Privacy Policy

At All Together Now, we take your privacy seriously. This policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, and password when you create an account
• Profile Information: Optional profile photo (avatar) and display preferences
• Project Information: Project titles, descriptions, recipient names, lyrics, and any text content you add
• Audio Recordings: Voice recordings submitted by you, invited participants, or public contributors
• Payment Information: When you make a purchase, our payment processor (Stripe) collects billing information (we do not store full credit card numbers)
• Communications: Messages you send us through support channels, recipient replies, and participant messages
• Notification Preferences: Your choices about which notifications to receive

1.2 Information From Participants

When you invite participants to contribute to a project, we collect:

• Name and email address (as provided by the organizer or entered by the participant)
• Audio recordings they submit
• Optional avatar/profile photo
• Any optional messages or notes they include

Participants are informed that their recordings will be combined with others and shared with the project organizer.

1.3 Information From Public Contributors

For public messages, anyone can contribute their voice. We collect:

• Name and email address (required for public contributions)
• Audio recordings submitted
• IP address for security and abuse prevention

Public contributors are informed that their recordings may be included in publicly accessible messages.

1.4 Automatically Collected Information

When you use our Service, we automatically collect:

• Device Information: Browser type, operating system, device type
• Usage Information: Pages visited, features used, actions taken
• Log Data: IP address, access times, referring URLs
• Location: General geographic location based on IP address (country/region level only)

2. How We Use Your Information

We use the information we collect to:

2.1 Provide and Improve the Service

• Create and manage your account
• Process and deliver audio projects
• Send magic link invitations to participants
• Mix and process audio recordings
• Deliver final messages to recipients
• Provide customer support
• Improve and optimize the Service

2.2 Communications

• Send transactional emails (project updates, password resets, etc.)
• Send promotional communications (if you've opted in)
• Respond to your inquiries and support requests

2.3 Safety and Security

• Detect and prevent fraud, abuse, and security incidents
• Enforce our Terms of Service
• Comply with legal obligations

2.4 Analytics

• Understand how users interact with our Service
• Measure the effectiveness of features
• Make data-driven improvements

3. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

3.1 With Your Consent

We share information when you direct us to, such as when you invite participants to a project or share a completed message.

3.2 With Service Providers

We work with third-party service providers who help us operate our Service:

• Hosting: Cloud infrastructure and web hosting providers
• Email: Transactional email services for notifications and invitations
• Payments: Stripe for payment processing (subscription and one-time payments)
• Analytics: Usage analytics services
• Audio Processing: Server-side audio encoding, mixing, and processing

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

3.3 For Legal Reasons

We may share information if required by law, legal process, or government request, or if necessary to protect the rights, property, or safety of All Together Now, our users, or others.

3.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Data Storage and Security

4.1 Storage Location

Your data is stored on secure servers in the United States. Audio files are stored using encrypted cloud storage with industry-standard security measures.

4.2 Security Measures

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Regular security assessments
• Access controls and authentication
• Secure password hashing
• Regular backups

4.3 Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy. Specifically:

• Account Data: Retained until you delete your account
• Project Data: Audio recordings and project content retained until you delete the project or your account
• Public Messages: Public messages and associated recordings may be retained indefinitely for community access
• Payment Records: Transaction history retained as required for tax and legal compliance
• Log Data: Generally retained for 90 days
• Backup Data: May persist in backups for up to 30 days after deletion

After you delete your account, we delete or anonymize your information within 30 days, except as required for legal compliance or legitimate business purposes.

5. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

5.1 Access and Portability

You can access your account information at any time through your account settings. You can request a copy of your data in a portable format.

5.2 Correction

You can update your account information through your settings. Contact us if you need help correcting other information.

5.3 Deletion

You can delete individual projects or your entire account. Account deletion removes your personal information and all associated content.

5.4 Opt-Out

You can opt out of promotional communications by clicking the unsubscribe link in any promotional email or adjusting your notification settings.

5.5 Do Not Track

We do not currently respond to "Do Not Track" browser signals, as there is no consistent industry standard for this.

5.6 California Residents

Under the California Consumer Privacy Act (CCPA), California residents have additional rights including:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

5.7 European Residents

Under the General Data Protection Regulation (GDPR), EU/EEA residents have additional rights including:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

Our legal basis for processing personal data includes: contract performance (providing the Service), legitimate interests (improving our Service, security), legal compliance, and consent (where applicable).

6. Cookies and Tracking

6.1 What We Use

We use cookies and similar technologies for:

• Essential Cookies: Required for the Service to function (session management, authentication)
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how the Service is used

6.2 Managing Cookies

Most browsers allow you to control cookies through settings. Note that disabling essential cookies may prevent parts of the Service from working properly.

6.3 Third-Party Analytics

We may use analytics services like Google Analytics to understand usage patterns. These services may use their own cookies and collect information about your use of the Service. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

7. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

For users between 13 and 18 years old, we require parental or guardian consent before creating an account.

8. International Data Transfers

If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where our service providers are located.

For transfers from the EU/EEA, we rely on Standard Contractual Clauses approved by the European Commission to ensure adequate protection of your data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending an email notification for significant changes

We encourage you to review this policy periodically.

10. Contact Us

If you have questions about this Privacy Policy or your personal information, please contact us:

• Email: privacy@alltogethernow.app
• Support: Contact Form

For GDPR-related inquiries, you may also contact your local data protection authority.