Privacy Policy

• Operate the Service — process ratings, generate rankings, display content, maintain your account
• Improve the Service — analyze usage patterns, fix bugs, optimize performance
• Personalize your experience — remember preferences like theme settings and followed artists
• Communicate — send essential service notifications (account verification, security alerts). No marketing emails without explicit opt-in
• Ensure security — detect and prevent fraud, abuse, rating manipulation, and unauthorized access
• Comply with law — respond to legal processes and enforce our Terms of Service

We do not sell, rent, or trade your personal information to third parties.

• Public profile: your display name, ratings, and submitted content are visible to other users
• Service providers: trusted third-party services process data on our behalf under contractual obligation
• Legal requirements: we may disclose information if required by law or to protect rights, property, or safety
• Business transfers: in the event of a merger or acquisition, users will be notified before their data becomes subject to a different policy

Your data is stored on Supabase (PostgreSQL), a cloud database platform with enterprise-grade security.

• Row-Level Security (RLS): database policies ensure users can only access their own data
• Encryption: data encrypted in transit (TLS/HTTPS) and at rest
• Authentication: passwords hashed using bcrypt — never stored in plaintext
• Access controls: administrative access is restricted and monitored

While we take reasonable measures to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

• Supabase — database hosting, authentication, and storage
• Google OAuth — optional sign-in method (receives name, email, and profile photo)
• Spotify Web API — publicly available artist and track metadata, popularity scores
• Netlify — website hosting and deployment
• Google Analytics (GA4) — anonymized website usage analytics

Each third-party service has its own privacy policy. We encourage you to review them.

• Essential cookies: required for authentication sessions and security — cannot be disabled
• Local storage: stores your theme preference (light/dark mode) — never leaves your device

We use Google Analytics (GA4) to understand how visitors interact with the site. GA4 collects anonymized usage data and does not use advertising cookies or participate in cross-site tracking or retargeting.

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your data ("right to be forgotten")
• Data portability — request your data in a structured, machine-readable format
• Objection — object to processing of your data in certain circumstances
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at contact@aimcharts.com. We will respond within 30 days.

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us immediately.

Your information may be transferred to and processed in countries other than your country of residence, including countries that may not provide the same level of data protection. By using the Service, you consent to such transfers. We take appropriate safeguards to ensure your data is treated securely.

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law. Anonymized and aggregated data (e.g., total rating counts) may be retained indefinitely.

We may update this Privacy Policy from time to time. If we make material changes, we will notify registered users via email or a prominent notice on the Service prior to the changes taking effect. Your continued use constitutes acceptance of the updated policy.