Privacy Notice

The controller is SoundTag. Privacy questions and rights requests may be sent to support@soundtag.link.

• Account data: name, email, login credentials, and profile details to create and operate your account and perform our contract.
• Content: destination links, QR titles, designs, logos, and messages to create, store, export, and share your QR codes under our contract.
• Usage and analytics: scans, approximate city, region and country, device type, platform, timestamps, and interactions to provide analytics, prevent abuse, and improve SoundTag based on contract performance and legitimate interests.
• Technical data: IP address, browser, device identifiers, logs, and security events to protect the service, prevent fraud, and diagnose failures based on legitimate interests and legal obligations.
• Communications: support requests and email-share recipient details to respond to requests and deliver features you ask us to perform. Optional marketing is sent only with consent or as otherwise permitted by law.

Paddle collects and handles payment information under its own privacy terms. SoundTag does not need to store your full payment-card details.

We share personal data only as needed with:

• hosting, database, email, analytics, security, and customer-support providers;
• Paddle, our Merchant of Record, for sales, subscriptions, payments, tax compliance, invoicing, cancellations, and refunds;
• professional legal, accounting, and insurance advisers;
• authorities or other parties when required by law or necessary to protect rights and safety.

We do not sell your personal data.

When you visit a SoundTag page we record the page visited, your IP address, an approximate location (city and country) derived from that IP address on our servers, your device type and browser, and the referring website. We use this to understand traffic, protect the service against abuse, and improve SoundTag, based on our legitimate interests.

Site visit records are kept for 90 days in identifiable form. After 90 days the raw IP address is automatically deleted, leaving only aggregated, non-identifying information.

Account and QR content is kept while your account is active and for a reasonable period afterward so we can provide recovery, meet legal obligations, resolve disputes, prevent fraud, and enforce agreements. Scan analytics and technical logs are retained only as long as necessary for reporting, security, and service improvement. Raw IP addresses in site visit records are removed after 90 days. Data is deleted or anonymised when no longer needed.

Some providers may process data outside Italy or the European Economic Area. Where required, we rely on adequacy decisions, European Commission Standard Contractual Clauses, or another lawful safeguard and assess protections appropriate to the transfer.

Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your data; object to processing based on legitimate interests; and withdraw consent at any time without affecting earlier lawful processing. We aim to respond within one month, though the law permits extensions for complex requests.

You may also complain to Italy's data-protection authority, the Garante per la protezione dei dati personali, or the supervisory authority where you live or work.

We use appropriate technical and organisational measures, including access controls, encryption in transit, restricted storage, and monitoring. No online system is entirely risk-free, so you should use a strong, unique password and protect access to your email.

SoundTag uses essential cookies or local storage for sign-in, security, preferences, and core operation. Analytics cookies may be used to understand service usage, and marketing cookies will only be used where permitted and with any consent required by law. You can manage cookies through browser settings; blocking essential storage may prevent account features from working.

We may update this notice when our service, providers, or legal obligations change. The date above identifies the latest version. Material changes will be communicated where required.