Privacy Policy

Information You Provide

• • Email address (when you sign up)
• • Phone number (if you choose SMS authentication)
• • Profile information (name, artist name, bio)
• • Music files and associated metadata you upload
• • Payment information for subscriptions

Information Collected Automatically

• • Device information (browser type, operating system)
• • IP address and approximate location
• • Usage data (features used, pages visited)
• • Blockchain wallet addresses associated with your account

Blockchain Data

When you mint content or perform transactions, certain information is recorded on the Base blockchain (Ethereum L2). This includes wallet addresses and transaction data. Blockchain data is public and immutable by design.

What We Access

We request read-only access. We read folder and file metadata only so you can browse and choose what to import, and we download only the specific files you select. We do not modify or delete anything in your connected account, and we do not access files you don't choose to import. If you turn on Ongoing Sync for a folder (see below), we may re-access that folder on a recurring schedule to import new files — including while you are not actively using SoundMint — using a stored authorization token. This recurring access stays read-only and is limited to the folder you chose.

Ongoing Sync (Optional)

Ongoing Sync is off by default. It only runs if you explicitly turn it on for a specific connection and folder from Settings → Integrations. When enabled, SoundMint stores a long-lived authorization token (a "refresh token") so it can re-access the chosen folder on a recurring schedule (roughly once a day) and import any new files it finds, even while you are away. Sync is additive only: it copies new files into your workspace and never deletes, modifies, or moves anything in your connected account, and it never removes files you have already imported. You can turn Ongoing Sync off at any time to stop the recurring access while keeping the connection, or disconnect the account entirely to also revoke our access at the provider (see Disconnecting & Revocation).

How We Use It

Files you select are transferred directly from the provider into your private SoundMint storage to recreate them in your workspace. We use this data solely to provide the import you requested. We do not use it for advertising, and we do not use it to train AI models.

Storage & Security

Imported files are stored like your other uploads — encrypted in transit and at rest in private storage. The tokens that authorize the connection are encrypted at rest and are never exposed to your browser or shared. We retain the authorization token — including the long-lived refresh token used for Ongoing Sync — for the life of the connection, so the connection (and any sync you enabled) keeps working. When you disconnect, we delete the stored token.

Disconnecting & Revocation

You can turn off Ongoing Sync at any time to stop recurring access while keeping the connection, or disconnect a cloud account entirely from Settings → Integrations. Disconnecting both deletes the stored authorization token from our systems and revokes SoundMint's access at the provider, so no further access — including background sync — can occur. Files you already imported or synced remain in your workspace; disconnecting removes only the authorization, not your imported content. You can also revoke SoundMint's access directly from your Google Account or Dropbox account settings.

Disconnecting removes only the stored authorization — files you have already imported remain in your workspace until you delete them.

Google API Limited Use

SoundMint's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.