This Privacy Policy explains how The American Spreadsheet Co. (“we,” “us,” or “our”) collects, uses, and shares information when you use SNDBNK at sndbnk.com, related subdomains, and custom domains that point to the service (together, the “Service”). By using the Service, you agree to this Policy.
1. Who we are
SNDBNK is an audio hosting and listening platform operated by The American Spreadsheet Co. Questions about this Policy: privacy@sndbnk.com. Legal notices: legal@sndbnk.com.
2. Information we collect
We collect information in three ways: you provide it, we collect it automatically, and we receive it from service providers.
- Account data. Name, username, email address, and password (stored as a secure hash). You may also add a profile bio, location, avatar, and labeled external links.
- Content you upload. Audio files, cover art, and metadata you enter or that we read from your files (for example title, artist, album, genre, year, BPM, ISRC, and embedded tags). Comments, likes, follows, and reposts are also stored.
- Storage settings. If you connect bring-your-own storage (SFTP/SSH), we store connection details and encrypt private keys and passphrases at rest before saving them.
- Billing data. If you subscribe to a paid plan, we collect the plan and subscription status needed to provide billing. Payment card details are processed by Stripe; we do not store full card numbers on our servers.
- Technical and session data. When you sign in, we create a session that may include IP address and user agent. Our servers and reverse proxy also process standard request logs (for example IP, timestamps, and requested paths) for security and reliability.
- Preferences on your device. Theme, accent color, player queue, and similar UI preferences may be stored in your browser’s local storage. These are not used for advertising.
3. How we use information
We use information to:
- Provide, maintain, and improve the Service (accounts, profiles, playback, uploads, search surfaces);
- Process subscriptions, invoices, and plan changes;
- Send transactional email (welcome, email verification, password reset, billing notices);
- Enforce our Terms, prevent abuse, and protect the Service and users;
- Comply with law and respond to lawful requests; and
- Communicate about the Service when you contact us.
We do not sell your personal information, and we do not use it for third-party advertising.
4. How we share information
We share information only as needed to run the Service:
- Public by design. Public profiles, published tracks, covers, waveforms, comments, and similar public activity are visible to anyone who can reach that page or media URL. Unpublished library items stay private to your account.
- Stripe. Payment processing, customer records, subscriptions, invoices, and the customer portal. See Stripe’s privacy materials for how they handle payment data.
- Email delivery (AWS SES). Transactional messages are sent through our mail provider using your email address and message content.
- Hosting infrastructure. The Service runs on cloud hosting (currently AWS Lightsail). Database records and default media storage live on that infrastructure.
- Your own storage (optional). If you enable bring-your-own storage, audio and cover files for those tracks are stored on the server you configure. We access that server only to provide the features you request.
- Legal and safety. We may disclose information if required by law, or if we believe disclosure is necessary to protect rights, safety, or the integrity of the Service.
- Business transfers. If we are involved in a merger, acquisition, or asset sale, information may transfer as part of that transaction, subject to this Policy or a successor policy.
5. Cookies and similar technologies
We use essential cookies for authentication and short-lived notices (for example a one-shot
message after sign-in). In production, the session cookie may be scoped across *.sndbnk.com so you stay signed in on creator subdomains. We do not use third-party advertising
cookies or analytics trackers on the Service today. You can control cookies in your browser; blocking
essential cookies will prevent sign-in.
6. Retention
We keep account, profile, content, and billing records for as long as your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal obligations. Session and verification tokens expire. Server logs are retained for a limited operational period. If you ask us to delete your account, we will delete or de-identify personal data we control, except where we must retain it (for example billing records, abuse prevention, or legal holds). Files on bring-your-own storage remain under your control on your server.
7. Your choices and rights
Depending on where you live, you may have rights to:
- Access, correct, or update account and profile information in Settings;
- Delete individual tracks from your library;
- Cancel or manage a paid subscription through the Stripe customer portal in Settings;
- Request deletion of your account and associated personal data by emailing privacy@sndbnk.com; and
- Opt out of non-essential communications (transactional mail required to run the account will continue).
Residents of the EEA, UK, Switzerland, California, and other jurisdictions may have additional rights (access, deletion, portability, restriction, objection, or appeal). To exercise them, email privacy@sndbnk.com. We will not discriminate against you for exercising privacy rights. If we decline a request where allowed, you may appeal by replying to our decision.
8. Children
The Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@sndbnk.com and we will take appropriate steps.
9. Security
We use industry-standard measures appropriate to our size and the nature of the data, including HTTPS, hashed passwords, encrypted storage secrets for BYOS credentials, and access controls on production systems. No method of transmission or storage is perfectly secure. Please use a strong unique password and protect your account.
10. International users
We operate primarily from the United States. If you access the Service from another country, you understand that your information may be processed in the United States and other locations where we or our providers operate, which may have different data-protection rules than your home country.
11. Changes
We may update this Policy from time to time. We will post the revised version on this page and update the effective date. Material changes may also be announced by email or an in-product notice when appropriate. Continued use after the effective date means you accept the updated Policy.
12. Contact
Privacy questions and requests: privacy@sndbnk.com
Legal notices: legal@sndbnk.com
Copyright / DMCA: copyright@sndbnk.com
Operator: The American Spreadsheet Co. · Service: SNDBNK · sndbnk.com