Back

    Privacy Policy

    Last updated: May 27, 2026

    Soonos is a performance-based ranking platform for DJs operated by assetswapai inc., trading as "Soonos" ("we", "us", "our"). assetswapai inc. is the data controller for the personal data described in this notice. We process the minimum data needed to score your mix, help you climb the rankings, and (if you choose) make you discoverable to promoters and booking agents.

    Data controller contact:
    assetswapai inc.
    8 The Green, STE B, Dover, DE 19901, United States
    Email: hello@soonos.life

    Payments are processed by Stripe, Inc. ("Stripe"). When you make a purchase, Stripe collects and processes your payment data (card details, billing address, tax information) on our behalf as a data processor, under its own Privacy Policy. assetswapai inc. does not store full card numbers or banking credentials.

    1. What we collect and why

    • Account data — email, display name, profile/avatar, optional verification links. Used to create and operate your account.
    • Authentication data — login credentials, OAuth tokens (Google/Apple). Used to authenticate you and keep your session secure.
    • Mix and track content — audio you upload, metadata (BPM, key, genre, tracklists). Used to generate your scoring, coaching, and ranking.
    • Usage and telemetry — pages viewed, features used, anonymous visit data, device and browser information, IP address. Used to operate, secure, and improve the Service.
    • Support messages — content of support requests and chat with our coach. Used to provide help and improve the product.
    • Marketing and consent — newsletter subscription status, UTM parameters from campaigns. Used for relevant communications you opt into.

    2. Legal bases (GDPR Art. 6 — for users in the UK / EEA)

    • Performance of a contract (Art. 6(1)(b)) — to create and operate your account, provide scoring/coaching, and deliver paid plans you subscribe to.
    • Legitimate interests (Art. 6(1)(f)) — security, fraud prevention, abuse detection, product improvement, and aggregated analytics. We balance these interests against your rights and freedoms.
    • Consent (Art. 6(1)(a)) — marketing emails, newsletter subscription, and non-essential analytics/marketing cookies. You can withdraw consent at any time.
    • Legal obligation (Art. 6(1)(c)) — tax, accounting, anti-fraud, and responding to lawful requests from authorities.

    3. Who we share data with

    We share personal data only with parties that help us run the Service:

    • Stripe, Inc. — our payment processor. Stripe handles billing, payment processing, tax calculation and invoicing (see our Refund Policy). Stripe's privacy notice: (Refund Policy) stripe.com/privacy.
    • Hosting and backend infrastructure (Supabase / Lovable Cloud, AWS) — secure storage of accounts, mixes, and analysis data.
    • Email providers (Brevo, Resend) — transactional emails (account, billing notifications) and marketing emails you opted into.
    • AI providers (OpenAI, Google, Lovable AI Gateway) — used to power scoring and coaching. Audio metadata and text prompts may be sent; raw audio is processed under our control.
    • Meta Platforms Ireland Ltd. / Meta Platforms, Inc. ("Meta") — we use Meta's advertising and measurement products (Meta Pixel, Conversions API, Meta Ads Manager API) to deliver, measure and optimize advertising on Facebook and Instagram. See section 10 below for details on the data shared, the legal basis, and how to opt out.
    • Analytics — anonymous usage analytics to understand product usage.
    • Professional advisers (legal, accounting) and authorities where required by law.

    We do not sell your personal data.

    4. International transfers

    Some of our service providers are based outside the UK / EEA (notably the United States). When personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.

    5. Retention

    • Account data: while your account is active, plus a short period after deletion for legal and accounting reasons.
    • Anonymous mix uploads: kept for up to 15 minutes, then deleted.
    • Authenticated user audio: deleted after analysis is complete; only the report metadata is kept.
    • Logs and telemetry: typically up to 12 months.
    • Billing data: retained as required by tax / accounting law (typically 7–10 years), in coordination with Stripe.

    6. Your rights

    Depending on where you live, you may have rights to access, rectify, delete, restrict or object to processing of your personal data, withdraw consent, and request data portability. UK / EEA users also have the right to lodge a complaint with their local supervisory authority. To exercise your rights, email hello@soonos.life. We respond within one month.

    7. Security

    We use appropriate technical and organisational measures including encryption in transit, access controls, isolated environments and audited infrastructure. No system is 100% secure, but we work to keep your data safe.

    8. Cookies and tracking technologies

    We use essential cookies needed for authentication and security, plus a small set of analytics and advertising cookies (including the Meta Pixel — see section 10) to understand product usage and measure marketing. You can manage cookies in your browser settings and through our cookie banner where applicable.

