Privacy Policy
Table of Contents
- Introduction
- Information We Collect
- How We Use Your Information
- How We Share Your Information
- Third-Party Services
- Data Storage and Security
- Data Retention
- Your Privacy Rights
- International Data Transfers
- Children’s Privacy
- Cookies and Tracking Technologies
- Do Not Track and Global Privacy Control
- Changes to This Privacy Policy
- Contact Us
1. INTRODUCTION
Capital Trading Group LLC DBA SoundToggle (“we,” “us,” “our,” or “SoundToggle”) operates the SoundToggle web application and related services (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.
By using SoundToggle, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.
This Privacy Policy should be read in conjunction with our Terms of Service.
Change of ownership. Ownership of SoundToggle has transferred from Cloverleaf Audio LLC to Capital Trading Group LLC. Capital Trading Group LLC is now the controller of personal information processed through the Service and has assumed responsibility for information previously collected under this policy. The categories of information we collect and the purposes for which we use it are unchanged by the transfer.
Two audiences. This policy covers both (a) users — people with a SoundToggle account — and (b) listeners and visitors — people who encounter a SoundToggle player or portfolio page, including on third-party websites where a user has embedded a player. Sections 2.4 and 4.6 describe what we collect about listeners and visitors specifically.
2. INFORMATION WE COLLECT
We collect several types of information from and about users of our Service:
2.1 Information You Provide to Us
Account Information: When you create an account, we collect:
- Name
- Email address
- Password (encrypted)
- Any other information you choose to provide in your profile
Payment Information: When you make a purchase, our payment processor (Stripe) collects:
- Credit card or payment card information
- Billing address
- Payment transaction history
Note: We do not directly store your complete payment card information. This is handled securely by Stripe.
User Content: We collect and store:
- Audio files you upload to the Service
- Video files you upload to the Service
- Photo/image files you upload to the Service
- Processed media files
- Any metadata associated with your files
Communications: If you contact us directly, we may collect:
- Your name
- Email address
- The contents of your message or inquiry
- Any other information you choose to provide
2.2 Information We Collect Automatically
When you access or use our Service, we automatically collect:
Usage Information:
- Pages or features you access
- Time and date of your visits
- Time spent on pages
- Links you click
- Actions you take within the Service
Device Information:
- IP address
- Browser type and version
- Operating system
- Device type
- Unique device identifiers
Log Data: Our servers automatically record information including:
- Request type
- Access times
- Pages viewed
- Your interaction with the Service
- Error logs and debugging information
Referral and Campaign Information: When you first arrive on our websites, we record how you got there:
- The referring website, if any
- Campaign tags in the link you followed (for example
utm_source,utm_medium,utm_campaign) and advertising click identifiers - The first page you landed on, and the date and time
We keep only your first visit’s details, in a cookie that expires after 90 days. If you go on to create an account, that information is saved to your account record so we can understand which channels bring people to SoundToggle. We use it for our own marketing measurement; we do not sell it and do not use it to build advertising profiles.
Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. See Section 11 for more details.
2.3 Information from Third Parties
We may receive information about you from third-party services you use to access our Service, such as:
- Authentication services (if you log in through a third-party service)
- Payment processors
- Analytics providers
2.4 Information We Collect About Listeners and Visitors
When someone plays a SoundToggle player — on our websites, on a user’s portfolio page, or embedded on a third-party website — we collect information about that interaction, including:
- Play counts, toggle/version-switch counts, listen duration, and completion
- Approximate geographic location derived from IP address (typically country, region, and city)
- Device type, browser, and operating system
- Referring page or website where the player appeared
- A session identifier used to distinguish one listening session from another
We use this information to provide analytics to the user who owns the player, to measure and improve the Service, and to detect abuse. Because it can include a session identifier and city-level location, we treat it as personal information under applicable law rather than as fully anonymized data. It is not used to build advertising profiles, and we do not sell it.
Where a player is embedded on a third-party website, the operator of that website — not SoundToggle — controls that page and is responsible for any notices or consents required there. If you are a user embedding our players, see Section 10.7 of the Terms of Service for your responsibilities.
Contact form submissions. If you submit a message through a user’s portfolio contact form, we collect your name, email address, and message and transmit them to that user. That user then handles your information independently of us, and you should direct requests about their use of it to them. Section 10.6 of the Terms of Service sets out their obligations.
3. HOW WE USE YOUR INFORMATION
We use the information we collect for the following purposes:
3.1 To Provide and Maintain the Service:
- Process and store your media files (audio, video, and photos)
- Perform media processing operations
- Create and manage your account
- Provide customer support
- Send you service-related notifications
3.2 To Process Payments:
- Process transactions
- Send billing statements and payment confirmations
- Manage subscriptions
3.3 To Improve and Optimize the Service:
- Analyze usage patterns and trends
- Debug and fix technical issues
- Develop new features and functionality
- Conduct research and analytics
3.4 To Communicate With You:
- Respond to your inquiries and requests
- Send administrative information (service updates, security alerts, etc.)
