Privacy Policy

1. Information we process

Depending on how you use the store, we may process your name, email address, account identifier, order and license records, cart and checkout state, support messages, saved/liked beats, technical request information and security/audit events.

For card payments, Stripe handles card details. NOKAN BEATS does not need your full card number to fulfill the order. For supported cryptocurrency payments, the payment provider and public blockchain may process or expose transaction addresses and transaction data inherent to that network.

2. Why we use it

• create and secure accounts and sign-in flows;
• price, process and reconcile purchases;
• deliver purchased beat files and license agreements;
• maintain purchase history, refunds and active entitlements;
• reply to support requests and send transactional messages;
• prevent abuse, investigate errors and protect the store.

3. Service providers

The store relies on specialist providers to operate. These currently include Supabase for database/authentication, Vercel for application hosting, Cloudflare R2 for file storage, Stripe for card payments, NOWPayments for supported crypto payments, Resend for transactional email, and Google when you choose Google sign-in.

These providers process information for their respective service and may have their own legal obligations and privacy terms. We do not send crypto payment details to a third-party QR-code generator.

4. Public and private data

Catalog information and intentionally public previews can be visible without an account. Master MP3, WAV and stems files are kept behind entitlement checks and are not intended to be public catalog assets. Likes and saved-beat relationships are treated as account data rather than a public user list.

5. Retention and security

We keep information for as long as reasonably needed for the purpose it was collected, including order records, accounting, dispute handling, fraud prevention and legal obligations. Retention periods can differ by data type and applicable law.

Security measures include access controls, row-level database policies, server-side authorization, signed or private file delivery, payment-provider verification and audit logging. No online system can promise absolute security.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, or request a copy of certain personal data. Some records may need to be retained where required for legal, accounting, security or dispute purposes.

To make a privacy request, use the contact page and identify the account email involved. Do not send passwords or payment credentials.

7. Changes

We may update this policy when the store, providers or legal requirements change. The date at the top shows the current published version.