Privacy Policy

ShineX Technologies ("Company", "we", "us"), based in Quebec, Canada, is committed to protecting your personal information in accordance with the Act respecting the protection of personal information in the private sector (Quebec), as amended by Law 25, and all other applicable privacy legislation.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our SiriusXM royalty tracking platform ("Service").

In accordance with Law 25, we have designated a person responsible for the protection of personal information:

Information you provide directly

• Account information — first name, last name, email address
• Payment information — billing details processed securely by Stripe (we do not store credit card numbers)
• Artist selections — the artists you choose to track on the platform
• Communications — messages you send through our support or feedback channels

Information collected automatically

• Usage data — pages visited, features used, interaction timestamps
• Technical data — IP address, browser type, operating system, device identifiers
• Cookies and similar technologies — see Section 7 below

We collect and use your personal information only for the following specific purposes, with your consent where required:

• Providing, maintaining, and improving the Service
• Creating and managing your user account
• Processing payments and managing subscriptions
• Sending transactional notifications (verification emails, password resets, billing confirmations)
• Sending service alerts and updates (only with your explicit consent)
• Responding to your inquiries and providing customer support
• Analyzing aggregated usage patterns to improve the platform
• Complying with legal obligations

We will not use your personal information for purposes other than those stated above without first obtaining your consent.

By creating an account and using the Service, you consent to the collection, use, and disclosure of your personal information as described in this Policy.

You may withdraw your consent at any time by contacting our Privacy Officer at hello@shinex.co. Withdrawal of consent may affect your ability to use certain features of the Service.

We may share your personal information with the following third-party service providers who assist us in operating the Service:

• Stripe (United States) — payment processing
• Amazon Web Services (United States / Canada) — cloud hosting and storage
• Postmark (United States) — transactional and notification emails
• PostHog (United States) — product analytics and session recordings
• Google (United States) — website analytics and Google sign-in
• Anthropic (United States) — our AI-assisted in-app support

These service providers are contractually obligated to protect your personal information and to use it only for the purposes for which it was disclosed.

We do not sell, rent, or trade your personal information. We may disclose your information if required by law, court order, or to protect our legal rights.

We use the following types of cookies:

• Essential cookies — required for the Service to function (authentication, session management, security). These cannot be disabled.
• Functional cookies — remember your preferences such as language and display settings.

We do not use advertising cookies. You can refuse third-party analytics cookies through our cookie banner, and you can manage all cookies through your browser settings.

Some of our service providers are located outside Quebec and Canada, including in the United States. When your personal information is transferred outside Quebec, we ensure that it receives equivalent protection through contractual agreements, in accordance with Quebec privacy law.

Before any transfer, we conduct a privacy impact assessment to verify that the personal information will receive adequate protection in the receiving jurisdiction.

We retain your personal information only for as long as necessary:

• Account data — retained while your account is active and up to 1 year after deletion
• Payment records — retained for 7 years (tax and accounting obligations)
• Usage and technical data — retained for up to 2 years
• Support communications — retained for up to 3 years

After the applicable retention period, your personal information is destroyed or anonymized.

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication with hashed passwords
• Access controls limiting data access to authorized personnel
• Regular security reviews

In the event of a confidentiality incident (data breach) that presents a risk of serious harm, we will notify the Commission d'accès à l'information du Québec and affected individuals as required by law.

Under Quebec privacy law (Law 25), you have the following rights:

• Right of access — request to know what personal information we hold about you
• Right to rectification — request correction of inaccurate or incomplete information
• Right to deletion — request deletion of your personal information, subject to legal retention obligations
• Right to withdraw consent — withdraw your consent at any time
• Right to data portability — request a copy of your information in a structured, commonly used format
• Right to be informed — know about any automated decision-making that applies to you

To exercise any of these rights, contact our Privacy Officer at hello@shinex.co. We will respond within 30 days.

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on the Service at least 30 days before the changes take effect.

If you believe we are not handling your personal information in accordance with the law, you have the right to file a complaint with:

For any privacy-related questions or to exercise your rights: