Privacy Policy

1. Introduction

Karaoke Your Way, operated by WeServeAI ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our karaoke event management platform (the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, password (hashed)
• Profile Information: Display name, profile picture (via Google OAuth)
• Organization Information: Organization name, team member details
• Content: Song libraries, event details, song metadata, performance notes
• Payment Information: Processed securely by third-party payment processors (we do not store full credit card numbers)

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Usage Data: Features used, events created, songs added, requests made
• Device Information: IP address, browser type, device type, operating system
• Log Data: Access times, pages viewed, time spent on pages, error logs
• Cookies and Similar Technologies: See Section 6 below

2.3 Information from Third Parties

We receive information from:

• Google OAuth: Name, email, profile picture when you sign in with Google
• Payment Processors: Transaction confirmation and billing details

2.4 Audience Data (No Account Required)

For audience members who use the Service without creating an account:

• Display Name: Self-provided nickname
• Browser Fingerprint: Anonymous identifier stored locally
• Song Requests and Votes: Associated with the anonymous session
• No Email or Personal Data: We do not collect email addresses or personal information from audience members

3. How We Use Your Information

We use the collected information to:

• Provide the Service: Create accounts, manage events, process song requests
• Improve the Service: Analyze usage patterns, develop new features
• Communicate: Send welcome emails, feature updates, support responses
• Process Payments: Handle subscriptions and billing
• Ensure Security: Detect fraud, prevent abuse, troubleshoot issues
• Comply with Laws: Respond to legal requests, enforce our Terms
• Personalization: Customize your experience based on preferences

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Your Consent

We share information when you explicitly authorize us to do so.

4.2 Within Your Organization

Information is shared with other members of your organization (team members, event attendees) as necessary to provide the Service.

4.3 Service Providers

We share information with third-party service providers who help us operate the Service:

• Hosting: Vercel (infrastructure)
• Database: Neon.tech (PostgreSQL hosting)
• Email: Resend (transactional emails)
• Authentication: Google (OAuth)
• Payment Processing: [Your payment processor] (subscriptions and billing)

4.4 Legal Requirements

We may disclose information if required by law or in response to:

• Valid legal requests (subpoenas, court orders)
• Investigations of potential violations of our Terms
• Protection of our rights, property, or safety
• Protection of others' rights, property, or safety

4.5 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specific retention periods:

• Account Data: Until you delete your account, plus 30 days
• Event Data: Until you delete the event, or account deletion
• Song Libraries: Until you delete them, or account deletion
• Audience Sessions: Deleted after 90 days of inactivity
• PopNGo Sessions: Last 10 sessions retained for paid users, 1 session for free users
• Log Data: Retained for 90 days
• Backup Data: Retained for 30 days

Even after deletion, some information may persist in backup systems for a limited time or as required by law.

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

• Essential Cookies: Required for authentication and basic functionality
• Authentication Tokens: JWT tokens stored in HTTP-only cookies
• Audience Identity: Anonymous session ID stored in browser localStorage

6.2 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features of the Service.

7. Data Security

We implement security measures to protect your information:

• Encryption: HTTPS/TLS for data in transit
• Password Hashing: Passwords stored using bcrypt
• Access Controls: Role-based access to data
• Regular Backups: Automated daily database backups
• Security Monitoring: Automated error tracking and alerts

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Your Rights and Choices

8.1 Access and Correction

You can access and update your information through your account settings.

8.2 Data Export

You can export your song libraries to Excel format at any time.

8.3 Account Deletion

You can delete your account through account settings. Upon deletion, we will remove your data within 30 days, except as required for legal compliance or backup purposes.

8.4 Email Preferences

You can opt out of promotional emails by clicking "unsubscribe" in any email. We may still send service-related emails (account notifications, security alerts).

8.5 Do Not Track

We do not currently respond to "Do Not Track" signals from browsers.

9. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@karaokeyourway.com.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have data protection laws different from your jurisdiction.

By using the Service, you consent to the transfer of your information to the United States and other countries where we or our service providers operate.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about data we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell data)
• Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at privacy@karaokeyourway.com.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@karaokeyourway.com. You also have the right to lodge a complaint with your local data protection authority.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes

Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: