Privacy policy

1. Who we are

ryser.id is operated by Ryser (Ryan Poser), Groenlingstraat 12, 1706 BL Heerhugowaard, the Netherlands (KVK 86346512, VAT NL004231102B27). ryser.id identifies the tracks in DJ sets and mixes. For anything related to your data, contact [email protected].

2. What we collect

• Account data: email address, username and optional profile image, managed through our authentication provider Clerk, and the choices you make about our emails (what you chose and when, and where you chose it).
• Content you submit: URLs of sets you analyze, audio files you upload, the resulting setlists, edits, setlists you build, comments, likes and bookmarks.
• Billing data: your plan, credit balance and payment history. Card details are handled entirely by Stripe; we never see or store them.
• Referral data: if you create your account through someone's referral link, we store which account referred you, the reward status, and a small set of abuse signals (for example whether both accounts came from the same source). The person who referred you sees only that a referral was made and its status, never your e-mail address or name.
• Technical data: IP address, browser information, page analytics (Vercel Analytics, cookieless aggregation), product analytics (PostHog, EU-hosted, cookieless) and, only after your consent, session recordings (all keyboard input masked) and error reports (Sentry).

3. Why, and on what legal basis

• Providing the service (contract): analyzing your sets, storing your results, playback, exports, the API.
• Billing (contract & legal obligation): payments, invoices, tax records.
• Service emails (contract): mails about your own sets (a set that is ready, failed or stopped at your minutes, and the result of a search you asked for), receipts and billing alerts. Most of these you can switch off in your account preferences; receipts are part of the purchase.
• Tips, letters and product news (the rule for existing customers in article 11.7, paragraph 4 of the Dutch Telecommunications Act, which implements article 13(2) of the ePrivacy Directive): news about ryser.id and its plans, tips for using it, and short letters from its maker, only about our own service and only because you have an account with us. You can refuse them at any time and at no cost: every one of these emails has a one-click unsubscribe and a link that stops all of them, your account preferences switch them off, and the sign-up on a phone offers the choice before your account exists. Refusing changes nothing about the service. When you switch them on yourself, we record that choice.
• Security & abuse prevention (legitimate interest): rate limiting, logging, fraud prevention.
• Referral programme (contract, and legitimate interest for the abuse checks): linking a referred account to the referrer and paying out rewards, as described in the terms.

4. Audio and recognition

To identify tracks, short fragments of the audio you submit are sent to third-party audio recognition services. These fragments are used solely for recognition. Audio from platform URLs (YouTube, SoundCloud, Mixcloud) is processed transiently and deleted after analysis; playback streams from the original platform. Files you upload yourself are stored for 7 days on the free plan, or for as long as you are on a paid plan (Opener, Headliner or Studio).

When you play a set from YouTube, it plays in YouTube’s own player through the YouTube API Services, and Google receives data about that playback under the Google Privacy Policy.

5. Who receives your data

We use a small set of processors, each bound by data-processing agreements:

• Clerk (authentication, US) · Stripe (payments, US/EU) · Vercel (web hosting, US/EU) · Neon (database, EU region) · Cloudflare (storage & networking) · Resend (email delivery, US) · PostHog (product analytics & session recordings, EU region) · recognition providers (audio fragments only).

Where processors are outside the EEA, transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses. We never sell your data.

6. How long we keep it

• Account & setlist data: until you delete your account; deletion removes your runs, setlists, comments and credits immediately and permanently.
• Uploaded audio: 7 days on the free plan, or as long as you are on a paid plan.
• Platform-URL audio: deleted right after analysis.
• Billing records: 7 years (Dutch tax law).
• Server logs & error reports: up to 90 days.

8. Your rights

Under the GDPR you can request access, correction, deletion, portability of your data, object to processing based on legitimate interest, and withdraw consent at any time. Deleting your account from the account page exercises the right to erasure directly. For anything else, email [email protected]; we respond within 30 days.

You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

9. Children

ryser.id is not directed at children under 16. We do not knowingly process their data.

10. Changes

We may update this policy; material changes are announced by email or in the app. The date at the top always reflects the current version.