Legal

Privacy Policy

Last updated: June 11, 2026

PLATHAUS LLC ("we", "us", "our") operates the PLAT.haus mobile application and website ("App"). This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Account Information: Name, display name, email address, phone number, city/area, social media handles (Instagram, Twitter, TikTok, Spotify, Discord), role, birthday, and genre preferences.

Booking Data: Service type, dates, times, studios, payment amounts, and booking status.

Files: Audio files you upload for mix and mastering services. These are stored securely in Supabase Storage and deleted 90 days after delivery. Total active per-user storage is capped at 15 GB.

Usage Data: App interactions, device type, push notification tokens, and approximate timezone.

Payment Data: Processed by PayPal. We do not store credit card or bank account numbers. If you save a payment method, PayPal stores a tokenized reference ("Vault" ID) which we associate with your account to enable future charges (e.g. consultation extensions) that you actively confirm in-app.

License & Contract Data: When you purchase a beat license, a PDF contract is generated and emailed to you. We retain a copy of the contract and license metadata indefinitely as proof of license for IP enforcement and tax purposes.

2. How We Use Your Information

• Process bookings and payments
• Deliver mix and mastering services
• Send booking confirmations, reminders, and updates
• Manage your rewards points and referrals
• Improve the App and our services
• Communicate about promotions (with your consent)

3. Information Sharing

We do not sell your personal information. We share data only with the following processors, each acting solely to deliver their service to us:

• PayPal (Inc.) — payment processing & Vault token storage
• Supabase (Inc.) — database, authentication, and file hosting
• Google LLC — Google Calendar availability + Google Meet links for consultations
• Expo (Inc.) — push notification delivery to iOS / Android
• Resend (Inc.) — transactional email delivery

Optional, user-initiated exports: If you choose to connect a Dropbox or Google Drive account, we transfer only the specific files you export (e.g. a beat you purchased or a delivered mix) to that account at your direction. We access these services solely to upload the file you selected — we do not read, list, or modify any other content in your Dropbox or Drive. You can disconnect at any time in Profile → Cloud Storage, which revokes our access. Once a file is in your Dropbox or Drive, it is governed by that provider's privacy policy:

• Dropbox (Inc.) — file export to your connected Dropbox (optional)
• Google LLC (Drive) — file export to your connected Google Drive (optional)

We do not share data with advertising networks. We do not run third-party analytics tracking pixels on the App.

4. Google User Data

If you sign in with Google, we receive your name, email address, and profile picture from Google in order to create and authenticate your account. If you connect Google Drive, we request the drive.file scope, which limits our access to only the files you create or open with the App — we cannot see the rest of your Drive. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), row-level security on all database tables, signed URLs for file access, and secure authentication via Supabase Auth.

6. Data Retention

• Account data: Retained while your account is active. On deletion, profile and messages are removed; financial records and license agreements are retained in a restricted-access archive for up to 7 years for tax and IP enforcement purposes.
• Booking records: Retained indefinitely for business and tax records.
• Audio files (mix uploads & deliveries): Deleted 90 days after delivery.
• Beat license PDFs: Retained indefinitely as proof of license.
• Push tokens: Deleted when you sign out, uninstall the App, or opt out.
• Vault payment tokens: Removed from PayPal at your request via Profile → Payment Methods, or automatically removed if you delete your account.

7. Your Rights

You may:

• Access and update your profile information at any time
• Request deletion of your account and associated data
• Opt out of promotional communications
• Request a copy of your data

To exercise these rights, contact us at support@plat.haus.

8. Push and Email Communications

We send transactional communications via push and email for booking confirmations, session reminders, mix delivery updates, beat license receipts, and messages from PLAT. Marketing communications are opt-in and managed in Profile → Notifications.

9. Children's Privacy

The App is not intended for users under 16. We do not knowingly collect information from anyone under 16. If you believe a minor has provided personal information to us, contact support@plat.haus and we will remove the data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or by email.

11. Contact

PLATHAUS LLC
Austin, TX
support@plat.haus