Privacy Policy

1. Introduction

Soultymedia SL ("we", "our", "us") operates the XS-4 Business Audio streaming service at xs-4.com. This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection law.

By using our website and services you agree to the collection and use of information as described in this policy.

2. Data We Collect

When you register for a subscription or contact us we may collect the following personal data:

• Full name and company name
• Email address
• Billing address (including country, city, postal code)
• VAT number (if applicable)
• Payment information — processed securely by Stripe (we do not store card details)
• Username and encrypted password
• IP address and browser information (collected automatically)

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide our service — managing your subscription and access to the streaming platform
• To process payments — via our payment processor Stripe
• To issue invoices — including royalty-free licence certificates required for your business
• To communicate with you — subscription confirmations, renewal reminders, support
• To comply with legal obligations — Spanish tax law, GDPR, and invoicing requirements

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance — processing is necessary to provide the subscription service you have purchased
• Legal obligation — we are required to retain invoicing and tax records under Spanish law
• Legitimate interest — to protect our service and communicate important account information

5. Data Sharing and Third Parties

We do not sell your personal data. We share data only with the following trusted third-party services required to operate our business:

• Stripe — payment processing (stripe.com/privacy)
• Zoho Books — invoicing and accounting (zoho.com/privacy)
• Bunny CDN — music file delivery (bunny.net/privacy)
• WordPress / MemberPress — website and membership management

All third-party processors are GDPR compliant and bound by data processing agreements.

6. Data Retention

We retain your personal data for as long as your subscription is active and for a minimum of 5 years after the end of your subscription to comply with Spanish tax and invoicing obligations. You may request deletion of your data subject to these legal retention requirements.

7. Your Rights

Under GDPR you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data (subject to legal retention obligations)
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest

To exercise any of these rights please contact us at rfm@xs-4.com. We will respond within 30 days.

8. Cookies

Our website uses cookies to ensure proper functionality, manage your login session and analyse website traffic. You can control cookie preferences through your browser settings. Essential cookies required for the service to function cannot be disabled.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. All payment processing is handled by Stripe using industry-standard encryption. Passwords are stored in encrypted form and are never accessible to us.

10. International Transfers

Some of our third-party processors may transfer data outside the European Economic Area. Where this occurs, appropriate safeguards are in place including Standard Contractual Clauses approved by the European Commission.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The date at the top of this page indicates when the policy was last updated.

12. Contact and Complaints

For any questions about this Privacy Policy or your personal data please contact us at rfm@xs-4.com.

If you believe we have not handled your data correctly you have the right to lodge a complaint with the Spanish data protection authority: Agencia Española de Protección de Datos (AEPD) at aepd.es.