PRIVACY POLICY
Last updated July 3, 2026
This Privacy Notice for Parcel Tunes (doing business as Parcel) ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
- Download and use our mobile application (Parcel Tunes), or any other application of ours that links to this Privacy Notice
- Use Parcel Tunes, a music-sharing application that allows users to make and follow communal playlists
- Engage with us in other related ways, including any sales, marketing, or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@parcel.social.
SUMMARY OF KEY POINTS
This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by using our table of contents below to find the section you are looking for.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
Do we process any sensitive personal information? Some of the information may be considered "special" or "sensitive" in certain jurisdictions. We do not process sensitive personal information.
Do we collect any information from third parties? When you connect your Spotify account, we receive profile information from Spotify (see "How do we handle your Spotify connection?" below). We do not buy or collect personal information about you from data brokers or marketing partners.
How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, send push notifications, manage Spotify playlists on your behalf, analyze usage, and ensure security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties, including our service providers and (where you connect it) Spotify. We do not sell your personal information or share it for advertising.
How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission or storage technology can be guaranteed to be 100% secure.
What are your rights? Depending on where you are located, applicable privacy law may mean you have certain rights regarding your personal information.
How do you exercise your rights? The easiest way is by contacting us at support@parcel.social. We will consider and act upon any request in accordance with applicable data protection laws.
TABLE OF CONTENTS
- WHAT INFORMATION DO WE COLLECT?
- HOW DO WE PROCESS YOUR INFORMATION?
- WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
- WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
- DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
- HOW DO WE HANDLE YOUR SPOTIFY CONNECTION?
- HOW LONG DO WE KEEP YOUR INFORMATION?
- HOW DO WE KEEP YOUR INFORMATION SAFE?
- DO WE COLLECT INFORMATION FROM MINORS?
- WHAT ARE YOUR PRIVACY RIGHTS?
- CONTROLS FOR DO-NOT-TRACK FEATURES
- DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
- DO WE MAKE UPDATES TO THIS NOTICE?
- HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
- HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the Services, participate in activities on the Services, or otherwise when you contact us. The personal information we collect may include:
- names (your display name / username)
- email addresses
- passwords
- authentication data
- mobile phone number — only if you choose to opt in to SMS messages from us (see Terms §24). Parcel does not collect a phone number at signup or require one to use the app.
Sensitive Information. We do not process sensitive information.
Spotify connection. Parcel lets you connect your Spotify account. When you do, we collect certain Spotify profile information — see "How do we handle your Spotify connection?" (§6) below.
Application Data. If you use our application(s), we may also collect the following:
- Mobile Device Data. We automatically collect device information (such as your device model, operating system and version, and device identifiers) for analytics, crash reporting, and troubleshooting.
- Push Notifications. We may request to send you push notifications regarding your account or Parcel deliveries. To deliver these, we store a push token for your device. If you wish to opt out, you can turn them off in your device's settings.
Parcel does not request access to your contacts, Bluetooth, SMS, location, camera, or photo library.
Information automatically collected
In Short: Some information is collected automatically when you use our Services.
When you use the app, our analytics and error-monitoring tools (see §5) record diagnostic and usage information such as feature interactions, in-app events, device and operating-system information, and crash reports. We use this to operate, secure, and improve the Services.
Other than the Spotify profile information you authorize when you connect Spotify (see §6), we do not collect personal information about you from third-party sources, data brokers, or marketing partners.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
We process your personal information for a variety of reasons, including:
- To facilitate account creation and authentication and otherwise manage user accounts.
- To deliver and facilitate delivery of services to the user.
- To enable user-to-user communications (for example, the member chat within a Parcel).
- To send push notifications about your account and Parcel deliveries.
- To manage Spotify playlists on your behalf — creating and updating the Spotify playlist for a Parcel you belong to, and following it on your behalf, using the permissions you granted.
- To analyze usage and monitor errors so we can operate, secure, and improve the Services.
- To save or protect an individual's vital interest, such as to prevent harm.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill our legitimate business interests.
If you are located in the EU or UK, the GDPR and UK GDPR require us to explain the valid legal bases we rely on to process your personal information. We may rely on the following: Consent (which you can withdraw at any time); Performance of a Contract (to provide our Services); Legal Obligations (to comply with law); and Vital Interests (to protect someone's safety).
If you are located in Canada, we may process your information where you have given express or implied consent. You can withdraw your consent at any time. In some exceptional cases we may be permitted by law to process your information without your consent (for example, for fraud detection and prevention, or where required by law).
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
In Short: We may share information in the specific situations described below.
