AVEDOX.com

Privacy Policy

1. Controller

AVEDOX LLC
254 Chapman Rd, Ste 208 #27468
Newark, Delaware 19702, USA

Email: avedox@outlook.de

(Placeholder — will be updated before launch)

Data Protection Officer: PLACEHOLDER_DSB_NAME — avedox@outlook.de

2. Data Collected and Purposes

2.1 Registration & Login

When you register or log in via one of the following services, we collect your name, email address, and profile picture (if provided by the service):

  • Google (Google LLC, USA)
  • Discord (Discord Inc., USA)
  • Twitch (Twitch Interactive Inc., USA)
  • Email & Password (stored encrypted)

Legal basis: Art. 6(1)(b) GDPR (performance of contract).

2.2 Platform Usage

During platform use, we process song requests, session data, and user preferences. This data is necessary for providing the service.

Legal basis: Art. 6(1)(b) GDPR.

2.3 Payments

Payments are processed entirely via Stripe, Inc. (185 Berry Street, San Francisco, CA 94107, USA). We do not store credit card data. Stripe is certified under the EU-US Data Privacy Framework. More information: Stripe Privacy Policy.

Legal basis: Art. 6(1)(b) GDPR.

2.4 Real-Time Communication

For live song queue updates, we use Pusher Ltd. (160 Old Street, London, EC1V 9BW, UK). Connection data (IP address, session ID) is temporarily transmitted. More information: Pusher Privacy Policy.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating the service).

2.5 Spotify Integration

When you link your Spotify account as a creator, we collect an OAuth access token and your Spotify user ID. These are used exclusively to control playback and are not shared with third parties. More information: Spotify Privacy Policy.

Legal basis: Art. 6(1)(a) GDPR (consent).

2.6 Viewers

Viewers who submit song requests can do so as a guest or with an account. We collect the following data:

  • Display name (freely chosen or taken from OAuth service)
  • Email address (on account registration)
  • IP address (technically necessary, not stored permanently)
  • Song request content (title, artist, platform link)
  • Payment data for paid requests (name, amount, transaction ID — processed via Stripe)

Legal basis: Art. 6(1)(b) GDPR (performance of contract) for paid requests; Art. 6(1)(f) GDPR (legitimate interest) for free requests. Song request data is deleted at the end of the session or archived after a maximum of 90 days.

3. Hosting

The platform is hosted on servers operated by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). Hetzner processes technically necessary connection data (IP address, timestamps). A data processing agreement pursuant to Art. 28 GDPR is in place.

Legal basis: Art. 6(1)(f) GDPR.

4. Cookies & Session Data

We use only technically necessary cookies for authentication (NextAuth.js session cookie). No tracking or advertising cookies are set. No separate consent is therefore required.

Legal basis: Art. 6(1)(f) GDPR.

5. Disclosure to Third Parties

Your data is not sold or shared with third parties for advertising purposes. Data is only transferred where necessary for the performance of the contract (Stripe, Pusher, Hetzner) or where you have expressly consented (Spotify).

Some of these third-party providers are based in the USA. The transfer is based on standard contractual clauses (Art. 46 GDPR) or the EU-US Data Privacy Framework.

6. Retention Periods

Personal data is deleted as soon as it is no longer needed for the purpose for which it was collected. Account data is deleted promptly upon account deletion. Payment records are retained in accordance with statutory retention periods (generally 7 years).

7. Your Rights

You have the right to:

  • Access your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)

Please direct requests to: avedox@outlook.de

You also have the right to lodge a complaint with a supervisory authority.

8. Changes to This Policy

We reserve the right to update this privacy policy as needed. The current version is always available on this page.

Last updated: April 2026