Privacy Policy

Last updated: April 3, 2026

SUPERMASSIVE AI, LLC ("SUPERMASSIVE," "we," "us," or "our") operates the SUPERMASSIVE platform and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and authentication credentials via our authentication provider (Supabase Auth).

Payment Information: Payment processing is handled entirely by Stripe, Inc. We do not store your credit card numbers, bank account details, or other financial account information on our servers. Stripe's privacy policy governs the collection and use of your payment data.

Usage Data: We collect anonymized analytics data through Vercel Analytics, including page views, performance metrics, and general usage patterns. This data does not personally identify you.

Uploaded Content: If you upload audio files, images, or other content for analysis or processing through our services (such as BeatAutopsy), we store that content temporarily to perform the requested service.

2. How We Use Your Information

• To provide, maintain, and improve our services
• To process transactions and send related information
• To send you technical notices, updates, and support messages
• To respond to your comments, questions, and customer service requests
• To monitor and analyze usage trends and preferences
• To detect, prevent, and address technical issues and fraud

3. Data Retention

We retain your account information for as long as your account is active. Uploaded audio and media files are retained only for the duration necessary to complete the requested analysis or processing, after which they are automatically deleted within 30 days. You may request deletion of your account and associated data at any time.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information with:

• Service Providers: Stripe (payments), Supabase (database/auth), Vercel (hosting), Resend (email delivery), and Twilio (communications) — each governed by their own privacy policies
• Legal Requirements: If required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement industry-standard security measures including HTTPS encryption, secure authentication, webhook signature validation, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data
• Opt out of marketing communications
• Export your data in a portable format

7. Cookies and Tracking

We use essential cookies for authentication and session management. Vercel Analytics collects anonymized performance data without using cookies. We do not use advertising cookies or third-party trackers.

8. Children's Privacy

Our services are not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:

SUPERMASSIVE AI, LLC
Email: privacy@supermassiveai.com
Website: supermassive.vercel.app