Privacy Policy

Overview

Velabsu ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our platform at velabsu.netlify.app and use our services.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our site. By accessing Velabsu, you acknowledge and agree to the practices described in this policy.

Information We Collect

Information You Provide Directly

• Account Information: When you sign up, we collect your name, email address, and optionally a phone number and profile picture.
• Uploaded Content: Songs, cover images, lyrics, and playlist names you upload to our platform.
• Communications: Messages you send us through our contact form or support channels.

Information Collected Automatically

• Usage Data: Pages visited, songs played, search queries, and features interacted with.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Local Storage: Autoplay preferences, listening history, and volume settings stored in your browser's localStorage (stays on your device).
• Cookies: Authentication tokens and session data necessary to keep you logged in.

Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your name, email address, and profile picture from Google in accordance with your Google account permissions.

How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Provide, operate, and improve our music streaming services
• Enable music upload, playlist creation, and social features
• Personalize your listening experience and music recommendations
• Send you service-related notifications (e.g., email verification, password resets)
• Respond to your questions and provide customer support
• Monitor and analyze usage patterns to improve our platform
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We never sell your personal data. We do not sell, trade, or rent your personal information to third parties for their marketing purposes.

Information Sharing

We may share your information only in these limited circumstances:

Service Providers

We use Supabase for database and authentication services, and Netlify for hosting. These providers access your data only to perform services on our behalf and are bound by confidentiality agreements.

Public Content

Songs and playlists you mark as "public" will be visible to other Velabsu users. Your username and profile picture associated with uploaded songs will also be visible.

Legal Requirements

We may disclose information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Data Security

We implement industry-standard security measures to protect your information:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
• Passwords are never stored in plain text — they are securely hashed using bcrypt.
• Authentication is handled by Supabase, which uses JWT tokens with expiration.
• File uploads are stored in access-controlled Supabase Storage buckets.
• Row-Level Security (RLS) policies ensure users can only access their own private data.

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your Rights & Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate personal information via your profile settings.
• Deletion: Request deletion of your account and associated data by contacting us at privacy@velabsu.app.
• Data Portability: Request an export of your data in a machine-readable format.
• Withdraw Consent: You may withdraw consent for optional data processing at any time.
• Opt-out of Communications: Unsubscribe from marketing emails via the link in any email we send.

Children's Privacy

Velabsu is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately at privacy@velabsu.app and we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email notification. We encourage you to review this policy periodically.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: