Privacy Notice

1. Controller and contact

HIGH MUSIC is the service name. Before paid launch, this notice must identify the legal controller, Israeli business number, address and privacy email. For now, privacy questions and deletion requests can be raised through WhatsApp at 050-349-9662, but sensitive documents should not be sent in chat.

2. Information collected

A project brief can include name, artist name, song language, style, references, existing lyrics or recordings, deadline and free-text notes. Passwordless registration uses an email address and authentication records. Technical logs can include IP address, browser details, timestamps and security events.

HIGH MUSIC does not ask for card numbers on this site. A payment provider receives payment information on its own hosted page and returns only the status and transaction references needed for the order and accounting.

3. Why the information is used

Information is used to answer a request, prepare and perform a written scope, authenticate an account, prevent abuse, support delivery, maintain legally required business records and respond to privacy or legal requests. Marketing messages require a separate choice and are not bundled into account registration.

4. Service providers and external channels

Supabase provides passwordless authentication and related account infrastructure. Vercel hosts the site and may process request and security logs. WhatsApp is operated by Meta and processes messages under its own terms. The selected Israeli payment provider will process bit and card payments after merchant onboarding.

References linked from streaming or social platforms are handled by those platforms. HIGH MUSIC should review processor terms and international data locations before commercial launch.

5. Retention and security

Unaccepted inquiries should be removed when they are no longer needed. Account data is kept while the account is active and for a limited period needed for recovery, fraud prevention or legal claims. Order, invoice and transaction records are kept for the statutory periods that apply to the registered business.

Controls include HTTPS, passwordless authentication, restricted server credentials, provider-hosted payments and private delivery storage. No system can guarantee absolute security; suspected incidents are investigated and handled according to applicable obligations.

6. Access, correction and deletion

A person may ask what personal information HIGH MUSIC holds, request correction, request account deletion or object to non-essential marketing. Some records may need to be retained for accounting, dispute or legal reasons. A request should include enough information to identify the relevant account or brief, without sending unnecessary identity data in open chat.

7. Cookies and analytics

The current launch build does not install advertising trackers. Supabase may use browser storage needed to keep an authenticated session. If optional analytics or marketing tools are added, the notice and consent controls must be updated before those tools load.