chord.gift Privacy Policy

Effective: 2026-05-13 Phase: Coming Soon. We only collect email and basic account data. No payment data, no shipping data, no AI content processing, no analytics tracking in v0.

1. What we collect

Email address (for launch notifications / Magic Link login)
Account profile (name and email from Google / Apple Sign-in if you use it)
Essential cookies (session, CSRF token, cookie-banner dismissal state)
IP-based country (read at request time for routing; not stored long-term)

2. What we DON'T collect in v0

Payment information (no Stripe / no commerce in Coming Soon)
Shipping addresses
Voice recordings / photos / chat logs (AI content features start in v1)
Behavioral or analytics tracking (Google Analytics is not running in v0; we may add it with a consent picker in v1)
Marketing or advertising cookies

3. Third-party processors (v0)

Processor	Purpose	Data shared
Auth.js (self-hosted on Cloudflare)	Login session	Email + provider profile
Resend	Magic Link + launch notification email delivery	Email address only
Google Sign-in (optional)	OAuth login	Name + email from your Google account
Apple Sign-in (optional)	OAuth login	Name + Apple Relay email
Cloudflare	Hosting, CDN, edge	IP at request time (not stored)

4. Your rights

Delete account: contact dylan@chord.gift; we anonymize within 7 days
Export data: contact dylan@chord.gift
Unsubscribe from launch emails: link in every email we send
Withdraw cookie consent: clear chord_cookie_consent_v1 from your browser storage (v0 only uses essential cookies; no analytics to withdraw)

5. AI processing (v1+)

chord plans to use AI for product personalization in v1 Commerce. v0 has no AI processing. We'll publish a separate privacy update before v1 that covers AI provider routing, data residency, and user rights.

6. Compliance

GDPR / CCPA / Singapore PDPA / Apple Sign-in privacy standards.

7. Contact

dylan@chord.gift — 10X AI Technology Pte Ltd, 6 Raffles Quay, #14-06, Singapore 048580