Privacy Notice

1. Who we are

Holistic Business Solutions Inc. ("we", "us", "our") operates SongFlow and is the data controller responsible for your personal data when you use the service.

2. Data we collect

• Account data: name, email address, authentication credentials.
• Profile & workspace data: songs, projects, videos, checklist items, budgets, and other content you create.
• Uploaded files: audio, cover art, video assets, and documents you upload to your storage.
• Support communications: messages you send us.
• Usage & technical data: device identifiers, browser type, IP address, log data, and product telemetry.

3. How we use your data & legal bases

• To create and operate your account and provide the service — performance of a contract.
• To process payments and manage your subscription — performance of a contract (via Paddle, our Merchant of Record).
• To secure the service and prevent fraud — legitimate interests.
• To improve the product and fix bugs — legitimate interests.
• To respond to support requests — performance of a contract / legitimate interests.
• To send service announcements and, with your consent where required, marketing — consent / legitimate interests.
• To comply with legal obligations — legal obligation.

4. Who we share data with

• Hosting and infrastructure subprocessors who store and serve the service on our behalf.
• Paddle, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance, and invoicing.
• Analytics and support tooling needed to operate the service.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

5. Data retention

We keep personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, tax, and accounting obligations. After that, data is deleted or anonymised.

6. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and regular reviews — to protect your data. No system is 100% secure; we work continuously to harden our defences.

7. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict processing of, port, or object to processing of your personal data, and to withdraw consent at any time. Contact us through in-app support to exercise these rights.

UK / EEA users (GDPR): you also have the right to lodge a complaint with your local supervisory authority. We will respond to verified requests within one month. If we transfer data outside the UK / EEA, we use appropriate safeguards (e.g. Standard Contractual Clauses or adequacy decisions).

8. Cookies

We use cookies and similar technologies that are strictly necessary to run the service (e.g. authentication). If we add analytics or marketing cookies in the future, we will surface a consent mechanism in line with applicable law.

9. Changes

We may update this Privacy Notice from time to time. Material changes will be communicated through the service or by email.

10. Contact

Questions about this Privacy Notice or your data? Contact Holistic Business Solutions Inc. through the support channel inside the app. See also our Terms and Refund Policy.