Privacy Policy

Last Updated: October 4, 2026

1. Data We Collect

a) User-Provided Data:

  • Current mood
  • Mood context
  • Target vibe
  • Music preferences/genres
  • Current activity
  • Journal prompt responses

b) SoundCloud Track Metadata (via API):

Display Purposes:

  • Title, artist, artwork URL, duration

Functional:

  • Track ID, permalink URL
  • Streamability status

Attribution:

  • Uploader's public profile (username, avatar, name)

We Never Store: Audio files, stream URLs, or downloadable content.

c) Website Analytics:

  • Pages visited, the site that referred you, and campaign tags in the link you followed (such as utm_source)
  • Browser and device type

We count visits with PostHog in cookieless mode. It does not place cookies or any other identifier in your browser. Instead, PostHog's servers combine your IP address and browser type with a random value that is deleted daily to produce a one-way, anonymous hash. Your IP address is not kept with the visit, and the hash cannot be used to recognise you from one day to the next.

We also use Google Analytics, which sets cookies to measure how the site is used.

2. How We Use Data

  • Generate spaces via Claude AI based on your inputs
  • Use your feedback to improve the AI prompt generation for better recommendations
  • Fetch tracks from SoundCloud's API using AI-generated search queries
  • Display playlists with proper creator attribution

3. Data Sharing

We only share data with:

  • SoundCloud's API: To search/stream tracks (their terms)
  • Anthropic (Claude AI): Processes user inputs
  • Vercel Analytics: Anonymous usage statistics
  • PostHog: Cookieless, anonymous visit and campaign statistics
  • Google Analytics: Usage statistics (uses cookies)

4. Data Retention

  • Track metadata auto-deletes after 24 hours (session cache)
  • Account data persists until user deletion request

5. Security Measures

  • Encryption: HTTPS for all data transfers
  • API Security: SoundCloud client credentials are server-side only
  • Database Protection: Regular audits + access controls

6. International Data Transfers

  • SoundCloud data may be processed globally (we use GDPR-compliant safeguards)

7. Children's Policy

Not for users under 18. We do not knowingly collect their data.

8. Policy Updates

  • Registered users notified via email
  • All users see in-app alerts for material changes

9. Your Rights

  • GDPR/CCPA: Request access, correction, or deletion of your data

10. Contact Us

For data requests or questions:

hello@zillinity.app