Privacy Notice

Stadium Builds LLC DBA Riffling ("we", "us") operates the Riffling service available at riffling.io. This notice explains what personal data we collect, why, and your rights. We act as the data controller for personal data collected through the service.

1. Data we collect

• Account data: email, display name, login credentials, authentication provider identifiers (e.g. Google).
• User content: tracks, layers, audio data, comments, likes, and other content you create or share.
• Usage & telemetry: pages visited, features used, performance metrics, IP address, device and browser information.
• Support data: messages you send us and the conversation history.

2. How we use it

• To create and operate your account (legal basis: contract performance).
• To provide the service, including hosting and serving your tracks (contract performance).
• To prevent fraud, abuse, and security incidents (legitimate interests).
• To improve the product through aggregate analytics (legitimate interests).
• To respond to support requests (contract performance).
• To comply with legal obligations (legal obligation).

3. Who we share data with

• Service providers / subprocessors: hosting, database, analytics, and support tooling providers acting on our instructions.
• Paddle.com as our Merchant of Record for the sale of subscriptions, payment processing, subscription management, tax compliance, and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

4. Retention

We keep personal data only as long as needed to provide the service or to comply with legal obligations. When data is no longer needed it is deleted or anonymised. You can request deletion of your account at any time.

5. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and regular review of our infrastructure.

6. Your rights

Subject to applicable law, you have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You can also withdraw consent where processing is based on consent. To exercise any of these, contact us at the address below.

7. International transfers

Where personal data is transferred outside your country, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

8. Cookies

We use essential cookies to keep you signed in and to operate the service. We may use analytics cookies to understand how the product is used. You can manage cookie preferences through your browser settings.

9. Contact

Questions about this notice? Contact Stadium Builds LLC DBA Riffling at support@riffling.io.