- Send marketing communications (which you can opt out of)
- Request feedback or participation in surveys
3.5 To Ensure Security and Prevent Fraud:
- Monitor for suspicious activity
- Detect and prevent security incidents
- Enforce our Terms of Service
- Protect the rights and safety of our users
3.6 For Legal Compliance:
- Comply with legal obligations
- Respond to lawful requests from authorities
- Enforce our legal rights
4. HOW WE SHARE YOUR INFORMATION
We do not sell your personal information. We may share your information in the following circumstances:
4.1 With Service Providers:
We share information with third-party service providers who perform services on our behalf:
- Stripe: Payment processing (see Stripe’s privacy policy at https://stripe.com/privacy)
- Amazon Web Services (AWS): Cloud storage, content delivery, and computing (see AWS privacy policy at https://aws.amazon.com/privacy/)
- Base44: Application platform and database services (see Base44’s privacy policy at https://base44.com/privacy)
- Resend: Transactional email delivery, including account, billing, and notification emails (see https://resend.com/legal/privacy-policy)
- Mailchimp (Intuit): Marketing email and audience management, for users who have not opted out (see https://www.intuit.com/privacy/statement/)
- Google Analytics: Usage measurement on our websites (see https://policies.google.com/privacy)
These service providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your information.
4.6 Analytics Data Shared With Users
Information collected about listeners and visitors under Section 2.4 is made available in aggregate and summary form to the user who owns the player, portfolio, or project involved. We do not provide users with listeners’ names, email addresses, or precise location.
4.2 For Legal Reasons:
We may disclose your information if required by law or in response to:
- Valid legal requests (subpoenas, court orders, etc.)
- Law enforcement requests
- National security requirements
- To protect our rights, property, or safety
- To investigate fraud or security issues
4.3 Business Transfers:
If we are involved in a merger, acquisition, sale of assets, bankruptcy, or reorganization, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
4.4 With Your Consent:
We may share your information with other parties when you give us explicit consent to do so.
4.5 Aggregated or De-identified Information:
We may share aggregated or de-identified information that cannot reasonably be used to identify you.
5. THIRD-PARTY SERVICES
Our Service integrates with third-party services that have their own privacy policies:
5.1 Stripe
Payment processing is handled by Stripe. Your payment information is subject to Stripe’s privacy policy. We recommend reviewing Stripe’s privacy policy at https://stripe.com/privacy.
5.2 Amazon Web Services (AWS)
We use AWS for cloud infrastructure, data storage, and computing. Data stored on AWS is subject to AWS’s security practices and privacy policies. Learn more at https://aws.amazon.com/privacy/.
5.3 Base44
Our application is built on the Base44 platform, and certain data (including account information, user data, and application data) is stored in databases within Base44’s ecosystem. Base44 provides the infrastructure and database services for our application. Your information stored on Base44 is subject to Base44’s security practices and privacy policies. Learn more at https://base44.com/privacy.
5.4 Email Providers
We use Resend to deliver transactional email (account verification, billing notices, support replies, and service alerts) and Mailchimp to deliver marketing email and manage marketing audiences. Your email address and engagement data (such as opens and clicks) are processed by these providers. You can opt out of marketing email at any time using the unsubscribe link or by contacting us; you cannot opt out of essential transactional email while you hold an account.
5.5 Google Analytics
We use Google Analytics to measure usage of our websites. Google Analytics sets cookies and processes IP-derived location and device data. You can opt out using Google’s browser add-on at https://tools.google.com/dlpage/gaoptout.
5.6 Other Third-Party Services
We may integrate with other third-party services from time to time. We are not responsible for the privacy practices of these third parties.
6. DATA STORAGE AND SECURITY
6.1 Where We Store Your Data
Your information is stored on servers and databases provided by:
- Amazon Web Services (AWS) for file storage and computing
- Base44 for application data and database management
These servers may be located in various regions, including the United States.
6.2 Security Measures
We implement reasonable administrative, technical, and physical security measures to protect your information, including:
- Encryption of data in transit (SSL/TLS)
- Encryption of sensitive data at rest
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
Our third-party service providers (AWS and Base44) also implement industry-standard security measures to protect data stored on their platforms.
6.3 No Guarantee of Security
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
6.4 User Content Security
Media files (audio, video, and photos) you upload are stored securely on our servers. However, you should maintain your own backups of important files.
7. DATA RETENTION
7.1 Account Information
We retain your account information for as long as your account is active or as needed to provide you with the Service.
