Privacy Policy

This Privacy Policy explains how Srur Strategic Solutions (H.S.) Ltd (company no. 514665926), with registered address Shoham 16, Tel Aviv, Israel 6935923 ("UPLABEL", "we"), collects and uses personal data when you use the Service or visit a smart link page created with UPLABEL.

1. Data we collect

• Account data: your email address and identifiers from sign-in providers (Google, magic link) when you register.
• Content you upload: audio files, artwork, track titles, artist names, DSP links, and text you enter into forms.
• Usage analytics: product events (e.g. which template you picked, which renders completed), device and browser information.
• Abuse-prevention identifiers: to enforce free-tier quotas we compute a salted hash of your IP address — we do not store your raw IP address for quota purposes. Approximate country/region may be derived from IP for analytics.
• Billing metadata: when you purchase, our Merchant of Record (Paddle) collects your payment details directly and shares only limited metadata back with us (order ID, plan, country, VAT status, last-4 / brand of card). We do not see or store your full card number.
• Smart link page visitors: when a fan visits or interacts with a link page you publish, we log view and click events, referrer, and any email address the fan submits — on behalf of the artist who owns the page. Some link pages may include advertising pixels.

2. How we use data, and legal bases

• Providing the Service and rendering your videos (performance of contract).
• Transactional emails such as sign-in links, render notifications, purchase receipts (performance of contract).
• Product analytics, security, abuse prevention, and quota enforcement (legitimate interests).
• Marketing emails from UPLABEL, only where you have opted in (consent).
• Complying with legal, tax, and accounting obligations and enforcing our Terms (legal obligation / legitimate interests).

3. Processors we rely on

We share personal data with the following service providers strictly to run the Service:

• Lovable Cloud / Supabase — application hosting, database, storage, and authentication.
• Creatomate — automated video rendering. Receives your uploaded audio (via a short-lived signed URL), template configuration, and render text. It does not receive your account credentials.
• Paddle.com Market Ltd. — Merchant of Record for all payments. Paddle handles checkout, card processing, tax collection, invoicing, and refunds. Card numbers are collected by Paddle directly; UPLABEL never sees them.
• Cloudflare — content delivery and DDoS protection.
• Google — optional Google Sign-In.

4. International transfers

Some of our processors are located outside your country of residence, including in the United States, the European Economic Area, and the United Kingdom. Where required, transfers rely on the European Commission's Standard Contractual Clauses (SCCs), the UK IDTA, or an equivalent lawful transfer mechanism.

5. Retention

• Account data is retained while your account is active.
• When you delete your account, we delete or anonymize your personal data within 30 days, except where longer retention is required by law (for example, tax records associated with Paddle transactions are retained for up to 7 years).
• Smart link analytics events are retained for up to 24 months.
• Salted IP hashes used for abuse-prevention quotas are retained up to 12 months.

6. Your rights (GDPR, UK GDPR, CCPA and similar)

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, to opt out of "sale" or "sharing" of personal data (we do not sell personal data), and to withdraw consent. You may also lodge a complaint with your local data-protection supervisory authority. To exercise any right, email privacy@uplabel.io or use our contact form.

7. Cookies and similar technologies

• Essential: sign-in session and security. These are always active.
• Analytics: to understand product usage. Where required by law we ask for consent first.
• Advertising pixels on public smart link pages: some artist pages include third-party marketing pixels; we request consent where required.

8. Children

The Service is not directed to children under 16 and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact privacy@uplabel.io and we will delete it.

9. Contact

Srur Strategic Solutions (H.S.) Ltd, Company No. 514665926, Shoham 16, Tel Aviv, Israel 6935923. privacy@uplabel.io.