LyricTimestamps.com

Privacy Notice

Last updated: June 5, 2026

1. Who we are

This Privacy Notice describes how Micaiah Mackenzie, a sole proprietor doing business as LyricTimestamps.com ("we", "us", "our"), collects, uses, and shares personal data when you visit the website, create an account, or use the Service. For the purposes of data protection law (including the EU/UK GDPR), we act as the data controller of the personal data described below, except where we explicitly state another party is the controller.

2. Personal data we collect

  • Account data: email address, display name, avatar URL, and the authentication provider you sign in with (e.g. Google).
  • Service content: the audio files and lyrics you upload, the settings you choose, the resulting timestamp output, and processing metadata such as job status and duration.
  • Subscription and order data: plan, status, billing period, and a reference to your customer record at Paddle. Card details and full billing address are collected and stored by Paddle, not by us.
  • Usage and technical data: IP address, device and browser information, pages viewed, actions taken, timestamps, error logs, and similar telemetry collected via cookies or server logs.
  • Support communications: the content of messages you send us and metadata about those exchanges.
  • Anonymous trial identifier: a random identifier stored in your browser's local storage and cookies to enforce the free under-60-second trial without an account.

3. How we use personal data

  • To provide the Service, including running alignment jobs and delivering exports.
  • To create and authenticate your account.
  • To manage subscriptions, enforce usage limits, and respond to support requests.
  • To detect, prevent, and investigate fraud, abuse, and security incidents.
  • To improve and debug the Service, including aggregate analytics and error monitoring.
  • To send essential service emails (e.g. receipts, account changes, important notices).
  • To comply with legal obligations and enforce our Terms.

4. Legal bases for processing (EU/UK)

  • Performance of a contract: providing the Service to you, managing your account, and processing transactions.
  • Legitimate interests: securing the Service, preventing abuse, measuring usage to improve features, and operating our business — balanced against your rights.
  • Legal obligation: meeting tax, accounting, and other regulatory requirements.
  • Consent: where required, for non-essential cookies or marketing communications. You can withdraw consent at any time.

5. Who we share personal data with

We share personal data with the following categories of recipients, only as needed:

  • Paddle.com Market Limited and its affiliates ("Paddle"), our Merchant of Record. Paddle processes payments, manages subscriptions, calculates and remits sales taxes, issues invoices, and handles refunds and chargebacks. Paddle acts as an independent controller of the payment data it collects. See Paddle's Privacy Notice.
  • Hosting and infrastructure providers (database, file storage, edge/compute, email delivery) that process data on our behalf under written agreements.
  • Authentication providers you choose to sign in with (e.g. Google), which process limited profile data under their own terms.
  • Analytics and error-monitoring tools used to keep the Service reliable, configured to minimize personal data.
  • Professional advisors (legal, accounting) under duties of confidentiality.
  • Authorities or third parties where disclosure is required by law, to enforce our Terms, or to protect rights, property, or safety.

We do not sell personal data.

6. International transfers

We are based in the United States and our service providers may process data outside your country, including in the US and the EU. Where data is transferred from the UK or EEA to a country without an adequacy decision, we rely on appropriate safeguards such as the Standard Contractual Clauses (and the UK Addendum where relevant).

7. Data retention

We keep personal data only as long as needed for the purposes above. Uploaded audio and generated outputs are processed to fulfill your job and deleted or anonymized when they are no longer required to provide or improve the Service. Account data is kept while your account is active and for a reasonable period afterward to handle disputes and comply with legal obligations. Order and tax records held by Paddle and by us are retained for the periods required by applicable tax and accounting law (typically up to 10 years).

8. Your rights

Subject to applicable law (including the GDPR/UK GDPR and US state privacy laws such as the CCPA/CPRA), you may have the right to:

  • access the personal data we hold about you and receive a copy;
  • request correction of inaccurate or incomplete data;
  • request deletion of your data ("right to erasure");
  • request restriction of, or object to, certain processing;
  • request portability of data you provided to us, in a structured format;
  • withdraw consent where we rely on consent, without affecting prior processing;
  • lodge a complaint with your local supervisory authority (in the UK, the ICO; in the EU, your member-state authority).

To exercise these rights, use our contact page. We will respond within the period required by law (usually one month).

9. Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit (HTTPS), access controls, authentication safeguards, isolated database access via row-level security, and least-privilege practices for internal access. No system can be guaranteed 100% secure; you are responsible for keeping your account credentials safe.

10. Cookies and local storage

We use a minimal set of cookies and browser storage:

  • Essential: session and authentication, free-trial enforcement, and preventing abuse. These are required for the Service to function.
  • Analytics: aggregated usage data to understand how the Service is used and to fix problems.
  • Payment provider: Paddle may set cookies during checkout to process your transaction. See Paddle's privacy notice for details.

You can control cookies through your browser settings; disabling essential cookies may break parts of the Service.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to this Notice

We may update this Notice from time to time. When we do, we will revise the "Last updated" date and, for material changes, take additional steps to notify you (such as an in-app message or email).

13. Contact

Controller: Micaiah Mackenzie, doing business as LyricTimestamps.com. Reach us via the contact page for any privacy questions or to exercise your rights.