Legal
Privacy Policy
Last updated: July 25, 2026
1. Who We Are
Volspire ("Volspire," "we," "us," or "our") is a music platform that connects artists, producers, and creative collaborators. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website at volspire.com and our mobile apps (together, the "Platform"). By creating an account or using the Platform, you agree to the practices described in this Privacy Policy. If you do not agree, do not use the Platform. For users located in the European Economic Area, the United Kingdom, or other jurisdictions with similar data protection laws, Volspire acts as the controller of the personal information described in this Privacy Policy.
2. Who Can Use Volspire
The Platform is not directed to children under 13, and we do not permit anyone under 13 to create an account. We do not knowingly collect personal information from children under 13. If we become aware that a user is under 13, we will terminate that account and delete the associated personal information promptly. If you believe a child under 13 has created an account, please contact us at privacy@volspire.com. If you are between 13 and 17 (or under the age of majority where you live), you may use Volspire only with the consent and involvement of a parent or legal guardian who has agreed to our Terms of Service on your behalf.
3. Information We Collect
3.1 Information You Provide Directly
When you create an account or use the Platform, you may provide: • Account credentials: email address and password (passwords are hashed and never stored in plaintext) • Profile information: username, biography, location, profile photo and banner image, account type (artist, producer, etc.), and genre tags • Content: audio files, video files, cover art, and any other material you upload to the Platform • Communications: messages sent to other users through the Platform (see Section 7 for how messages are handled if you delete your account) • Payment information: none. Volspire is currently free and does not process payments — we do not collect or store payment card numbers, bank account details, or billing information. If we introduce paid features in the future, we will update this policy before any payment data is collected.
3.2 Information Collected Automatically
When you use the Platform, we automatically collect a small number of event-level signals so artist dashboards, search ranking, and product improvements can work. Specifically, we record: • Listen analytics: when you play a track, we record the track played, your session ID, playback source, accumulated listening time, completion percentage, seek events (how often and where you skipped), and the specific segments of a track you listened to. We also log track_play, track_ended, audio_settings_changed (e.g., toggling visualizer / EQ), and playback_error events • Stream events: when you meet a minimum listening threshold on a track, a stream is counted and attributed to your session • Page views: when you navigate between pages, we log the page visited, the prior page, and a timestamp • Engagement events: liking or saving a track, following or unfollowing a user, posting a comment, sharing a link, performing a search, and toggling the visualizer. We log the event type, the related item ID, and your session ID • Approximate location: when your request reaches our servers, our hosting provider (Vercel) derives approximate geographic information from your IP address, such as country, region, city, and timezone. We attach this to the event so artists can see roughly where their listeners are. We never access your device's GPS — our apps do not request location permission — and we do not attach the IP address itself to event records (note that our hosting and database providers may retain IPs at the infrastructure layer for short periods as part of standard server access logs) • Device and environment: from your User-Agent and Accept-Language headers we derive a coarse device class (mobile / tablet / desktop), browser family (Chrome, Safari, Firefox, etc.), operating system family (iOS, Android, macOS, Windows, Linux), and your preferred language. We do not run advertising-grade fingerprinting libraries — only this lightweight parsing • Marketing attribution: if you arrive at the Platform via a link containing UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) or a referring URL, we capture those values once per session so we can understand where new users are coming from • Authentication cookies, tokens, and session identifiers (UUIDs) used to maintain your logged-in state • Push notification token: if you enable push notifications in the mobile app, we store the device push token, platform, and device model needed to deliver the alerts you opted into. You can turn notifications off at any time in the app's settings or your device settings We do not use third-party advertising trackers, cross-site behavioral ad networks, or browser-fingerprinting libraries. The analytics described above are collected and stored on our own infrastructure and are used solely to provide Platform features (play counts, artist analytics dashboards, search and discovery), to debug bugs and security issues, and to improve the service. We do not sell or share these signals with advertisers or data brokers.
3.3 Information from Third Parties
If you sign up or log in with a third-party identity provider — Sign in with Apple or Google — that provider shares basic account information with us: your email address (or Apple's private relay address if you choose to hide your email) and, where you consent, your name. We use this information solely to create and authenticate your account, and we never receive your password from these providers. We do not currently receive personal information about you from any other third parties, and no payment provider is integrated with the Platform.
4. How We Use Your Information
We use the information we collect to: • Create and maintain your account and profile • Enable core Platform features: uploading and streaming music, collaboration tools, workspace folders, and messaging • Provide artists with analytics about their content (plays, streams, listener behavior on their own tracks) • Deliver the push notifications you have enabled (new messages, activity on your content) — you can turn these off at any time • Detect and prevent fraud, abuse, and security incidents • Respond to your support requests and communications • Send transactional communications (account verification, password resets) — we do not send marketing emails without your explicit consent • Improve and develop the Platform based on aggregated, anonymized usage patterns • Comply with applicable legal obligations We do not sell your personal information. We do not use your personal information to serve third-party advertisements.
