This policy explains what data humroom collects, how it is used, and your rights. Greycloud LLC is the data controller.
Information We Collect
Account Information
When you sign up as a creator, Supabase Auth processes your email address and manages authentication sessions. humroom stores your chosen handle, display name, and legal-acceptance record.
Public Content
Creator profiles, room names, track metadata, and uploaded audio files are publicly accessible. This is the content you choose to share through your Humroom.
Infrastructure Data
Vercel hosts the application and stores uploaded audio files through Vercel Blob. Ably provides realtime communication and assigns anonymous presence identifiers during live sessions. These providers process connection-level data including IP addresses as part of their service delivery.
AI Prompt Processing
When you use the AI prompt generation feature, your prompt text is sent to OpenRouter for processing. Prompts are not stored by humroom beyond what you choose to save as track metadata.
Browser Preferences
humroom stores player preferences (volume, sleep timer state) in your browser's localStorage. These are not transmitted to our servers.
Analytics
With your consent, humroom uses PostHog Cloud EU for anonymous product analytics. PostHog assigns an opaque persistent identifier to your browser. We collect listening events and room visits to understand how the service is used. We explicitly strip URLs, referrers, and user-provided text from analytics events. Hosts may see aggregate listener metrics on their creator dashboard. You can manage or withdraw consent at any time through the Analytics choices link in the room footer. Analytics data is retained for up to one year.
Infrastructure Logs
Our hosting and database providers maintain infrastructure logs for operational purposes. These logs may include IP addresses and timestamps processed at the provider level. humroom does not extract or store these logs for analytics or profiling.
How We Use Information
Account information is used to provide and secure your Humroom, enforce our Terms, and communicate service updates. Public content powers the rooms and player that visitors access. Analytics data helps us understand usage patterns and improve the service.
Data Processors
humroom relies on the following data processors to operate the service:
- Supabase— authentication, database, and session management.
- Vercel— application hosting and blob storage.
- Ably— realtime communication and presence.
- OpenRouter— AI prompt processing for music generation suggestions.
- PostHog Cloud EU— consent-based product analytics, hosted in the European Union.
Data Transfers
Our primary infrastructure providers operate globally. Supabase, Vercel, and Ably may process data in data centers across multiple regions. PostHog analytics data is processed exclusively in the EU. By using humroom, you acknowledge that your data may be transferred and processed in these locations.
Data Retention
Account and content data is retained for as long as your account is active. Deleted content is removed from active storage within a reasonable period, subject to backup retention. Analytics data is retained for up to one year on PostHog Cloud. Infrastructure logs are retained according to each provider's policies.
Security
humroom uses encryption in transit and at rest through our infrastructure providers. We restrict access to personal data to authorized personnel and enforce authentication for all account-related operations.
Your Rights
You have the right to access, correct, export, or delete your personal data. To exercise these rights, contact legal@humroom.com. We will verify your identity before processing your request and will respond within one month.
Contact
For privacy-related questions or to exercise your data rights, contact legal@humroom.com.