1. Commitment to EU Data Privacy
At Soundalike, we hold the highest commitment to the privacy and security of our global community of creators, artists, and producers. This document outlines your specific statutory rights under the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR" / Polish: "RODO").
2. The Data Controller (Administrator Danych Osobowych)
The entity determining the purposes and means of processing personal data is:
3. Core Principles of Processing
Data is processed lawfully, fairly, and in a transparent manner in relation to the data subject. No deceptive or hidden profiling mechanisms.
We only collect data strictly necessary for our music workspace and marketplace operations. Soundalike Mobile requires zero microphone or camera permissions.
Personal data is retained only as long as needed to fulfill the contractual purpose or to satisfy Polish statutory accounting requirements.
All communications and file transfers are safeguarded with TLS/HTTPS 256-bit encryption. Database clusters in MongoDB Atlas are encrypted at rest.
4. Your Comprehensive GDPR Rights
- Right of Access (Article 15 GDPR): You may request a complete export of all data stored in connection with your account.
- Right to Rectification (Article 16 GDPR): You have the right to modify incorrect profile information at any time via your user dashboard.
- Right to Erasure ("Right to be Forgotten", Article 17 GDPR): You may initiate permanent account deletion directly through our settings or via soundalike.io/delete-account.
- Right to Restriction of Processing (Article 18 GDPR): You have the right to request restriction of processing while data accuracy is contested.
- Right to Data Portability (Article 20 GDPR): You may request an export of your saved rhymes, custom order history, and preferences in JSON format.
- Right to Object & Automated Decisions (Articles 21 & 22 GDPR): You may opt out of our algorithmic music taste modeling at any time in Settings → Privacy & Data → Taste Profiling.
5. Lodging a Complaint with the Supervisory Authority
If you consider that the processing of your personal data infringes the GDPR, you have the statutory right under Article 77 of the GDPR to lodge a formal complaint with the competent supervisory authority:
6. Submitting a GDPR / RODO Request
To exercise any of the rights enumerated above, simply send an email from your registered account address to: