Privacy Policy

Table of Contents

1. Introduction
2. Information We Collect
3. How We Use Your Information
4. How We Share Your Information
5. Third-Party Services
6. Data Storage and Security
7. Data Retention
8. Your Privacy Rights
9. International Data Transfers
10. Children’s Privacy
11. Cookies and Tracking Technologies
12. Do Not Track and Global Privacy Control
13. Changes to This Privacy Policy
14. Contact Us

1. INTRODUCTION

Capital Trading Group LLC DBA SoundToggle (“we,” “us,” “our,” or “SoundToggle”) operates the SoundToggle web application and related services (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using SoundToggle, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

This Privacy Policy should be read in conjunction with our Terms of Service.

Change of ownership. Ownership of SoundToggle has transferred from Cloverleaf Audio LLC to Capital Trading Group LLC. Capital Trading Group LLC is now the controller of personal information processed through the Service and has assumed responsibility for information previously collected under this policy. The categories of information we collect and the purposes for which we use it are unchanged by the transfer.

Two audiences. This policy covers both (a) users — people with a SoundToggle account — and (b) listeners and visitors — people who encounter a SoundToggle player or portfolio page, including on third-party websites where a user has embedded a player. Sections 2.4 and 4.6 describe what we collect about listeners and visitors specifically.

2. INFORMATION WE COLLECT

We collect several types of information from and about users of our Service:

2.1 Information You Provide to Us

Account Information: When you create an account, we collect:

• Name
• Email address
• Password (encrypted)
• Any other information you choose to provide in your profile

Payment Information: When you make a purchase, our payment processor (Stripe) collects:

• Credit card or payment card information
• Billing address
• Payment transaction history

Note: We do not directly store your complete payment card information. This is handled securely by Stripe.

User Content: We collect and store:

• Audio files you upload to the Service
• Video files you upload to the Service
• Photo/image files you upload to the Service
• Processed media files
• Any metadata associated with your files

Communications: If you contact us directly, we may collect:

• Your name
• Email address
• The contents of your message or inquiry
• Any other information you choose to provide

2.2 Information We Collect Automatically

When you access or use our Service, we automatically collect:

Usage Information:

• Pages or features you access
• Time and date of your visits
• Time spent on pages
• Links you click
• Actions you take within the Service

Device Information:

• IP address
• Browser type and version
• Operating system
• Device type
• Unique device identifiers

Log Data: Our servers automatically record information including:

• Request type
• Access times
• Pages viewed
• Your interaction with the Service
• Error logs and debugging information

Referral and Campaign Information: When you first arrive on our websites, we record how you got there:

• The referring website, if any
• Campaign tags in the link you followed (for example utm_source, utm_medium, utm_campaign) and advertising click identifiers
• The first page you landed on, and the date and time
• A referral code, if you followed another user’s referral link — this is how we know who invited you, so we can credit them and apply your referral discount

We keep only your first visit’s details, in a cookie that expires after 90 days. If you go on to create an account, that information is saved to your account record so we can understand which channels bring people to SoundToggle. We use it for our own marketing measurement; we do not sell it and do not use it to build advertising profiles.

Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. See Section 11 for more details.

2.3 Information from Third Parties

We may receive information about you from third-party services you use to access our Service, such as:

• Authentication services (if you log in through a third-party service)
• Payment processors
• Analytics providers

2.4 Information We Collect About Listeners and Visitors

When someone plays a SoundToggle player — on our websites, on a user’s portfolio page, or embedded on a third-party website — we collect information about that interaction, including:

• Play counts, toggle/version-switch counts, listen duration, and completion
• Approximate geographic location derived from IP address (typically country, region, and city)
• Device type, browser, and operating system
• Referring page or website where the player appeared
• A session identifier used to distinguish one listening session from another

We use this information to provide analytics to the user who owns the player, to measure and improve the Service, and to detect abuse. Because it can include a session identifier and city-level location, we treat it as personal information under applicable law rather than as fully anonymized data. It is not used to build advertising profiles, and we do not sell it.

Where a player is embedded on a third-party website, the operator of that website — not SoundToggle — controls that page and is responsible for any notices or consents required there. If you are a user embedding our players, see Section 10.7 of the Terms of Service for your responsibilities.

Contact form submissions. If you submit a message through a user’s portfolio contact form, we collect your name, email address, and message and transmit them to that user. That user then handles your information independently of us, and you should direct requests about their use of it to them. Section 10.6 of the Terms of Service sets out their obligations.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

3.1 To Provide and Maintain the Service:

• Process and store your media files (audio, video, and photos)
• Perform media processing operations
• Create and manage your account
• Provide customer support
• Send you service-related notifications

3.2 To Process Payments:

• Process transactions
• Send billing statements and payment confirmations
• Manage subscriptions

3.3 To Improve and Optimize the Service:

• Analyze usage patterns and trends
• Debug and fix technical issues
• Develop new features and functionality
• Conduct research and analytics

3.4 To Communicate With You:

• Respond to your inquiries and requests
• Send administrative information (service updates, security alerts, etc.)
• Send marketing communications (which you can opt out of)
• Request feedback or participation in surveys

3.5 To Ensure Security and Prevent Fraud:

• Monitor for suspicious activity
• Detect and prevent security incidents
• Enforce our Terms of Service
• Protect the rights and safety of our users

3.6 For Legal Compliance:

• Comply with legal obligations
• Respond to lawful requests from authorities
• Enforce our legal rights

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Service Providers:

We share information with third-party service providers who perform services on our behalf:

• Stripe: Payment processing (see Stripe’s privacy policy at https://stripe.com/privacy)
• Amazon Web Services (AWS): Cloud storage, content delivery, and computing (see AWS privacy policy at https://aws.amazon.com/privacy/)
• Base44: Application platform and database services (see Base44’s privacy policy at https://base44.com/privacy)
• Resend: Transactional email delivery, including account, billing, and notification emails (see https://resend.com/legal/privacy-policy)
• Mailchimp (Intuit): Marketing email and audience management, for users who have not opted out (see https://www.intuit.com/privacy/statement/)
• Google Analytics: Usage measurement on our websites (see https://policies.google.com/privacy)

These service providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your information.

4.6 Analytics Data Shared With Users

Information collected about listeners and visitors under Section 2.4 is made available in aggregate and summary form to the user who owns the player, portfolio, or project involved. We do not provide users with listeners’ names, email addresses, or precise location.

4.2 For Legal Reasons:

We may disclose your information if required by law or in response to:

• Valid legal requests (subpoenas, court orders, etc.)
• Law enforcement requests
• National security requirements
• To protect our rights, property, or safety
• To investigate fraud or security issues

4.3 Business Transfers:

If we are involved in a merger, acquisition, sale of assets, bankruptcy, or reorganization, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4.4 With Your Consent:

We may share your information with other parties when you give us explicit consent to do so.

4.5 Aggregated or De-identified Information:

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

5. THIRD-PARTY SERVICES

Our Service integrates with third-party services that have their own privacy policies:

5.1 Stripe

Payment processing is handled by Stripe. Your payment information is subject to Stripe’s privacy policy. We recommend reviewing Stripe’s privacy policy at https://stripe.com/privacy.

5.2 Amazon Web Services (AWS)

We use AWS for cloud infrastructure, data storage, and computing. Data stored on AWS is subject to AWS’s security practices and privacy policies. Learn more at https://aws.amazon.com/privacy/.

5.3 Base44

Our application is built on the Base44 platform, and certain data (including account information, user data, and application data) is stored in databases within Base44’s ecosystem. Base44 provides the infrastructure and database services for our application. Your information stored on Base44 is subject to Base44’s security practices and privacy policies. Learn more at https://base44.com/privacy.

5.4 Email Providers

We use Resend to deliver transactional email (account verification, billing notices, support replies, and service alerts) and Mailchimp to deliver marketing email and manage marketing audiences. Your email address and engagement data (such as opens and clicks) are processed by these providers. You can opt out of marketing email at any time using the unsubscribe link or by contacting us; you cannot opt out of essential transactional email while you hold an account.

5.5 Google Analytics

We use Google Analytics to measure usage of our websites. Google Analytics sets cookies and processes IP-derived location and device data. You can opt out using Google’s browser add-on at https://tools.google.com/dlpage/gaoptout.

5.6 Other Third-Party Services

We may integrate with other third-party services from time to time. We are not responsible for the privacy practices of these third parties.

6. DATA STORAGE AND SECURITY

6.1 Where We Store Your Data

Your information is stored on servers and databases provided by:

• Amazon Web Services (AWS) for file storage and computing
• Base44 for application data and database management

These servers may be located in various regions, including the United States.

6.2 Security Measures

We implement reasonable administrative, technical, and physical security measures to protect your information, including:

• Encryption of data in transit (SSL/TLS)
• Encryption of sensitive data at rest
• Access controls and authentication
• Regular security assessments
• Employee training on data protection

Our third-party service providers (AWS and Base44) also implement industry-standard security measures to protect data stored on their platforms.

6.3 No Guarantee of Security

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6.4 User Content Security

Media files (audio, video, and photos) you upload are stored securely on our servers. However, you should maintain your own backups of important files.

7. DATA RETENTION

7.1 Account Information

We retain your account information for as long as your account is active or as needed to provide you with the Service.

7.2 User Content

We retain your media files (audio, video, and photos) and processed content according to your account settings and usage patterns. We may delete files after periods of inactivity or if storage limits are reached.

7.3 After Account Deletion

If you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it for legal, regulatory, or security purposes.

7.4 Backup Copies

Some information may remain in backup copies for a limited period but will not be available for active use.

8. YOUR PRIVACY RIGHTS

Depending on your location, you may have certain rights regarding your personal information:

8.1 Access and Portability

You have the right to:

• Access the personal information we hold about you
• Request a copy of your personal information in a portable format

8.2 Correction

You have the right to:

• Correct inaccurate or incomplete personal information
• Update your account information at any time

8.3 Deletion

You have the right to:

• Request deletion of your personal information
• Delete your account (contact us at info@soundtoggle.io)

Note: We may retain certain information as required by law or for legitimate business purposes.

8.4 Objection and Restriction

You have the right to:

• Object to certain processing of your personal information
• Request restriction of processing in certain circumstances

8.5 Withdraw Consent

Where we rely on your consent to process your information, you have the right to withdraw that consent at any time.

8.6 Opt-Out of Marketing

You can opt out of marketing communications by:

• Clicking the “unsubscribe” link in marketing emails
• Contacting us at info@soundtoggle.io
• Adjusting your account settings

8.7 How to Exercise Your Rights

To exercise any of these rights, please contact us at info@soundtoggle.io. We will respond to your request within a reasonable timeframe as required by applicable law.

8.8 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

8.9 European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including:

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object
• Right to lodge a complaint with a supervisory authority

Legal Basis for Processing (GDPR):

We process your personal information based on the following legal grounds:

• Contract: To perform our contract with you (Terms of Service)
• Legitimate Interests: To improve our Service, ensure security, and conduct business operations
• Consent: Where you have given consent (which you may withdraw at any time)
• Legal Obligation: To comply with applicable laws

9. INTERNATIONAL DATA TRANSFERS

If you are located outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate.

These countries may have data protection laws that differ from those of your country. By using the Service, you consent to the transfer of your information to countries outside your country of residence, including the United States.

For users in the EEA, UK, or Switzerland, we implement appropriate safeguards for international data transfers, such as standard contractual clauses approved by the European Commission.

10. CHILDREN’S PRIVACY

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at info@soundtoggle.io. We will delete such information from our systems.

If you are between 13 and 18 years old, you may only use the Service with the consent and supervision of a parent or guardian.

11. COOKIES AND TRACKING TECHNOLOGIES

11.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. We use cookies and similar tracking technologies to collect information and improve our Service.

11.2 Types of Cookies We Use

Essential Cookies: Required for the Service to function properly

• Authentication and security
• Session management
• Load balancing

Analytics Cookies: Help us understand how users interact with the Service

• Usage patterns
• Performance monitoring
• Error tracking
• Campaign attribution — how you first reached our site, stored in a first-party cookie (st_attr) that expires after 90 days. The referral code in that same cookie is treated as essential rather than analytics; see Sections 11.4 and 11.5.

Preference Cookies: Remember your settings and preferences

• Language preferences
• Display settings
• User interface customizations

11.3 Third-Party Cookies

Some cookies are placed by third-party services we use:

• Analytics providers
• Payment processors
• Customer support tools

11.4 Your Consent Choice

Where consent is legally required — the EU, the wider EEA, the United Kingdom, and Switzerland — we ask before setting any non-essential cookie, and we set none until you answer. Declining is as easy as accepting, and the Service works fully either way: playback, players, and your account are unaffected.

If you decline, no analytics cookies are set. Google Analytics still receives an anonymous, cookieless signal that a page was viewed, with no identifier that could link your visits together. If you accept, the cookies in the table below are set as described.

Declining never costs you anything you came for. In particular, if you followed a referral link, the referral code is still remembered so your discount applies and the person who referred you is still credited — that code is part of delivering the offer you clicked, not a measurement tool. What we do not record when you decline is how you found us: campaign tags, the website you came from, and the page you landed on.

Visitors outside those regions receive ordinary analytics cookies without a prompt, as is standard practice; you can still block or delete them at any time using the browser controls in Section 11.5.

Your choice is stored in a cookie named st_consent for 180 days and applies across both soundtoggle.io and app.soundtoggle.io. To change it, delete that cookie in your browser and the prompt will appear again on your next visit.

11.5 Cookies We Set

11.6 Embedded Players on Other Websites

When a SoundToggle player is embedded on someone else’s website, the same regional rule applies to the player itself: for listeners in the regions above it sets no cookies or identifiers unless the embedding site signals consent. Playing audio never requires consent. Website owners embedding our players can pass a visitor’s consent decision to the player; see our Help Center article “Embeds, Cookies & GDPR Consent.”

11.7 Cookie Management

You can control cookies through your browser settings. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block all cookies
• Receive notifications when cookies are set

Note: Blocking or deleting cookies may affect the functionality of the Service.

12. DO NOT TRACK AND GLOBAL PRIVACY CONTROL

Some web browsers have a “Do Not Track” (DNT) feature that signals to websites that you do not want your online activity tracked. Our Service does not currently respond to DNT signals.

Global Privacy Control (GPC) is a browser-level signal that communicates an opt-out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA, so a GPC signal does not change how we handle your information. If our practices change, we will honor GPC signals as a valid opt-out request and update this policy.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make changes, we will:

• Update the “Last Updated” date at the top of this Privacy Policy
• Notify you of material changes via email or through a notice on the Service
• Post the updated Privacy Policy on our website

Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

14. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Capital Trading Group LLC DBA SoundToggle

925 Bluegrass Dr E Billings, MT 59106 United States

Email: info@soundtoggle.io

For privacy-related inquiries, please include “Privacy Inquiry” in the subject line.

If you are located in the EEA, UK, or Switzerland and have concerns about how we handle your personal information, you have the right to lodge a complaint with your local data protection authority.

By using SoundToggle, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.