and as tax and accounting rules require. Technical logs are kept for a short period for security. You can ask us to delete your email and records at any time, except where we must keep them by law.

5. 05

   your choices and rights

   You can ask us to show you, correct or delete the personal information we hold about you by emailing business@chayknbayk.com.

   California residents have additional rights under state law, including to know what we collect and to ask for deletion. We will not treat you differently for using them.

   Do Not Track and Global Privacy Control: we don't track you across other sites or sell or share your data for advertising, so there is nothing for these signals to switch off. We treat them as a request to opt out in any case.

6. 06

   security

   We use encrypted connections (HTTPS), restricted access to stored data, expiring download links and two-factor login for administrators. No system is perfectly secure, but we take reasonable measures to protect your information and will notify you as required by law if a breach affects it.

7. 07

   children

   This site is not intended for children under 13, and we don't knowingly collect their information.

8. 08

   changes

   If we change this policy, we'll update the effective date above and, for significant changes, note it on the site.

9. 09

   contact

   Questions or requests: business@chayknbayk.com.