Privacy Policy

1. Who is responsible for your data

Heardso is a multi-tenant platform. Each Creator operates an independent site (for example, yoursite.heardso.com). For information you provide to a specific Creator’s site (such as subscribing to their content), that Creator is a controller of your personal data and their own practices also apply. Keypair provides the underlying platform and processes data on Creators’ behalf, and is the controller for platform-level accounts and Creator accounts.

2. Information we collect

We collect the following categories of information:

• Account information — email address, display name, and password (stored only as a salted hash; we never see your plaintext password).
• Profile information — viewer profiles you create, including optional kids/restricted profiles and a profile PIN (stored as a hash).
• Payment information — when you subscribe, your card and billing details are collected and processed directly by Stripe. We do not store your full card number. We retain limited records such as subscription status, plan, and the last four digits via Stripe.
• Content — for Creators: the videos, images, captions, titles, and metadata you upload. For Viewers: your watch history, watchlist, and viewing progress.
• Technical and usage data — device/browser information, pages viewed, and a hashed form of your IP address used for security and abuse-prevention (we store the hash, not the raw IP).
• Communications — push-notification subscriptions (if you opt in) and emails you send to us.

3. How we use your information

• To provide, operate, and maintain the Service and your account.
• To process subscriptions, payments, and payouts to Creators.
• To personalize your experience (watch progress, watchlist, recommendations).
• To send transactional email (account verification, password resets, receipts, important notices).
• To send push notifications you have opted into.
• To secure the Service, prevent fraud and abuse, and enforce our Terms.
• To comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

4. Service providers (subprocessors)

We share information with vendors who help us run the Service, only as needed to provide it:

• Stripe — payment processing and Creator payouts (Stripe Connect).
• Supabase — database, authentication, and storage.
• Cloudflare — video streaming (Cloudflare Stream), CDN, DNS, and email routing.
• Cloudinary — image and media storage and delivery.
• Vercel — application hosting.
• Render — the media upload service.
• Resend — transactional email delivery.

Each provider is bound by its own terms and processes data on our behalf. We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

5. Payments

Subscriptions are processed through Stripe. For Creator payouts we use Stripe Connect, which sends funds to the Creator’s connected Stripe account. Keypair does not hold Creator funds. Your use of payment features is also subject to Stripe’s privacy and end-user terms.

6. Cookies and similar technologies

We use strictly necessary cookies to keep you signed in and to operate the Service securely. We do not use advertising or cross-site tracking cookies.

7. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 to create platform accounts. Some Creator sites offer kids/restricted profiles; these are content-filtering features within an adult account holder’s subscription, managed by that account holder. Creators serving schools or minors are responsible for obtaining any required parental or institutional consent (including under COPPA and, where applicable, FERPA). If you believe a child has provided us personal information, contact us at support@heardso.com and we will delete it.

8. Your rights and choices

Depending on where you live (including under the GDPR and the CCPA/CPRA), you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Heardso provides self-service tools for the most common requests:

• Export your data — from your account page, download a JSON copy of your account, subscription, profiles, watch history, and watchlist.
• Delete your account — from your account page, permanently delete your account and associated personal data.

You can also unsubscribe from non-essential emails using the link in those emails, and disable push notifications in your browser. To make any other request, email support@heardso.com. We will not discriminate against you for exercising your rights.

9. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal data, except where we must retain certain records (for example, payment and tax records) to comply with legal obligations.

10. Security

We use technical and organizational safeguards including encryption in transit (HTTPS), row-level database access controls, hashed passwords and PINs, hashed IP storage, and server-side stripping of metadata from uploaded media. No method of transmission or storage is 100% secure, but we work to protect your information and continuously improve our safeguards.

11. International users

We operate from the United States and process data there. If you access the Service from outside the U.S., you understand your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your country.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new “Last updated” date, and for material changes we will provide additional notice where required.

13. Contact us

Keypair Software LLC, Plantation, Florida, USA. Questions about this policy or your data? Email support@heardso.com.