    9. Children

    The Service is not directed to children under 13 (or under 16 in the UK / EEA, where applicable). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at {{email}} and we will delete it. hello@soonos.life

    10. Meta Platforms (Facebook, Instagram, Meta Pixel, Conversions API, Meta Ads APIs)

    Soonos integrates with services provided by Meta Platforms, Inc. and Meta Platforms Ireland Ltd. ("Meta") to run, measure and optimize advertising on Facebook and Instagram, and — where you choose to connect your accounts — to manage advertising campaigns on your behalf. This section explains what we share with Meta, why, and how you can control it.

    What we share with Meta:

    • Website events (Meta Pixel and Conversions API) — pageviews, button clicks, signups, purchases and other standard events, together with technical identifiers (IP address, user agent, Meta browser/click IDs _fbp / _fbc) and, where available, hashed identifiers (email, name) using SHA-256 before transmission.
    • Advertising performance data — aggregated campaign, ad set, ad and creative metrics retrieved from the Meta Ads API to display analytics inside the Soonos dashboard.
    • Authentication data (if you log in or connect with Facebook) — Facebook user ID, name, email and profile picture as authorized by you via Facebook Login. We only request the minimum permissions needed for the feature you use.
    • Ads management tokens (if you connect a Meta Ads account) — access tokens issued by Meta to read and, where you authorize it, manage ad accounts, campaigns and leads on your behalf.

    Why we share it: to deliver and measure advertising, attribute conversions, prevent fraud and abuse, comply with Meta's advertising policies, and provide the Meta-connected features you request.

    Joint controllership for Meta Pixel. When we use the Meta Pixel and Conversions API, Meta Ireland and assetswapai inc. act as joint controllers for the collection and transmission of event data, under the Meta Controller Addendum. Meta then processes that data as an independent controller for its own purposes (ad delivery, measurement, security, product improvement) under its Privacy Policy.

    Legal basis (UK / EEA). Tracking via the Meta Pixel and similar advertising cookies relies on your consent (GDPR Art. 6(1)(a)) collected through our cookie banner; you can withdraw it at any time. Use of the Meta Ads API after you connect your Facebook account is based on performance of a contract (Art. 6(1)(b)) to provide the connected feature, and on Meta's own terms with you.

    Compliance with Meta's terms. When using Meta-connected features, you also agree to and must comply with Meta's Terms of Service, Community Standards, Advertising Standards, Platform Terms, Developer Policies, and Meta's Business Tools Terms. Soonos does not sell or share personal data obtained from Meta with any third party other than the service providers listed in section 3.

    Terms of Service, Community Standards, Advertising Standards, Platform Terms, Developer Policies, Business Tools Terms.

    Your controls. You can manage Meta's use of your data via your Meta Accounts Center (Ads preferences, Off-Facebook Activity, Apps and Websites). You can revoke Soonos' access to your Facebook or Meta Ads account at any time under Settings → Apps and Websites in Facebook, and you can withdraw advertising-cookie consent in our cookie banner.

    Data deletion request (Meta requirement). If you want us to delete data we hold about you that was obtained through Facebook Login or any Meta integration, email hello@soonos.life with the subject "Meta data deletion request", or submit it via our contact form. We will confirm receipt within 7 days and complete deletion within 30 days, in line with Meta Platform Terms. You will also receive a confirmation code you can use to track the request.

    11. DJ profiles collected from public sources

    Beyond the data you give us as a user, we index DJ profiles that are publicly available on third-party platforms (primarily Mixcloud and SoundCloud) in order to build a public directory of DJs and to contact them once about the page we created for them. We are not affiliated with, endorsed by, or partnered with any of these platforms.

    Where the data comes from: Public profile pages on Mixcloud and SoundCloud, read as any visitor would. We never access private profiles, private tracks, or logged-in areas, and we do not buy or rent email lists.

    What we collect:

    • Public artist name, profile URL, avatar, self-declared location and biography.
    • A contact email address only when the artist has published it themselves on their public profile.
    • Public statistics about published mixes (counts, followers, engagement indicators) and public mix metadata (title, duration, tags).

    Why (legal basis): Legitimate interest (GDPR Art. 6(1)(f)) in presenting a directory of DJs and in contacting professionals about a service directly relevant to their public activity, using a contact address they chose to publish. We limit ourselves to a short sequence of messages, every message states where we got the address, and any objection stops all contact immediately. For recipients in the United States, this processing also follows the CAN-SPAM opt-out regime.

    How long we keep it: Indexed public profile data is kept while the directory page exists. If you object, unsubscribe, or ask for deletion, the page and the associated data are removed and your email address is added to a permanent suppression list so the profile can never be re-indexed.

    Your rights: You can object to this processing, ask us to delete your page and data, or request access or rectification at any time — use the unsubscribe link in any email, or write to us. We act on deletion and objection requests within 30 days, and in practice usually the same day. hello@soonos.life

    12. Contact

    assetswapai inc., 8 The Green, STE B, Dover, DE 19901, United States — hello@soonos.life.For payment-related privacy questions, you may also consult Stripe's privacy policy.