SoundSift — Privacy Policy
1. Who is responsible for your data
Rulirela LLC, a Texas limited liability company, operates the SoundSift service and is the controller of the personal information described in this policy.
Rulirela LLC 2985 Grove Way Seguin, Texas 78155 United States support@soundsift.app
This policy explains what we collect, why, who we share it with, and what rights you have. It applies to soundsift.app, app.soundsift.app, and related services.
2. The short version
- We do not keep your audio files. They are processed and deleted, not stored or archived.
- We do not use your audio to train AI models.
- We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
- We never see your payment card details — Lemon Squeezy handles all payments.
- We only email you about your account unless you specifically opt in to product updates.
- We keep a small amount of account and usage data, described below.
3. What we collect
3.1 Account information
When you sign in with Google, we receive and store:
- Your email address
- A Google account identifier (a stable, unique ID Google assigns to your account)
We do not receive your Google password. We do not request access to your Google contacts, files, or other Google services.
3.2 Audio you upload — processed, not retained
When you analyze a file, the audio is written to temporary storage on our processing server, analyzed, and then deleted. Deletion happens through automatic cleanup, and you can trigger it immediately using the clear-files control in the application.
We do not store, archive, back up, or retain uploaded audio. We do not use it to train AI models. It is not shared with third parties except as necessary to run the analysis described in Section 5.
3.3 Analysis and usage records
We do retain a record of your activity in order to operate the free tier, enforce plan limits, and understand how the Service is used. For each analysis or comparable event, we store:
- Your account identifier
- The type of event (for example: analysis, comparison, question, export)
- The duration in seconds of the audio analyzed
- A timestamp
We do not currently store file names, file contents, or the analysis results themselves. If we begin collecting additional metadata in the future — for example file name, file size, or file format — we will update this policy and its effective date before that collection begins.
3.4 Subscription records
When you purchase a plan, Lemon Squeezy sends us a record containing the order identifier, the product purchased, subscription status, and the current billing period dates. We use this to determine whether your account has paid access.
We do not receive or store your card number, CVV, expiration date, or billing address. Those are handled entirely by Lemon Squeezy.
3.5 Technical and log data
Our hosting and network providers generate standard server logs, which may include IP address, browser and device type, pages or endpoints requested, and timestamps. These are used for security, abuse prevention, and diagnosing problems.
3.6 Support correspondence
If you email us, we keep your message and our reply so we can respond and maintain a support history.
3.7 Your agreements and preferences
When you accept our Terms of Service, Privacy Policy, and Refund and Cancellation Policy, we record which version of each document you accepted, the date and time you accepted it, and your browser's user-agent string. This is how we can show you — in your account settings — exactly what you agreed to and when. We do not record your IP address as part of this.
If you choose to receive product update emails, we also store your preference, the date you gave it, and the version of this policy in effect at the time. This is optional, never required to use the Service, and switched off by default. You can withdraw it at any time in your account settings, and it takes effect immediately.
Withdrawing it does not affect service emails about your account, your billing, or security matters. Those are not optional and are not marketing.
4. Why we use it, and our legal bases
| What we use it for | Data involved | Legal basis (EEA/UK) |
|---|---|---|
| Creating and authenticating your account | Account information | Performance of a contract |
| Running the analysis you request | Uploaded audio (transient) | Performance of a contract |
| Enforcing free-tier limits and paid access | Usage records, subscription records | Performance of a contract |
| Responding to support requests | Support correspondence, account information | Performance of a contract; legitimate interests |
| Recording which policy versions you accepted | Agreement records | Legal obligation; legitimate interests |
| Sending product update emails | Email address, email preference | Consent |
| Security, abuse prevention, and troubleshooting | Technical and log data | Legitimate interests |
| Understanding aggregate usage to improve the Service | Usage records | Legitimate interests |
| Meeting legal, tax, and accounting obligations | Subscription records | Legal obligation |
We do not use your personal information for advertising, profiling, or automated decision-making that produces legal or similarly significant effects.
