Privacy Policy · Sonora

1. Introduction

Sonora.Chat is operated by Stream Servers Ltd (UK company 08595101). This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform as a visitor or as a registered artist.

We are committed to protecting your privacy and complying with applicable data protection laws, including the UK GDPR, EU GDPR, and other relevant regulations. By using Sonora.Chat, you agree to the practices described in this policy.

If you have any questions, contact us at: legal@sonora.chat

2. Information we collect

We collect different types of information depending on how you interact with our platform:

Category	Details
Artist Account Information	When you register as an artist, we collect: name, email address, artist name, unique artist ID, IP address at registration, and any profile information you provide.
Artist Content	MP3 files, metadata, album artwork, bios, and any other content you upload to your artist profile.
Usage Data	Search queries, listening patterns, interactions with search results, time spent on platform, and features used.
Technical Information	IP address, browser type and version, operating system, device identifiers, referring website, and access times.
Communication Data	If you contact us via email or support, we collect your name, contact details, and the contents of your messages.

No listener accounts: We do not require listeners to create accounts. However, we still collect anonymous usage data as described above.

3. Third-party services

Sonora.Chat integrates with several third-party services to provide its functionality. Each has its own privacy practices:

YouTube API Services: Our search results include content from YouTube. By using our search, you are also subject to Google's Privacy Policy. You can revoke YouTube API access at Google Account Permissions.
AI Services (DeepSeek API / OpenAI API): We use artificial intelligence to improve search relevance and recommendations. Search queries and metadata may be processed by these providers to train and improve algorithms. This does not transfer ownership of your music.
Donation Platforms (Ko-fi / Buy Me a Coffee): Artist pages may include links to external donation services. These platforms operate independently:
- Ko-fi Privacy Policy
- Buy Me a Coffee Privacy Policy
Sonora.Chat does not process payments and receives no commission from donations.
Platform Donations: We accept donations via our official Ko-fi page at https://ko-fi.com/sonorachat. Your donation data is subject to Ko-fi's privacy policy.

Artist disclosure: If fans donate to you via these external platforms, the respective service (Ko-fi, etc.) may share your email address or transaction information with you. As an artist, you are responsible for how you use that data in compliance with applicable privacy laws.

4. How we use your information

We use collected information for the following purposes:

To provide and maintain our service: Hosting artist content, delivering search results, and ensuring platform functionality.
To improve and personalize: Using AI to enhance search relevance and recommendations based on usage patterns.
To verify artists: Hybrid AI/manual verification process to prevent fraud and ensure rights ownership.
To communicate with artists: Sending account notifications, updates about platform changes, and responding to support requests.
To analyze usage: Understanding how visitors interact with our platform to improve features and user experience.
To comply with legal obligations: Responding to lawful requests from authorities or enforcing our Terms of Service.
To protect rights and safety: Investigating potential violations, fraud, or security issues.

5. Cookies and tracking technologies

We use cookies and similar technologies to operate and improve our platform:

Cookie Type	Purpose	Duration
Essential session cookies	Maintain artist login sessions, remember authentication status	Session / 30 days (if "Remember me" selected)
Functionality cookies	Remember theme preferences (light/dark mode), search settings	Up to 1 year
Analytics cookies	Collect anonymous usage statistics to improve our service	Up to 2 years

Cookie consent: For users in jurisdictions requiring consent (e.g., EU/UK), we request your permission before placing non-essential cookies. You can manage cookie preferences through your browser settings. Disabling cookies may affect platform functionality.

For more information about cookies, visit AllAboutCookies.org.

6. Data sharing and disclosure

We do not sell your personal information. We share data only in these limited circumstances:

Service providers: With trusted vendors who help us operate our platform (hosting providers, analytics services, AI providers). They process data only on our instructions.
Artists receiving fan information: If fans contact you via donation platforms, those platforms may share your information with you. You become an independent data controller for that data.
Legal compliance: When required by law, legal process, or government request (e.g., responding to court orders, law enforcement).
Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.
Protection of rights: To enforce our Terms, protect our rights, property, or safety, or prevent fraud or illegal activity.

International transfers: We use service providers (including AI services) located in various countries. Your data may be transferred outside the UK/EEA. When we make such transfers, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

7. Your privacy rights

Depending on your location, you may have the following rights regarding your personal data:

Right	Description
Right to access	Request a copy of the personal data we hold about you.
Right to rectification	Correct inaccurate or incomplete data.
Right to erasure (right to be forgotten)	Request deletion of your personal data, subject to legal exceptions.
Right to restriction	Limit how we process your data in certain circumstances.
Right to data portability	Receive your data in a structured, commonly used format.
Right to object	Object to processing based on legitimate interests or direct marketing.
Right to withdraw consent	Where processing is based on consent, withdraw at any time.

California residents (CCPA/CPRA): You have additional rights to know what personal information is collected, request deletion, and opt-out of sales (we do not sell data). We will not discriminate against you for exercising these rights.

Brazilian residents (LGPD): You have similar rights under Brazil's General Data Protection Law.

To exercise your rights, contact us at legal@sonora.chat. We will verify your identity before processing requests.

Right to complain: If you believe we have violated your privacy rights, you can lodge a complaint with your local data protection authority (e.g., UK ICO, Spanish AEPD).

8. Data retention

We retain your personal data only as long as necessary:

Artist account data: For as long as your account is active, plus a reasonable period afterward to comply with legal obligations or resolve disputes.
Usage data: Aggregated, anonymized analytics may be retained longer for service improvement.
Communication data: As needed to address your request and for record-keeping.

When data is no longer needed, we securely delete or anonymize it.

9. Data security

We implement appropriate technical and organizational measures to protect your data, including:

Encryption of data in transit (HTTPS)
Secure password storage (hashing)
Regular security assessments
Access controls limiting employee access
Secure server infrastructure

However, no method of transmission over the Internet is 100% secure. You share data at your own risk.

Breach notification: If we experience a data breach affecting your personal information, we will notify you and relevant authorities as required by law.

10. Children's privacy

Sonora.Chat is not directed at children under 13 (or under 16 in some jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at legal@sonora.chat and we will delete it.

Under the UK's Age Appropriate Design Code, if we become aware that children are accessing our service, we will implement additional protections [citation:3].

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify artists via email or platform notice. The "Effective" date at the top of this page indicates when the latest version was published. Your continued use after changes constitutes acceptance.

12. Contact us

For questions, concerns, or to exercise your privacy rights:

Stream Servers Ltd
7 Bell Yard, London, WC2A 2JR
United Kingdom

Email: legal@sonora.chat

Company registration: 08595101 (England & Wales)

Data Protection Officer: For GDPR purposes, you may contact our DPO at the same email address.

GDPR representative (if applicable)

For artists in the EU, you may also contact your local Data Protection Authority. Our lead supervisory authority is the UK Information Commissioner's Office (ICO).

13. Additional disclosures

YouTube API Services

Sonora.Chat uses YouTube API Services to display search results. By using our service, you agree to be bound by the YouTube Terms of Service. You can revoke access at Google Security Settings.

AI Training

We use aggregated, anonymized data to improve our AI models. If you are an artist and wish to opt out of having your content used for AI training (beyond what is necessary for search functionality), please contact us.

No "Sale" of Data

We do not sell personal information as defined under CCPA or similar laws. We do not share data for cross-context behavioral advertising.