Privacy Policy

SoundTrail is operated by RPOOL, LLC. This policy explains what we collect and why.

What we collect

Artists: name, email, username, password hash, SoundCloud account link (id + OAuth tokens), payout bank details, uploaded audio/covers, social links.

Fans (gate visitors): SoundCloud id + username when you connect to unlock a gate, your email when a gate requires it, and the actions you completed. OAuth tokens for fans are held only in your browser session and are never stored on our servers.

Buyers: email + name + order details. Card data is handled by Stripe and never touches our servers; QRIS payments are verified against GoPay merchant history (amount + time only).

How we use it

To run gates, charts, the marketplace, payments, and to send transactional email (receipts, password resets, gate alerts). Artists see the emails/usernames of fans who unlocked their gates — that's the point of the service.

What we never do

We never sell your data, never post to your SoundCloud beyond the gate actions you trigger, and never store card numbers.

Cookies

We use session cookies (login, gate progress) only — no ad trackers.

Retention & deletion

Fan unlock records are kept while the gate is live. Email us at support@rpool.id to export or delete your data; account deletion removes your gates, tracks, and stored tokens.

Security

Passwords are bcrypt-hashed, files live in private object storage (Wasabi S3, ap-northeast-1) with expiring signed URLs, and payment events use signature-verified webhooks.

Contact: support@rpool.id — RPOOL, LLC.