Privacy Policy

Who we are

Stratalynx ("we", "us") operates the Vayvara website and music platform from Singapore. This policy describes how we process personal data when you use the service, join the waitlist, or create an account. Paid checkout may be offered through our payment partner Paddle; see Paddle's privacy notice for data they process as checkout provider.

Data we collect

• Account & auth: email address, password (stored securely by our auth provider—we do not store your password in plain text), profile and artist information you choose to provide, and usage needed to run your account. If you use social sign-in (for example Google or Facebook), your auth provider shares profile identifiers and basic profile data according to the permissions you approve; our auth provider processes that on our behalf.
• Waitlist: email and any optional fields you submit on signup forms.
• Technical: basic logs and diagnostics (e.g. IP address, browser type, timestamps) as typical for hosting and security.

How we use data

To provide and improve the platform, verify artists and content, communicate with you about the service, comply with law, and protect Vayvara and our users. We do not sell your personal information.

Singapore (PDPA)

Where the Singapore Personal Data Protection Act 2012 (PDPA) applies, we collect, use, and disclose personal data for the purposes described in this policy. We rely on consent or another permitted basis under the PDPA where required. You may withdraw consent for uses that are consent-based, subject to contractual and legal limits. You may request access to or correction of personal data we hold about you, subject to exceptions in the PDPA. Contact us at support@vayvara.com. If you have concerns we cannot resolve, you may contact the Personal Data Protection Commission (PDPC). This summary does not replace the PDPA or subsidiary legislation.

Legal bases (EEA/UK)

Where GDPR applies, we rely on contract (providing the service you request), legitimate interests (security, product improvement), consent where required (e.g. certain emails), and legal obligation where applicable law.

Retention

We keep data only as long as needed for the purposes above or as required by law. You may request deletion of your account subject to legal retention needs.

Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object or port data. Contact us to exercise these rights. You may also lodge a complaint with your local data protection authority.

Processors & transfers

We use trusted infrastructure providers (for example database and authentication providers such as Supabase, email delivery such as Resend, hosting, and abuse protection tools) that may process data in the United States or other countries. We use appropriate safeguards where required. You may refine this list as vendors change; consider a policy generator after legal review for your jurisdictions.

Copyright & content

For how we handle copyright complaints and takedowns, see our copyright policy.

Children

Vayvara is not directed at children under 13 (or the age required in your region). Do not use the service if you are below that age.

Changes

We may update this policy from time to time. We will post the new date at the top or link to prior versions on request.

Contact

For privacy-related requests, including PDPA access or correction: support@vayvara.com. Operational email for this site may also use a SUPPORT_EMAIL environment variable in deployment so the inbox stays consistent.