Draft: this document is pending legal review and is not yet binding.
1. Who we are
Looperbox is an online platform for discovering, streaming, and downloading audio loops, samples, and packs from independent producers. This policy explains what personal data we collect and how we use it. Questions: legal@looperbox.com.
2. Data we collect
- Account data: email address, display name, password (stored hashed), and account type (listener or creator).
- Content you upload: if you are a creator, the audio, artwork, titles, and descriptions you publish, plus related metadata.
- Usage data: downloads, plays, and basic activity needed to operate the service.
- Analytics & technical data: aggregated, anonymous usage statistics via Vercel Analytics (which does not use cookies or track you across sites), plus standard server logs (IP address, browser type) kept for security and reliability.
3. How we use your data
To create and manage your account; to provide the service (host, stream, and deliver downloads); to keep the platform secure and prevent abuse; to understand aggregate usage and improve the product; and to contact you about your account or important service changes.
4. Legal bases (GDPR)
We process your data to perform our contract with you (providing the service), on the basis of our legitimate interests (security, improvement, anonymous analytics), and to comply with legal obligations. Where required, we rely on your consent, which you may withdraw at any time.
5. Sharing
We do not sell your personal data. We share it only with service providers who help us run the platform (currently Vercel, for hosting and analytics) and where required by law. If we introduce paid content in the future, a payment processor will handle transactions and we will update this policy accordingly.
6. Cookies
We use only essential cookies needed to keep you signed in and secure. Our analytics (Vercel Analytics) is cookieless and does not build advertising profiles.
7. Data retention
We keep your data for as long as your account is active. When you delete your account we remove your personal data within a reasonable period, except where we must retain limited information to comply with the law.
8. Your rights
Under the GDPR you may access, correct, delete, or export your data, and object to or restrict certain processing. Email legal@looperbox.com to exercise these rights. You also have the right to lodge a complaint with your local data protection authority (in France, the CNIL).
9. International transfers
Your data may be processed outside your country by our providers. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
10. Children
Looperbox is not intended for anyone under 16. We do not knowingly collect data from children.
11. Changes
We may update this policy; material changes will be announced on this page with a new “Last updated” date.