Privacy Policy

Who this applies to

The Source is intended for people aged 13 and older. We do not knowingly collect information from anyone under 13. If you believe a child under 13 has contacted us, email source@songsbyr.com and we will delete it.

What we collect and why

We collect only what is needed to give you access to the Source:

• Email address — to send your secure login link and account communications (handled by Resend).
• Contribution & application details — information you provide when you enter or apply to the Source.
• Payment information — processed by Lemon Squeezy, our merchant of record. We do not see or store your full card details; Lemon Squeezy handles payment and tax under its own privacy policy.
• Basic analytics — if you consent, we use the Meta Pixel and TikTok Pixel to understand how people find the Source. No data is sold and no identity is shared.

We collect nothing beyond the above.

Our legal basis for using your information

For those in the European Economic Area (EEA) and United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR:

• Performance of a contract — to process your contribution and give you access to the Source, including sending your secure login link and account communications.
• Consent — for the Meta and TikTok analytics pixels, which load only after you agree. You can withdraw consent at any time (see below), and withdrawing it does not affect your access to the Source.
• Legitimate interests — to keep the Source secure, prevent abuse, and maintain our records, balanced against your rights.
• Legal obligation — where we must retain or disclose information to comply with the law.

Cookies and tracking

When you first arrive, we ask your consent before activating analytics tracking. If you decline, the Meta and TikTok pixels do not load. You can change your choice by clearing this site's data in your browser. Essential cookies required to keep you logged in are always used.

How long we keep your information

We retain your information while your account is active. You may ask us to delete your account and associated data at any time by emailing source@songsbyr.com.

Who we share it with

We do not sell your information. We share it only with the service providers that make the Source work — Resend (email), Lemon Squeezy (payments), Cloudflare R2 (media storage), and Meta/TikTok (analytics, only with your consent) — each acting under its own terms. We may disclose information if required by law.

Your rights

Depending on where you live (including under U.S. state laws such as California's CCPA), you may have the right to access, correct, or delete your information, and to opt out of certain processing.

If you are in the EEA or United Kingdom, the GDPR gives you the right to access your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. You also have the right to complain to your local data protection authority. To exercise any of these rights, email source@songsbyr.com and we will respond within 30 days.

International data transfers

We are based in the United States, and our service providers (including Supabase, Lemon Squeezy, Resend, and Cloudflare R2) may process your information in the United States and other countries. When information is transferred out of the EEA or United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect it.

Changes to this policy

We may update this policy as the Source evolves. The "last updated" date above reflects the current version.