Privacy Policy

Soundhiver is the entity that determines the purposes and means of processing personal data in connection with the Service (a "Data Fiduciary" under the DPDP Act). We operate from Greater Noida, Uttar Pradesh 201310, India. Registered office details will be published on this page upon incorporation.

Primary contacts:

• Support: support@soundhiver.com
• Grievance Officer / escalations: grievance-officer@soundhiver.com

This Policy applies to personal data we process about visitors, registered users, and others who interact with the Service. It does not apply to third-party websites or services linked from the Service.

For clarity in this Policy:

• Personal data means data about an individual who is identifiable by or in relation to such data
• Data Principal means the individual to whom the personal data relates (you)
• Processing means collection, storage, use, sharing, disclosure, or other handling of personal data

We process personal data for specified purposes, including to:

• Create and manage Accounts and authenticate users
• Provide core product features: Discover, Briefs and HiveMind matching, Sessions, Credits, and Craft
• Process payments, fees, refunds, and prevent fraud or chargeback abuse
• Send operational communications (security, billing, Session updates)
• Send product updates or promotional messages where permitted (you may unsubscribe from marketing)
• Secure the Service, debug issues, and monitor abuse
• Comply with law, respond to lawful requests, and enforce our Terms
• Improve matching quality, reliability, and user experience using aggregated or de-identified insights where feasible

We do not sell your personal data. We do not use your private Session audio or private messages to train public generative AI models for unrelated third parties. If we ever introduce optional AI features that process your content, we will describe that purpose and seek consent where required.

Under the DPDP Act, we process personal data for lawful purposes with your consent, or for certain legitimate uses recognised by law (for example employment-related processing where applicable, medical emergencies, or compliance with law or court orders), as those categories are defined in the Act and rules.

Where processing is based on consent, you may withdraw consent as easily as it was given, subject to consequences such as inability to provide parts of the Service that depend on that data. Withdrawal does not affect processing already completed lawfully.

For Account registration and core Service delivery, certain data is necessary. If you do not provide it, we may be unable to create an Account or provide requested features.

We may share personal data with:

• Service providers (Data Processors) who help us host, email, authenticate, analyse, secure, or process payments (including Razorpay), under contracts requiring appropriate safeguards
• Other users according to your choices (public profile fields, Craft listings, Brief details you publish, Credits you display, Session participants you collaborate with)
• Professional advisors (legal, accounting) under confidentiality
• Authorities when required by law, regulation, legal process, or to protect rights, safety, and security
• Successors in connection with a merger, acquisition, or asset transfer, subject to continued protection consistent with this Policy

We primarily design the Service for India. Some processors (for example cloud hosting, email, or auth providers) may store or process data on servers outside India. Where we transfer personal data outside India, we will do so in accordance with the DPDP Act and applicable government notifications or rules on permitted jurisdictions and safeguards.

By using the Service, you acknowledge that such transfers may occur as needed to operate the Service with our processors.

We retain personal data only for as long as needed for the purposes described in this Policy, including to provide the Service, resolve disputes, enforce agreements, maintain Credits and trust records, meet tax and accounting needs, and comply with law.

When retention is no longer necessary, we will delete or anonymise personal data, except where longer retention is required or permitted by law, or where residual copies remain in secure backups for a limited period before deletion cycles complete.

We implement reasonable security safeguards designed to protect personal data against unauthorised access, loss, misuse, or alteration. Measures may include encryption in transit, access controls, hashed passwords, monitoring, and vendor due diligence.

No method of transmission or storage is perfectly secure. You are responsible for keeping your credentials confidential and for using device-level protections.

If we become aware of a personal data breach that requires notification under applicable law, we will notify the Data Protection Board of India and affected Data Principals as required, and take reasonable mitigation steps.

Subject to the DPDP Act and applicable rules, you may have the right to:

• Access a summary of personal data we process about you and processing activities
• Correct inaccurate or incomplete personal data
• Erase personal data when it is no longer necessary for the stated purpose, or when consent is withdrawn (subject to legal exceptions)
• Withdraw consent where processing is consent-based
• Nominate another individual to exercise rights in the event of death or incapacity, where provided by law
• Grievance redressal as described in Section 15
• Approach the Data Protection Board of India if you are not satisfied with our response, as provided under the DPDP Act

To exercise rights, email support@soundhiver.com or grievance-officer@soundhiver.com. We may need to verify your identity before acting. We will respond within timelines required by applicable law.

The Service is intended for users aged 18 and above. We do not knowingly collect personal data from children as defined under applicable law for this Service. If you believe a child has provided personal data, contact us and we will take appropriate steps to delete it.

We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, secure sessions, measure performance, and understand usage. You can control cookies through browser settings. Disabling certain cookies may break login or core features.

Where we use analytics or marketing tags that require consent under applicable law, we will obtain consent as required.

The Service may link to third-party sites or apps (including payment, social, or music platforms). Their privacy practices are their own. Review their policies before sharing data with them.

We may update this Policy from time to time. We will post the updated Policy on the Service and revise the "Last Updated" date. Material changes may be communicated by email or in-product notice where appropriate. Continued use after the effective date constitutes acknowledgement of the updated Policy, except where consent is separately required.

Under applicable Indian law, including the DPDP Act and IT rules where they apply, you may contact our Grievance Officer for privacy or data concerns:

If unresolved, you may escalate to the Data Protection Board of India as provided under the DPDP Act.

Questions about this Policy: support@soundhiver.com · grievance-officer@soundhiver.com

Location: Greater Noida, Uttar Pradesh 201310, India.

Registered office details will be published here upon incorporation.

This Policy is a production draft for product and compliance readiness. It is not legal advice. Have a qualified Indian privacy counsel review it against your live data map, processors, and DPDP Rules before treating it as final for regulatory purposes.