Privacy Policy

1. Information We Collect

When you join the Inner Circle we collect:

• Email address — required to send you updates and releases.
• Phone number — optional, collected only if you opt in to SMS notifications.
• Marketing consent — your explicit agreement to receive emails from us.
• SMS consent — your explicit agreement to receive text messages (only if provided).
• Referral source & campaign — which page or campaign you signed up from, so we can understand which content resonates with fans.

We also automatically collect the following when you visit the site:

• IP address — used for rate-limiting abuse prevention on the sign-up form. Stored server-side for up to 24 hours, then discarded.
• Browser user-agent string — stored in our fan database to detect bot submissions.
• Anonymous site analytics — page views and performance data via Vercel Analytics and Vercel Speed Insights. These tools do not use cookies or cross-site tracking identifiers. For full details see Vercel’s Analytics Privacy Policy.

2. How We Use Your Information

• Send you new music announcements, release drops, and exclusive content.
• Send SMS notifications if you opted in to text updates.
• Understand which content and campaigns drive fan signups.
• Prevent spam and abuse on the signup form.
• Improve the site’s performance and user experience.

We do not use your information for advertising targeting or sell it to third parties.

3. Third-Party Services

We share your data with the following processors:

• Supabase (supabase.com) — our database provider. Fan records including email, phone, and consent flags are stored on Supabase servers (US region).
• Resend (resend.com) — our email delivery provider. Your email address is passed to Resend to send welcome messages and future updates.
• Vercel (vercel.com) — our infrastructure provider. Anonymous analytics data (no PII) is processed by Vercel.
• YouTube & Google — the site embeds YouTube thumbnail images. When your browser loads these images, Google may receive your IP address.
• Google Fonts— the site loads the Inter typeface from Google’s font CDN. Google may receive your IP address during font loading.

We do not integrate Facebook Pixel, TikTok Pixel, Google Ads, or any behavioral advertising tracking.

4. Cookies & Tracking

This site does not use cookies for advertising or cross-site tracking. Vercel Analytics uses a privacy-preserving approach that does not require cookies or persistent identifiers. No tracking pixels are loaded.

5. Email Communications & Unsubscribe

If you joined the Inner Circle, you will receive occasional emails from Zuriel Xen. Every email includes an unsubscribe link. You can also request removal by emailing privacy@zurielxen.com. We will process your request within 10 business days.

6. Data Retention

Fan records are retained for as long as you remain subscribed. If you request deletion, we will remove your record from our database and request deletion from Resend within 30 days.

IP addresses used for rate limiting are held in memory for up to 24 hours and are never written to long-term storage.

7. Children’s Privacy (COPPA)

This site is not directed to children under 13 years of age. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected such information, please contact us at privacy@zurielxen.com and we will delete it promptly.

8. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, or sell.
• Delete your personal information (subject to certain exceptions).
• Correct inaccurate personal information.
• Opt out of sale or sharing of your personal information. We do not sell or share your personal information.
• Non-discrimination — we will not discriminate against you for exercising any of your rights.

To exercise these rights, email us at privacy@zurielxen.com. We will respond within 45 days as required by California law.

We do not sell or share your personal information with third parties for cross-context behavioral advertising.

9. Security

We use HTTPS for all data in transit. Our database is hosted on Supabase with row-level security policies that restrict access to authorized personnel only. Admin access to the site requires authentication.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date at the top of this page. Your continued use of the site after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy? Contact us at:

privacy@zurielxen.com