5. Who we share it with
We share personal information only with service providers that help us run SoundSift, and only to the extent needed. We do not sell it.
| Provider | Role | What it receives |
|---|---|---|
| Google LLC | Sign-in (OAuth / OpenID Connect) | Authentication request; returns your email and account identifier |
| Render Services, Inc. | Application hosting and database (United States) | All data processed and stored by the Service |
| Cloudflare, Inc. | DNS, landing site hosting, network security | Network-level request data |
| Lemon Squeezy, LLC | Merchant of record; payment processing | Your payment and billing details, which it collects directly from you; it returns order and subscription records to us |
| OpenRouter, Inc. and the AI model provider it routes to (currently Google) | Generating written analysis and answering your questions about a track | Numerical acoustic features derived from your audio, and the text of any question you ask |
| Zoho Corporation | Business email | Support correspondence you send us |
Note on AI processing: we send derived numerical features and your typed questions to the AI provider — not your audio file itself.
We may also disclose information if required by law, subpoena, or valid legal process; to protect the rights, property, or safety of Rulirela, our users, or the public; or in connection with a merger, acquisition, or sale of assets, in which case we will provide notice before your information becomes subject to a different privacy policy.
6. International transfers
Rulirela LLC operates from the United States, and our infrastructure providers process data in the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection law differs from that of your home country.
Where required for transfers from the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum, where applicable) as incorporated into our agreements with our service providers.
7. How long we keep it
| Category | Retention |
|---|---|
| Uploaded audio | Not retained — deleted after processing / on session cleanup or manual clear |
| Account information | For as long as your account is active, then deleted on request or within a reasonable period after account closure |
| Usage records | For as long as needed to operate plan limits and produce aggregate service metrics |
| Subscription records | As long as needed to provide access, plus the period required by tax and accounting law |
| Agreement and preference records | For as long as your account is active, plus a reasonable period afterwards, so we can evidence what you agreed to |
| Technical and log data | Short-term, per our providers' standard log retention |
| Support correspondence | For as long as needed to maintain a support history |
8. Security
We use industry-standard measures to protect personal information, including encryption in transit (TLS), authentication through a trusted identity provider rather than passwords we store ourselves, access controls, and managed, patched infrastructure.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect your information and will notify you and any required regulator of a breach affecting your personal information as required by law.
9. Your rights
9.1 Everyone
You can request access to the personal information we hold about you, correction of inaccurate information, or deletion of your account and associated data. Email support@soundsift.app.
Because we do not retain your audio, there is nothing for us to return or delete in that category — it is already gone.
9.2 If you are in the EEA, the UK, or Switzerland (GDPR / UK GDPR)
You have the right to: access your data; have it corrected; have it erased; restrict processing; object to processing based on legitimate interests; receive your data in a portable format; and withdraw consent where processing is based on consent.
Where we rely on consent — currently only for product update emails — you can withdraw it yourself at any time in your account settings, without contacting us. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
You also have the right to lodge a complaint with your local supervisory authority. We would appreciate the chance to address your concern first.
9.3 If you are in California (CCPA/CPRA)
You have the right to know what personal information we collect, use, and disclose; to request deletion; to request correction; and to not be discriminated against for exercising these rights.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding twelve months.
9.4 Other U.S. states
Residents of states with comprehensive privacy laws — including Texas, Colorado, Connecticut, Virginia, Utah, and others — have comparable rights to access, correct, delete, and obtain a copy of their personal information, and to appeal a denied request. Contact us at the address above to exercise them.
9.5 How we handle requests
We will verify your request using the email address associated with your account and respond within the timeframe required by applicable law (generally 30 to 45 days, extendable where permitted). There is no charge for a reasonable request.
10. Children
The Service is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact support@soundsift.app and we will delete it.
11. Cookies and similar technologies
We use only what is necessary to run the Service: a session cookie to keep you signed in, and security and load-balancing cookies set by our infrastructure providers. We do not use advertising cookies, and we do not run third-party advertising or cross-site tracking.
12. Changes to this policy
We may update this policy. When we do, we will revise the "Last updated" date. If a change materially affects how we handle your personal information — including any expansion of what we collect — we will provide notice by email or in the application before it takes effect.
13. Contact
Questions, requests, or complaints about privacy:
Rulirela LLC 2985 Grove Way Seguin, Texas 78155 United States support@soundsift.app