Privacy Policy

1. Who we are

CoverSpot ("we," "us," or "our") is operated by Columbia Cloudworks, located in the State of Illinois, United States. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our website and application (collectively, the "Service").

2. Information we collect

We may collect the following categories of information:

• Account and profile data. When you authenticate with Spotify, we may receive identifiers and profile information that Spotify shares with us under your authorization (for example, display name, email if permitted by Spotify, and Spotify user ID).
• Playlist and music data. To provide core features, we may process information about your playlists and tracks as exposed by Spotify's API when you use the Service, including track metadata needed to discover variants and perform actions you request.
• Usage and technical data. We may collect logs, device or browser type, approximate region derived from IP address, and similar diagnostics to operate, secure, and improve the Service.

3. How we use information

We use information to:

• Provide, maintain, and improve the Service;
• Authenticate you and connect to Spotify on your behalf;
• Perform actions you initiate (such as updating playlists when you choose to add or swap tracks);
• Monitor for abuse, fraud, and security incidents;
• Comply with legal obligations and enforce our terms.

4. Legal bases (where applicable)

If you are in the European Economic Area, the United Kingdom, or similar jurisdictions, we process personal data where necessary to perform our contract with you, based on our legitimate interests (such as security and product improvement, balanced against your rights), or where you have given consent, as applicable.

5. Third-party services

We rely on service providers to operate the Service. For example:

• Spotify for authentication and music data, subject to Spotify's privacy policy and your account settings with Spotify.
• Supabase (or similar infrastructure) for hosting, database, and authentication-related services as configured for the product.
• Other vendors we use for hosting, analytics, or support, as updated from time to time.

These providers process data on our instructions and under appropriate agreements, but their own policies also apply where they act as independent controllers.

6. Retention

We retain information only as long as needed to provide the Service, comply with law, resolve disputes, and enforce our agreements. Retention periods may depend on the type of data and how you use the Service. You may request deletion of your account data where applicable; some information may be retained as required by law or legitimate business needs.

7. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to or restrict certain processing. You may also withdraw consent where processing is consent-based. To exercise these rights, email us at nicholas.king+coverspot@columbiacloudworks.com. You may also have the right to lodge a complaint with a supervisory authority.

You can disconnect Spotify or revoke the app's access through your Spotify account settings; some features may no longer work after that.

8. Cookies and similar technologies

We may use cookies, local storage, and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings; blocking certain cookies may affect functionality.

9. Children's privacy

The Service is not directed to children under 13 (or the age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe we have collected such information, please email nicholas.king+coverspot@columbiacloudworks.com so we can delete it.

10. International transfers

We may process and store information in the United States and other countries where we or our providers operate. Those countries may have different data protection laws than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

11. Security

We implement technical and organizational measures designed to protect your information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the effective date. Material changes may be communicated through the Service or other reasonable means where appropriate.

13. Contact

For privacy-related questions, requests, and all other CoverSpot inquiries, email nicholas.king+coverspot@columbiacloudworks.com. For general information about Columbia Cloudworks, visit columbiacloudworks.com.