Effective Date: May 20, 2025

Last Updated: May 20, 2025

Nitrility Inc. ("Nitrility", "we", "us", or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Who We Are

Nitrility Inc. is a Delaware C-Corporation. We operate a platform that helps buyers discover and request licenses for music and other creative works. We take privacy seriously and limit the data we collect to what’s necessary to operate our services.

2. What Information We Collect

We collect minimal personal data, as outlined below:

Account Information

• Email address (used for login, notifications)

• Google login metadata (if signing in via Google)

• Hashed password (if signing in via email/password)
  
  

This data is stored securely via Supabase, our authentication and database provider.

Technical Data

Collected automatically to secure and operate the platform:

• IP address

• Browser type and device type

• Country-level location (derived from IP)

• Timestamps and user agent (for analytics and security logging)
  
  

This is processed via Framer (analytics), Supabase (logs), and Stripe (payments).

Payment Data

When purchasing licenses:

• Stripe collects your name, card number, billing address, IP address, and device/browser info.

• Nitrility does not store your payment details.

Email Communication

We use Resend to send transactional emails (e.g. license confirmations, password resets). This may include your:

• Email address

• Name (if provided)

• Message content
  
  

Emails may include optional tracking (e.g. open/click events) strictly for delivery performance, not advertising.

Content Previews

When streaming song previews:

• Your IP address and browser info may be shared with Spotify or Deezer CDNs to deliver media files.

• No personal information is shared beyond what is technically required to stream a preview.

AI Features

Some features (e.g. music recommendations) use OpenAI API. No personally identifiable user data is sent to OpenAI. Prompts are anonymized and processed server-side.

3. How We Use Your Information

We use your data only to:

• Authenticate and manage your account

• Deliver requested services (e.g., licensing)

• Communicate with you (transactional messages)

• Prevent fraud and protect our platform

• Understand how the platform is used (via anonymized analytics)

4. Third Parties We Share Data With

We share data only with essential service providers:

• Supabase – Authentication and database

• Stripe – Payment processing

• Framer – Privacy-first analytics

• Spotify / Deezer – Song previews

• OpenAI – AI content generation (server-side only)

• Resend – Transactional emails
  
  

Each of these providers complies with privacy laws like GDPR and operates under strict security standards. We do not sell your data or allow third-party advertising.

5. Cookies & Tracking

• Nitrility does not use advertising cookies or behavioral trackers.

• Framer Analytics is cookieless and anonymized.

• Stripe sets functional cookies for fraud prevention during checkout.

• No other cookies or local storage are used for marketing or tracking purposes.

6. Marketing & Email Preferences

• As of now, Nitrility does not send marketing emails.

• In the future, you may choose to opt-in to receive updates, features, or opportunities via email.

• You will be able to unsubscribe at any time via a link in the email.

7. Data Retention

We retain your personal data for as long as your account is active. If you delete your account or request deletion, we will erase your data from our systems (except where required by law, e.g., payment records).

8. Your Rights

Depending on your location, you may have the right to:

• Access the data we hold about you

• Correct inaccurate data

• Request deletion of your data

• Withdraw consent for marketing (once implemented)
  
  

To exercise any of these rights, email hello@nitrility.com. We may need to verify your identity before fulfilling your request.

9. Data Transfers

Some of our processors (e.g., Stripe, OpenAI, Supabase) may process your data outside your country. These providers comply with the GDPR and offer appropriate safeguards such as Standard Contractual Clauses or participation in the EU–U.S. Data Privacy Framework.

10. Children’s Privacy

We do not knowingly collect personal data from children under 13. If you believe your child has provided us with personal information, contact us immediately at hello@nitrility.com.

11. Changes to This Policy

We may update this policy from time to time. When we do, we’ll update the "Last Updated" date at the top of this page. Continued use of Nitrility after changes means you accept the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data:

hello@nitrility.com