Privacy Policy

Who we are

riddimBank is a sole proprietorship operating from Solana Beach, California. This policy covers riddimbank.com and everything you do on it — browsing, subscribing, downloading, and getting in touch.

What we collect

When you subscribe. Your name and email address. Your payment is handled by Stripe, and we never see or store your card number — we keep only the customer identifier Stripe gives us so we can match a payment to your account.

How you found us. When you subscribe, we record which link or ad brought you — the campaign tags in the link (such as utm_source, or the click identifiers Google and Facebook add), the page you first arrived on, and the website that sent you, but never that site's full address. We also keep the country and state from your billing details. We use this to see which of our marketing brings subscribers, and we do not sell it or share it with anyone.

When you use the site. Which sample banks you redeem, your credit balance, and when you generated download links.

When you contact us. Whatever you put in the form, plus the page you sent it from, your browser and screen size. That technical detail exists so a problem can be reproduced without a round of questions.

Automatically. Your IP address, recorded for rate limiting and to detect download links being shared in bulk. This is the most sensitive thing we hold and it is the thing we keep for the shortest time — see how long we keep things.

We do not ask for your date of birth, your address beyond what Stripe needs for billing, or anything about you that the service does not require.

Why we collect it

To run your subscription and give you what you paid for; to answer you when you write to us; to stop abuse; and to meet our tax and accounting obligations. We do not sell your data, and we do not share it for anyone else's advertising.

Who else sees it

Only the companies we need to run the service, and only the part each one needs:

• Stripe — payments and subscriptions
• Google Firebase — hosting, sign-in, and the database your account lives in
• Mailgun — sending email to you
• UseInbox — our mailing list, if you joined it
• Freshdesk — support conversations
• Algolia — the search on the browse page
• Google Analytics — see cookies and analytics

If you order mixing, mastering or a session, that also involves the form and file-transfer services we use to receive your audio, and the booking service that holds the appointment.

Cookies and analytics

Some storage on your device is necessary for the site to work at all — staying signed in, and remembering what is in your cart. That is not optional and there is nothing to consent to.

Beyond that we use Google Analytics, to understand how people find and move around the site, and OptiMonk, which shows the occasional offer and remembers whether you have already seen it. Neither is necessary, and neither loads until you agree.

If you agree, we also remember on your device where your first visit came from — for up to 90 days — so that if you subscribe later we know which link or ad brought you. If you decline, nothing is remembered; if you arrive on our pricing page from a tagged link, that link's tags still go with your order, because they are in the address you clicked rather than stored on your device.

We do not use advertising or retargeting trackers.

How long we keep things

• Your account and what you redeemed — for as long as you have an account. Your redeemed sounds stay yours even if you cancel, so the record of them stays too.
• Payment records — seven years, because tax rules require it.
• Support conversations — while they are useful, so we are not asking you to explain the same thing twice.
• IP addresses — 90 days, then deleted. The record of what happened is kept; the address is not.
• How you found us — if you subscribe, it stays with your account. A visit to our pricing page that never became a subscription is deleted after 90 days.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Deleting your account means losing access to sounds you have redeemed, so we will make sure that is what you meant before doing it. Some records — payments, mainly — we have to keep even after an account is closed.

Ask through the contact form and pick Something else. We answer these within 30 days.

Age

riddimBank is for people 18 and over. We do not knowingly collect anything from anyone younger, and if we find that we have, we delete it.

Changes

If this policy changes in a way that matters, we will say so on this page and update the date at the top. Carrying on using riddimBank after that means the new version applies.

Getting in touch

Use the contact form. If the form itself is broken, email support@riddimbank.freshdesk.com.