What we collect, what we don't.

What we store

We store record metadata — timestamps, cryptographic fingerprints, and the user-provided information necessary to create and verify records. Account holders also have an email address and hashed password stored.

What we do not store

Uploaded files are processed to generate a fingerprint and are not retained. Only the record data — the fingerprint, timestamp, and any user-provided metadata — is kept. Files are never publicly exposed or shared.

Use of data

Data is used solely to provide and improve the Lyricsmit service. We do not sell, license, or share your data with third parties for marketing purposes.

Third-party services

We use trusted providers to operate the service: Stripe (payments), Resend (transactional email), and Replit/PostgreSQL (hosting and database). These providers process data only as needed to deliver the service. We do not sell your data.

Retention

Saved records are kept for as long as your account is active. Temporary upload previews expire after 24 hours. Account data is retained until you request deletion.

Your rights

You may request access to, correction of, or deletion of your account data at any time by contacting lyricsmitjje@hotmail.com. We will respond within a reasonable timeframe.

Security

Because your files are never stored, there is nothing to expose. What we do hold — account email, hashed password, and record metadata — is stored with encrypted connections and passwords are one-way hashed and never readable, even by us.