Privacy & Cookie Notice
This notice explains what personal information SOUNDDEX collects, how we use and protect it, and the choices you have. It is written to align with South Africa's Protection of Personal Information Act (POPIA).
Who we are
SOUNDDEX is a directory for South Africa's audio industry. For any privacy questions or requests, contact us at hello@sounddex.local.
What we collect
- Account information - your name, email address, and password. Passwords are stored only as a one-way hash; we can never see them.
- Listing & profile content - anything you publish to your directory listing (studio name, location, contact details, images, links, and page content).
- Usage analytics - aggregate views and clicks on your listing, plus coarse visitor signals (country and referring site). Visitor identifiers are stored only as a one-way hash.
- Payment information - handled entirely by our payment provider, Paystack. Card numbers never reach our servers; we only store Paystack reference tokens needed to manage your subscription.
Cookies
We keep cookies to a minimum. SOUNDDEX uses a single strictly-necessary cookie to keep you signed in (a secure, http-only session cookie). Your light/dark theme preference is stored in your browser's local storage, not a cookie.
We do not use advertising or third-party tracking cookies, so no cookie-consent opt-in is required to browse the site. If you make a payment, Paystack may set its own cookies on its checkout pages, governed by Paystack's privacy policy.
How we use your information
- To create and operate your account and listing.
- To process subscription payments and the optional featured add-on.
- To show you analytics about your listing's performance.
- To send essential account and billing emails.
- To receive and respond to support requests you submit.
Sharing with service providers
We never sell your personal information. We share it only with the service providers we rely on to operate SOUNDDEX, acting as our processors under POPIA:
- Paystack - payment processing. Card data is tokenised by Paystack and never reaches our servers.
- Atlassian (Jira Service Management) - our support ticketing system. If you submit a support request, your name and email address are sent to Atlassian to create the request and a corresponding support-portal contact record so our team can reply to you. Atlassian hosts this data on infrastructure outside South Africa, so this involves a cross-border transfer, carried out under Atlassian's data-processing terms. We share support data with Atlassian only when you choose to contact support - no support account is created otherwise.
How we protect it
- All traffic is served over HTTPS (encrypted in transit).
- Passwords are hashed; sensitive fields such as two-factor secrets and integration credentials are encrypted at rest.
- Card data is tokenised by Paystack - we never store it.
Data retention & your rights
Under POPIA you may request access to, correction of, or deletion of your personal information. You can delete your account at any time from Account → Delete account in your member dashboard; this cancels any active subscription and permanently erases your account, listings, and saved data, and removes your support-portal contact record from Atlassian. Some records may be retained by our payment provider where required for financial-compliance purposes.
Icon attribution
SOUNDDEX uses Phosphor Icons, an icon set made available under the MIT License. Phosphor Icons is copyright Phosphor Icons and its contributors.
Changes to this notice
We may update this notice from time to time. Material changes will be reflected on this page.