Privacy Policy

Sequins ("we", "us", or "our") operates the sequins.music website and related services. This policy explains how we collect, use, and protect your personal information.

Information We Collect

Account Information

When you purchase software or create an account, we collect your email address and name. Passwords are securely hashed and never stored in plain text.

Payment Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers, CVVs, or other sensitive payment details on our servers. We receive only transaction confirmations and basic billing information necessary to fulfill your order.

License and Activation Data

When you activate software, we collect device fingerprint data (a hash of hardware identifiers, IP address, and user agent) to enforce license activation limits. This data helps prevent unauthorized distribution while allowing you to use your license across your devices.

App Feedback Data

If you submit feedback through our desktop applications, we may collect technical information including your operating system version, app version, and basic hardware specifications (CPU count, RAM) to help diagnose issues.

Shopping Cart

Your shopping cart contents are stored locally in your browser (localStorage) and are not transmitted to our servers until checkout.

How We Use Your Information

• To process and fulfill your orders
• To deliver license keys and software downloads
• To manage license activations and prevent abuse
• To send transactional emails (order confirmations, license delivery, refund notifications)
• To respond to support requests
• To improve our products and services

Third-Party Services

We use the following services to operate our business:

Stripe

Processes payments securely. Stripe receives your payment information directly and is PCI-DSS compliant. See Stripe's Privacy Policy.

Supabase

Hosts our database and authentication services. Your account data is stored securely with row-level security policies. See Supabase's Privacy Policy.

Resend

Delivers transactional emails. Your email address is shared with Resend to send order confirmations, license keys, and support communications. See Resend's Privacy Policy.

Meta (Facebook)

We use Meta Pixel and Conversion API to measure advertising effectiveness. This includes tracking page views, purchases, and other events. Your email address is hashed (SHA-256) before being shared. You can opt out of personalized advertising through your Facebook Ad Settings.

Bunny CDN

Delivers video content (product previews and thumbnails).

Upstash

Provides rate limiting to protect against abuse. Your IP address is temporarily processed to enforce request limits.

Sentry

Monitors application errors. Error reports may include your user ID (not email) and technical context to help diagnose issues.

Vercel

Hosts our website and collects anonymous performance metrics.

Cookies and Tracking

We use the following cookies:

• Authentication cookies — to keep you logged in
• _fbp, _fbc — Meta Pixel cookies for advertising measurement

We also use localStorage to store your shopping cart and certain checkout state information.

Data Retention

We retain your account and purchase data for as long as your account is active or as needed to provide services. License activation records are kept to enforce license terms. You may request deletion of your data at any time (see Your Rights below).

Data Security

We implement appropriate security measures including encrypted connections (HTTPS), secure password hashing, rate limiting, and row-level database security policies. License keys are cryptographically signed using RSA-2048.

International Data Transfers

Our services are hosted in the United States. If you are accessing from outside the US, your data will be transferred to and processed in the US. Our third-party providers maintain appropriate safeguards for international data transfers.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability (receive your data in a structured format)

To exercise these rights, contact us at support@sequins.music.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act. We do not sell your personal information. Our use of Meta tracking for advertising measurement may constitute "sharing" under CCPA. You can opt out by adjusting your browser's cookie settings or using the Meta opt-out linked above.

Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice on our website or sending an email.

Contact

Questions about this privacy policy? Contact us at support@sequins.music.