5. How We Share Your Information
We share your information only in the following circumstances: • Public profile information: your username, profile photo, bio, account type, and publicly posted content (tracks, packs) are visible to other users of the Platform by design • Service providers: we share data with Supabase (database, authentication, and file storage), Vercel (website hosting), and Apple (Push Notification service, to deliver notifications to the iOS app) solely to operate the Platform. These providers are contractually bound to protect your data and may not use it for their own marketing purposes • Legal compliance: we may disclose information if required by law, regulation, court order, or to protect the rights, property, or safety of Volspire, our users, or the public • Business transfers: if Volspire is acquired, merged, or its assets are transferred, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a materially different privacy policy • With your consent: for any sharing not described above, we will ask for your explicit consent first
6. Third-Party Services
Supabase
We use Supabase to store user data, authenticate accounts, and host uploaded files. Data is stored on Supabase's infrastructure. See Supabase's privacy policy at supabase.com/privacy.
Vercel
We host the volspire.com website on Vercel. When your requests reach our servers, Vercel processes your IP address to serve the site and to derive the coarse location data described in Section 3.2. See Vercel's privacy policy at vercel.com/legal/privacy-policy.
Sign in with Apple & Google Sign-In
If you choose social login, Apple or Google authenticates you and shares your email address (or a private relay address) and basic profile information with us, as described in Section 3.3. See apple.com/legal/privacy and policies.google.com/privacy. We do not currently use any payment processor — if paid features launch in the future, this policy will be updated first.
Apple Push Notification service
Push notifications to the iOS app are delivered through Apple's Push Notification service (APNs). Apple processes your device token and the content of each notification (for example, a new-message preview) in transit. Notifications are optional — you can decline or disable them at any time. See apple.com/legal/privacy.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Platform. Specifically: • Account and profile data: retained until you delete your account • Uploaded content: retained until you delete it • Listen analytics and stream events: retained in session-level form to power artist dashboards and platform statistics; after you delete your account these records are no longer linked to an identifiable profile • Push notification tokens: kept while you are signed in with notifications enabled; deactivated when you sign out and deleted when you delete your account When you delete your account, your personal account information is removed or anonymized: your login credentials (email address, password, and linked Apple/Google sign-in identities) are permanently deleted and your profile is erased. Certain content, such as messages or collaborative content, may remain where necessary to preserve functionality for other users. For example, messages may remain available to the other participants in a conversation after account deletion, because removing them could affect those users' collaboration history; they are attributed to an anonymized handle rather than to your profile. You may request removal of uploaded content by contacting us at privacy@volspire.com.
8. Your Rights and Choices
Depending on where you live, you may have the following rights regarding your personal information: • Access: request a copy of the personal information we hold about you • Correction: request that we correct inaccurate or incomplete information • Deletion: delete your account at any time from Settings → Account on the web — your personal account information is removed or anonymized as described in Section 7. You may also email privacy@volspire.com to request account deletion or removal of uploaded content • Portability: request your data in a portable format • Opt-out of sale: we do not sell your personal information, so there is nothing to opt out of If you reside in a U.S. state with a comprehensive consumer privacy law — including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and other states with similar laws as they take effect — you may have additional rights, which may include the right to know what personal information is collected, the right to correct or delete that information, the right to opt out of certain processing or sales, and the right to non-discrimination for exercising these rights. To exercise any of these rights, contact us at privacy@volspire.com. We will respond within 45 days. We may need to verify your identity before fulfilling a request.
9. Data Security
We take reasonable technical and organizational measures to protect your information, including: • Passwords are hashed using industry-standard algorithms — we cannot retrieve your plaintext password • Account deletion requires fresh re-authentication (your password, or re-verifying with your sign-in provider) to prevent unauthorized deletion via a hijacked session • All data in transit is encrypted via HTTPS/TLS • Access to production data is restricted to authorized personnel No method of transmission or storage is 100% secure. In the event of a data breach that is likely to affect your rights, we will notify you and any required regulators as required by applicable law.
10. Governing Law
This Privacy Policy is governed by the laws of the State of New York, without regard to its conflict of law provisions. Any dispute arising under this policy will be resolved in the state or federal courts located in New York County, New York, and you consent to the personal jurisdiction of those courts.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through the Platform. Your continued use of the Platform after changes become effective constitutes your acceptance of the revised policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: Volspire privacy@volspire.com We aim to respond to all privacy-related inquiries within 5 business days.
