This Privacy Policy ("Policy") describes how 1YFE Inc. ("Company", "we", "us", "our"), owner and operator of the Superfans platform ("Service"), collects, uses, discloses, and protects your personal information.

1YFE Inc. is a Delaware corporation headquartered in the United States. For corporate information, visit 1yfe.com.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, full name, username, password (hashed), profile photo
• Payment Information: Processed by Stripe, Inc. (PCI DSS compliant). We do not store full credit card numbers.
• User Content: Music files, videos, posts, comments, messages, and metadata you upload or create
• Profile Data: Bio, location, social media links, artist/producer information, genre preferences
• Communication Data: Support tickets, emails, and chat messages with our team

1.2 Automatically Collected Information

• Usage Data: Page views, clicks, time spent, features used, search queries
• Device Information: IP address, browser type, operating system, device identifiers, mobile network information
• Location Data: Approximate geographic location derived from IP address (unless precise location is authorized)
• Cookies and Tracking: See our Cookie Policy for details

1.3 Information from Third Parties

When you connect third-party accounts (Spotify, TikTok, social media), we receive profile information, listening history, and content as authorized by you through OAuth flows.

2. How We Use Your Information

1YFE Inc. processes your personal data for the following lawful purposes:

• Service Provision: To operate, maintain, and provide the features and functionality of the Service
• Payment Processing: To process transactions, manage subscriptions, and distribute royalties
• Personalization: To personalize your experience, recommend content, and improve algorithms
• Communication: To send transactional emails, service updates, marketing communications (opt-out available), and customer support responses
• Analytics: To analyze platform usage, identify trends, and measure marketing effectiveness
• Security and Fraud Prevention: To detect, prevent, and address technical issues, fraud, and unauthorized access
• Legal Compliance: To comply with legal obligations, enforce our Terms, and protect the rights and safety of 1YFE Inc. and others
• Product Development: To develop new features, test functionality, and improve the Service

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and UK, we process your data based on:

• Contractual Necessity: Performance of our agreement with you (Terms of Service)
• Legitimate Interests: Fraud prevention, security, analytics, and service improvement
• Consent: Marketing communications and optional features (withdrawable at any time)
• Legal Obligation: Compliance with applicable laws and regulations

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Data

1YFE Inc. does not sell, rent, or trade your personal information to third parties for monetary consideration.

4.2 Service Providers

We share data with trusted third-party service providers who assist in operating the Service:

• Stripe: Payment processing and subscription management
• Google Cloud / AWS: Cloud hosting and infrastructure
• OpenAI: AI-powered features (stem separation, vocal generation, content moderation)
• SendGrid / Mailgun: Transactional email delivery
• TikTok, Facebook, Google: Analytics and advertising (subject to your cookie preferences)

All service providers are contractually required to protect your data and use it only for specified purposes.

4.3 Legal Requirements

We may disclose your information if required by law, court order, subpoena, or to protect the rights, property, or safety of 1YFE Inc., our users, or the public.

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. You will be notified via email of any such change in ownership.

5. Data Security

1YFE Inc. implements industry-standard security measures to protect your personal information:

• TLS/SSL encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Regular security audits and penetration testing
• Multi-factor authentication for administrative access
• SOC 2 Type II compliance (in progress)
• GDPR and CCPA compliant data handling procedures

No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Portability

You have the right to access, review, and export your personal data. Use the "Download My Data" feature in account settings or contact superfansmusic@gmail.com.

6.2 Correction and Deletion

You may update your profile information at any time through account settings. You may request deletion of your account and associated data, subject to legal retention requirements.

6.3 Marketing Opt-Out

You may unsubscribe from marketing emails by clicking "Unsubscribe" in any promotional email or by adjusting preferences in account settings, or by emailing superfansmusic@gmail.com.

6.4 Cookie Management

Manage cookie preferences through our cookie consent banner or browser settings. See our Cookie Policy.

6.5 California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information held by businesses
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights

To exercise your CCPA rights, email superfansmusic@gmail.com with subject line "CCPA Request".

6.6 European Privacy Rights (GDPR)

If you are located in the EEA or UK, you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with your local data protection authority

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: Data retained while your account is active
• Deleted Accounts: Most data deleted within 90 days; some data retained for legal compliance (e.g., financial records for 7 years)
• Backup Systems: Data may persist in backup systems for up to 90 days after deletion
• Public Content: Content shared publicly may be cached or archived by third parties beyond our control

8. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where 1YFE Inc. or its service providers operate. These countries may have data protection laws different from your country of residence.

For EEA/UK users: We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection for international transfers.

9. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected data from a child under 13, we will delete it immediately.

If you are a parent or guardian and believe your child has provided us with personal information, contact superfansmusic@gmail.com.

10. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to enhance your experience and collect usage data.

Types of Cookies:

• Essential: Required for authentication and core functionality
• Analytics: Google Analytics, TikTok Pixel, Facebook Pixel (opt-out available)
• Marketing: Retargeting and ad personalization (opt-out available)
• Functional: User preferences and settings

For detailed information, see our Cookie Policy.

11. Third-Party Services and Links

The Service integrates with and links to third-party platforms, including:

• Spotify, Apple Music, TikTok, YouTube (streaming distribution)
• Stripe (payment processing)
• OpenAI, Replicate (AI services)
• Google Maps, Google Cloud (infrastructure and mapping)
• Social media platforms (Facebook, Instagram, Twitter, LinkedIn)

These third parties have their own privacy policies. 1YFE Inc. is not responsible for their privacy practices or content.

12. Data Security Measures

1YFE Inc. employs robust technical and organizational measures to protect your data:

• End-to-end encryption for sensitive communications
• Regular security vulnerability assessments
• Intrusion detection and prevention systems
• Strict access controls and employee training
• Incident response plan with 24-hour breach notification commitment
• Compliance with SOC 2, GDPR, and CCPA standards

13. Your Control Over Your Information

You can manage your information through the Service:

• Profile Settings: Update name, email, bio, profile photo
• Privacy Controls: Manage content visibility (public, followers-only, private)
• Notification Preferences: Choose which emails and push notifications you receive
• Connected Accounts: Disconnect third-party integrations at any time
• Data Export: Download all your data in machine-readable format (JSON)
• Account Deletion: Permanently delete your account and all associated data

14. Marketing Communications

With your consent, we may send promotional emails about new features, offers, and platform updates. You can opt out at any time by:

• Clicking "Unsubscribe" in any marketing email
• Adjusting email preferences in account settings
• Emailing superfansmusic@gmail.com

Note: You cannot opt out of transactional or service-related emails (e.g., payment confirmations, security alerts).

15. Changes to This Privacy Policy

1YFE Inc. may update this Policy from time to time. We will notify you of material changes via:

• Email to your registered address
• Prominent notice on the Service
• In-app notification

Your continued use of the Service after changes become effective constitutes acceptance of the updated Policy.

16. Do Not Track (DNT) Signals

Some browsers include a "Do Not Track" (DNT) feature. The Service does not currently respond to DNT signals due to lack of industry consensus. We honor opt-out choices made through our cookie consent banner and privacy settings.

17. Contact Information and Data Protection Officer

18. California Shine the Light Law

California Civil Code Section 1798.83 permits California residents to request information regarding disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.