Privacy Policy

1. The short version

We collect the absolute minimum needed to run an internet radio platform. We don't sell your data. We don't track you across the web. We use HTTPS everywhere. You can export your data or delete your account anytime via your Studio settings.

2. What we collect

• Account: email, name, optional profile picture, password (hashed with bcrypt, never stored in plaintext).
• Station data: station name, tagline, cover art, MP3 files you upload, schedule, Tip Jar URL.
• Listener analytics: anonymous listener counts, country code (from IP — not the IP itself), play timestamps. We do not log individual listening history.
• Referrals: a 6-char code per user + which user invited whom (to honor reward credits).
• Push notifications: the browser-issued subscription endpoint for stations you opted into.
• Support chat: the messages you send to the AI Support widget (used to give better answers in the same session).

3. What we DO NOT collect

• Your IP address (we keep only the 2-letter country code derived from it).
• Browsing history outside Fliboe.
• Phone number, address, or government ID.
• Tip Jar transaction details — those happen on PayPal / Cash App / Venmo, not on our servers.

4. Third parties

• Google OAuth (if you sign in with Google): your name, email, and avatar URL.
• OpenAI (for AI DJ + AI Support): short station/track snippets and your chat messages are sent to OpenAI to generate audio / replies. OpenAI states they don't train on API data.
• Cloudflare (CDN / edge): standard request logs at the edge.
• PostHog (product analytics): anonymous page-view and click events with no personal identifiers tied.

We never sell, rent, or share your personal data with advertisers or data brokers.

5. Cookies

One session cookie (HTTP-only, Secure, SameSite=None) to keep you signed in. Optional localStorage entries to remember your install-prompt dismissal, push subscription, and referral code. No third-party advertising cookies.

6. Your rights (GDPR / CCPA)

Wherever you live, you can:

• Export everything we have on you — Studio → Account → Export my data (JSON download).
• Delete your account and all associated stations / tracks / files — Studio → Account → Delete my account. Irreversible.
• Correct your name, email, password — Studio settings.
• Ask questions about your data via the AI Support chat at the bottom-right.

7. Data retention

We keep your data for as long as your account is active. When you delete your account, we purge user record, stations, tracks, MP3 files, and DJ voice drops within 7 days. Anonymous aggregate analytics may persist (e.g., total listener-minutes for that month). Daily admin backups are retained for up to 14 days.

8. Security

Passwords are hashed with bcrypt. JWTs are signed with HS256. All traffic is HTTPS. File uploads are stored in MongoDB GridFS on a managed Atlas cluster with encryption at rest.

9. Children

Fliboe is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe a child has signed up, contact us via support and we'll delete the account.

10. Contact

For data requests, privacy questions, or to report a concern, use the AI Support chat at the bottom-right of every page. A human team member reviews privacy escalations.