Privacy Policy

Effective date: November 11, 2026

Sonic Canvas is operated by Inevitable Vision LLC ("we", "us"). This policy explains what we collect when you use the Sonic Canvas website.

What we collect

• Account information: your email address and password. Passwords are stored by our authentication provider (Supabase) in hashed form; we cannot see them.
• Subscription information: your plan, subscription status, renewal/expiry dates and Paddle customer/subscription/transaction IDs, so we can unlock Premium.
• Technical information: when your browser loads the site or talks to our services, those providers receive standard request data such as IP address, browser type and time of request.

What we do not collect

• Your creations and inputs. Imported audio, voice recordings, camera recordings, uploaded images, cover art and video rendering are processed locally in your browser. They are not uploaded to or stored on our servers.
• Microphone and camera. Accessed only after you grant browser permission, only while you are recording, and processed on your device.
• Payment card details. Payments are handled entirely by Paddle, our Merchant of Record. We never receive your full card number. Paddle processes your billing details under the Paddle Privacy Policy.
• Advertising or analytics tracking. We do not currently use advertising trackers or third-party analytics.

How we use information

• Create and secure your account, sign you in and keep you signed in.
• Verify your subscription and unlock Premium features.
• Send account emails (sign-up confirmation, password reset) and essential service notices.
• Respond to support requests and prevent fraud or abuse.

We do not sell your personal information or share it for cross-context behavioral advertising.

Who we share it with

• Supabase — account, authentication and subscription database hosting.
• Paddle — checkout, payment, tax, invoicing, receipts and subscription management.
• Hosting and content-delivery providers — our website hosting provider, jsDelivr (Supabase script), Paddle CDN (checkout script), Fontshare (fonts). These receive standard request data when your browser loads files from them.
• Authorities — where required by law or to protect rights and safety.

Cookies and local storage

We use your browser's local storage to keep you signed in and remember app settings. Paddle may set cookies needed to run checkout and prevent fraud. We do not use advertising cookies.

Retention

We keep account and subscription records while your account is active and as needed for legal, tax and accounting obligations afterward. Paddle retains transaction records under its own policy. You can delete your account yourself from My Account → Delete account, or ask us to. Deletion removes your login and membership records from our systems, except records we must keep by law; Paddle keeps its own transaction records.

Your choices and rights

You can request access to, correction of, or deletion of your personal information by emailing durtyhandz2602@gmail.com. Depending on where you live (for example, California, the EU/UK or other U.S. states), you may have additional rights such as data portability or objecting to certain processing. We will not discriminate against you for exercising them.

Security

We use access controls, encrypted connections (HTTPS) and row-level security on our database. No system is perfectly secure; please use a strong, unique password.

Children

Sonic Canvas is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has created an account, contact durtyhandz2602@gmail.com and we will delete it.

International users

We are based in the United States. Our providers may process data in the U.S. and other countries.

Changes and contact

We will post updates here with a new effective date. Questions: durtyhandz2602@gmail.com · Inevitable Vision LLC, Pennsylvania, USA.