7.2 User Content
We retain your media files (audio, video, and photos) and processed content according to your account settings and usage patterns. We may delete files after periods of inactivity or if storage limits are reached.
7.3 After Account Deletion
If you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it for legal, regulatory, or security purposes.
7.4 Backup Copies
Some information may remain in backup copies for a limited period but will not be available for active use.
8. YOUR PRIVACY RIGHTS
Depending on your location, you may have certain rights regarding your personal information:
8.1 Access and Portability
You have the right to:
- Access the personal information we hold about you
- Request a copy of your personal information in a portable format
8.2 Correction
You have the right to:
- Correct inaccurate or incomplete personal information
- Update your account information at any time
8.3 Deletion
You have the right to:
- Request deletion of your personal information
- Delete your account (contact us at info@soundtoggle.io)
Note: We may retain certain information as required by law or for legitimate business purposes.
8.4 Objection and Restriction
You have the right to:
- Object to certain processing of your personal information
- Request restriction of processing in certain circumstances
8.5 Withdraw Consent
Where we rely on your consent to process your information, you have the right to withdraw that consent at any time.
8.6 Opt-Out of Marketing
You can opt out of marketing communications by:
- Clicking the “unsubscribe” link in marketing emails
- Contacting us at info@soundtoggle.io
- Adjusting your account settings
8.7 How to Exercise Your Rights
To exercise any of these rights, please contact us at info@soundtoggle.io. We will respond to your request within a reasonable timeframe as required by applicable law.
8.8 California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information
- Right to opt-out of the sale of personal information (Note: We do not sell personal information)
- Right to non-discrimination for exercising your CCPA rights
8.9 European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including:
- Right of access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object
- Right to lodge a complaint with a supervisory authority
Legal Basis for Processing (GDPR):
We process your personal information based on the following legal grounds:
- Contract: To perform our contract with you (Terms of Service)
- Legitimate Interests: To improve our Service, ensure security, and conduct business operations
- Consent: Where you have given consent (which you may withdraw at any time)
- Legal Obligation: To comply with applicable laws
9. INTERNATIONAL DATA TRANSFERS
If you are located outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate.
These countries may have data protection laws that differ from those of your country. By using the Service, you consent to the transfer of your information to countries outside your country of residence, including the United States.
For users in the EEA, UK, or Switzerland, we implement appropriate safeguards for international data transfers, such as standard contractual clauses approved by the European Commission.
10. CHILDREN’S PRIVACY
Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.
If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at info@soundtoggle.io. We will delete such information from our systems.
If you are between 13 and 18 years old, you may only use the Service with the consent and supervision of a parent or guardian.
11. COOKIES AND TRACKING TECHNOLOGIES
11.1 What Are Cookies
Cookies are small text files stored on your device when you visit a website. We use cookies and similar tracking technologies to collect information and improve our Service.
11.2 Types of Cookies We Use
Essential Cookies: Required for the Service to function properly
- Authentication and security
- Session management
- Load balancing
Analytics Cookies: Help us understand how users interact with the Service
- Usage patterns
- Performance monitoring
- Error tracking
- Referral and campaign attribution — a first-party cookie (
st_attr) that records how you first reached our site and expires after 90 days. See Section 2.2.
Preference Cookies: Remember your settings and preferences
- Language preferences
- Display settings
- User interface customizations
11.3 Third-Party Cookies
Some cookies are placed by third-party services we use:
- Analytics providers
- Payment processors
- Customer support tools
11.4 Cookie Management
You can control cookies through your browser settings. Most browsers allow you to:
- View and delete cookies
- Block third-party cookies
- Block all cookies
- Receive notifications when cookies are set
Note: Blocking or deleting cookies may affect the functionality of the Service.
12. DO NOT TRACK AND GLOBAL PRIVACY CONTROL
Some web browsers have a “Do Not Track” (DNT) feature that signals to websites that you do not want your online activity tracked. Our Service does not currently respond to DNT signals.
Global Privacy Control (GPC) is a browser-level signal that communicates an opt-out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA, so a GPC signal does not change how we handle your information. If our practices change, we will honor GPC signals as a valid opt-out request and update this policy.
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make changes, we will:
- Update the “Last Updated” date at the top of this Privacy Policy
- Notify you of material changes via email or through a notice on the Service
- Post the updated Privacy Policy on our website
Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.
14. CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
Capital Trading Group LLC DBA SoundToggle
925 Bluegrass Dr E Billings, MT 59106 United States
Email: info@soundtoggle.io
For privacy-related inquiries, please include “Privacy Inquiry” in the subject line.
If you are located in the EEA, UK, or Switzerland and have concerns about how we handle your personal information, you have the right to lodge a complaint with your local data protection authority.
By using SoundToggle, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.