Privacy Policy

PreFadr, operated by AIO, Inc. ("we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your data. By using PreFadr, you agree to the practices described in this Policy.

This Privacy Policy complies with applicable privacy laws, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and the General Data Protection Regulation (GDPR) for users in the European Economic Area.

Note on Audio Files: We do NOT use your audio files for AI training, machine learning, or any purpose other than storing them for your access and sharing via pitch links you create.

For users in the European Economic Area, we process your personal data based on the following lawful grounds under GDPR:

We use the information we collect to:

• Provide and operate the PreFadr Service
• Process payments via Stripe
• Send approval request emails to collaborators when you initiate this action
• Send transactional emails related to your account (password resets, billing notifications, security alerts)
• Send marketing emails (only if you have opted in)
• Respond to support requests
• Improve and develop new features
• Ensure security and prevent fraud or abuse
• Comply with legal obligations

We do NOT:

• Sell your personal data or music content to third parties
• Use your music, documents, or content for AI training or machine learning
• Share your data with advertisers or data brokers
• Access your content except as necessary to provide the Service or respond to a valid legal request

PreFadr offers an optional AI Metadata Optimizer powered by OpenAI. When you use this feature, the track information you submit (title, genre, BPM, key, notes) is sent to OpenAI's API. We do NOT send audio files to OpenAI. This data is processed according to OpenAI's Privacy Policy. Use of this feature is entirely optional.

PreFadr offers an optional Smart Match feature powered by OpenAI. When you use this feature, your track metadata (titles, genres, BPM, notes) is sent to OpenAI to match against a brief. This data is processed according to OpenAI's Privacy Policy. Use of this feature is entirely optional.

PreFadr offers an optional Contract Analyzer powered by OpenAI. When you use this feature, the contract text you paste is sent to OpenAI for analysis. This data is processed according to OpenAI's Privacy Policy. Analysis is generated by AI and is not a substitute for legal advice. Use of this feature is entirely optional.

Before using any AI feature for the first time, you will be asked to provide explicit consent. You may withdraw consent at any time in your account settings.

We use the following trusted third-party services to operate PreFadr:

Data Processing Agreements (DPAs): For users in the European Economic Area, we maintain Data Processing Agreements with our subprocessors where required under GDPR Article 28. You may request a copy of these agreements by contacting privacy@synctrack.app.

When you enter collaborator information (names, emails, PRO affiliations, IPI numbers) into PreFadr, you represent and warrant that:

• You have appropriate authorization to share this information with us
• The collaborator has consented to receiving approval request emails from PreFadr
• The information is accurate to the best of your knowledge

We use this data solely to provide the Service — for example, to send approval request emails when you initiate that action. We do not contact collaborators for any marketing or other purpose.

PreFadr allows you to generate shareable approval links and pitch links that can be accessed by people without a PreFadr account. When someone accesses such a link:

• We log the timestamp of access and any actions they take (such as approving or disputing a document)
• This log is visible to you as the document owner
• Individuals who access links do not need to create an account
• We do not collect personal information from link visitors beyond what is necessary to process their action

We retain your data for as long as your account is active.

If you cancel your subscription, we retain your data for a 6-month grace period. After the grace period expires, we will delete your personal data and associated content, except where we are required to retain it by law or for legitimate business purposes (such as billing records, tax records, or legal hold requirements).

You may request complete account deletion at any time by contacting privacy@synctrack.app. We will delete your data within 30 days of receiving a verified request, except where retention is required by law.

We may retain certain data to comply with legal obligations, resolve disputes, or enforce our agreements, even after account deletion.

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Data Portability: Request your data in a portable format (JSON export available upon request)

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out of Sale: We do not sell personal information. See our "Do Not Sell My Personal Information" notice below.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

• Right to Access (Article 15)
• Right to Rectification (Article 16)
• Right to Erasure ("Right to be Forgotten") (Article 17)
• Right to Restrict Processing (Article 18)
• Right to Data Portability (Article 20)
• Right to Object (Article 21)
• Right to Withdraw Consent (Article 7)
• Right to Lodge a Complaint with your data protection authority

To exercise any of these rights, contact us at privacy@synctrack.app. We will respond within 45 days (or sooner as required by law). We may need to verify your identity before fulfilling your request.

PreFadr does not sell your personal information to third parties. However, California law requires us to provide this notice. If you are a California resident and have questions about your rights under CCPA/CPRA, contact us at privacy@synctrack.app.

To learn more about the CCPA and your rights, visit the California Attorney General's website.

PreFadr uses only essential cookies required for authentication, session management, and security. These cookies are necessary for the Service to function.

We do not use Google Analytics, Facebook Pixel, or other third-party advertising trackers.

For users in the European Economic Area, we will display a cookie consent banner on your first visit allowing you to manage cookie preferences.

We implement reasonable technical and organizational security measures to protect your data:

• TLS encryption for all data in transit (HTTPS)
• Encryption at rest for stored data
• Row-level security policies at the database level, ensuring users can only access their own data
• Rate limiting on API endpoints to prevent abuse
• Access controls limiting employee access to user data
• Regular security reviews of our infrastructure

No system is completely secure. In the event of a data breach affecting your rights or freedoms, we will notify you as required by applicable law. Under GDPR, we will notify the relevant supervisory authority within 72 hours of becoming aware of a breach, and notify affected users without undue delay.

Your data is stored in the United States via our service providers (Supabase, Vercel).

For users in the European Economic Area, we rely on appropriate safeguards for international data transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission, where required under GDPR Article 46.

We maintain Data Processing Agreements with our subprocessors that include SCCs for international transfers.

PreFadr is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at privacy@synctrack.app and we will delete the information promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice at least 30 days before changes take effect. Your continued use of the Service after the effective date of changes constitutes acceptance of the updated Policy. The most current version will always be available at prefadr.com/privacy.

For privacy-related questions, to exercise your rights, or to report a privacy concern, contact us at: