Skip to main content

Privacy Policy

Last Updated: January 1, 2026

1. Introduction

Welcome to Cindy Music ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By using Cindy Music, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Data

We may collect personally identifiable information, including:

  • Email address (for newsletter subscriptions)
  • User preferences (language settings, theme choices)
  • Chat messages and interactions with Cindy AI
  • Fan Cafe posts and comments

2.2 Technical Data

We automatically collect technical information, including:

  • IP address and browser type
  • Device information and operating system
  • Referring website and pages viewed
  • Time and date of visit

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send technical notices and support messages
  • Respond to comments, questions, and customer service requests
  • Communicate about products, services, and events
  • Monitor and analyze trends, usage, and activities
  • Detect, prevent, and address technical issues and fraud

4. Data Sharing & Disclosure

4.1 Third-Party Services

We share data with the following third parties:

  • Supabase - Database and authentication services
  • Google/YouTube - Analytics and video embedding
  • Vercel - Hosting and analytics

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Supabase Row Level Security (RLS) policies
  • Regular security audits and updates
  • Access controls and authentication requirements

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights (GDPR & CCPA)

6.1 GDPR Rights (EU Residents)

Under the GDPR, you have the following rights:

  • Right to Access - Request a copy of your personal data
  • Right to Rectification - Correct inaccurate data
  • Right to Erasure - Request deletion of your data
  • Right to Restrict Processing - Limit how we use your data
  • Right to Data Portability - Receive your data in a structured format
  • Right to Object - Object to processing of your data

6.2 CCPA Rights (California Residents)

Under the CCPA, California residents have the right to:

  • Know what personal information is collected
  • Know if personal information is sold/disclosed
  • Opt-out of the sale of personal information
  • Access personal information
  • Equal service and price even if you exercise rights

7. Cookies & Tracking

We use cookies and similar tracking technologies:

  • Essential Cookies - Required for site functionality
  • Analytics Cookies - Google Analytics, Vercel Analytics
  • Preference Cookies - Language and theme settings

You can control cookies through your browser settings. Note that disabling cookies may affect site functionality.

8. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to remove that information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that your data is protected in accordance with this Privacy Policy and applicable laws, including using Standard Contractual Clauses (SCCs) for EU data transfers.

10. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have questions about this Privacy Policy, please contact us:

Exercise Your Rights

To access, delete, or modify your personal data, or to opt-out of data collection, please contact us using the email above with the subject line "Privacy Request."

Submit Privacy Request
Privacy Policy | Cindy Music | Cindy Music