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- Other Parcel members. Parcel is a group product. Within a Parcel you join, other members and followers can see your display name and profile, the songs you contribute when a delivery is made, and the messages you post in that Parcel's member chat. Information you share inside a Parcel is visible to the other people in that Parcel.
- Service providers (processors). We share information with vendors who process it on our behalf under contract, solely to run the Services: Supabase (database, authentication, and hosting), PostHog (product analytics), and Sentry (crash and error monitoring). Access and refresh tokens are excluded from analytics and error logs.
- Spotify. When you connect Spotify, we interact with Spotify's API on your behalf to read your profile and to create, update, and follow Parcel playlists. Your use of Spotify is governed by Spotify's own terms and privacy policy.
We do not sell your personal information and do not share it with third parties for advertising or marketing purposes.
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
In Short: We do not use cookies or advertising trackers. We use limited analytics and error-reporting tools within the app.
Parcel is a mobile application and does not use cookies, web beacons, advertising pixels, or third-party advertising trackers. We use two software development kits within the app for operational purposes only: PostHog (product analytics — which features are used, in-app events) and Sentry (crash and error reporting). We do not use these for advertising and do not sell or share the data they collect.
6. HOW DO WE HANDLE YOUR SPOTIFY CONNECTION?
In Short: If you connect your Spotify account, we receive and store certain Spotify profile information to power music features.
Parcel lets you connect your Spotify account to enable music search, playback hand-off, and Parcel playlists. Spotify is a music-service connection only — you do not log in to Parcel using Spotify.
When you connect Spotify, we receive and store: your Spotify user ID, your Spotify display name, the email on your Spotify account, your subscription tier (e.g., Premium or Free) and country, and the list of permissions (scopes) you granted. Your Spotify access and refresh tokens are stored encrypted and are never exposed to other users.
We use this information to: identify your Spotify account, create and update the Spotify playlist for a Parcel you belong to, follow that playlist on your behalf, and search the Spotify catalog when you queue a song. You can disconnect Spotify at any time. Spotify's own use of your information is governed by Spotify's terms and privacy policy.
7. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law.
When you delete your account, we deactivate and remove your account profile. However, songs you contributed and messages you posted in a Parcel remain part of that Parcel's shared history in a de-identified form (no longer linked to your account), so the Parcel's record stays intact for the other members. We may also retain limited information as needed to prevent fraud, resolve disputes, enforce our terms, or comply with legal obligations.
8. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system of organizational and technical security measures.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. You should only access the Services within a secure environment.
9. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under age 18, please contact us at support@parcel.social.
10. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: Depending on your state or region of residence (such as the EEA, UK, Switzerland, and Canada), you have rights that allow you greater access to and control over your personal information.
In some regions you have certain rights under applicable data protection laws, which may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict the processing of your personal information, (iv) where applicable, to data portability, and (v) not to be subject to automated decision-making. You can make such a request by contacting us using the details in §14.
Withdrawing your consent: If we are relying on your consent, you have the right to withdraw it at any time by contacting us.
Account Information: If you would like to review, change, or terminate your account, you can log in to your account settings, or contact us. You can delete your account directly in the app (Profile → Delete account) or, including after you have uninstalled the app, request deletion at parcel.social/delete-account. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases, subject to the retention described in §7.
11. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate. No uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals. If a standard is adopted that we must follow in the future, we will inform you in a revised version of this Privacy Notice.
12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
In Short: If you are a resident of certain US states, you may have rights to access, correct, or delete your personal information.
Categories of Personal Information We Collect
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Contact details such as name, alias, unique personal identifier, online identifier, IP address, email address, account name | YES |
| B. Personal information as defined in the California Customer Records statute | Name, contact information | YES |
| C. Protected classification characteristics | Gender, age, race, national origin, etc. | NO |
| D. Commercial information | Transaction, purchase history, payment information | NO |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or other similar network activity | Interactions with our application | YES |
| G. Geolocation data | Device location | NO |
| H. Audio, electronic, sensory, or similar information | Images and audio/video recordings | NO |
| I. Professional or employment-related information | Business contact details, job title, work history | NO |
| J. Education Information | Student records | NO |
| K. Inferences drawn from collected personal information | Profile reflecting preferences/characteristics | NO |
| L. Sensitive personal information | — | NO |
We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months, and we will not sell or share personal information in the future.
Your Rights. You have rights under certain US state data protection laws, including the right to know whether we are processing your personal data; to access it; to correct inaccuracies; to request deletion; to obtain a copy; and to non-discrimination for exercising your rights. To exercise these rights, contact us at support@parcel.social.
Request Verification. Upon receiving your request, we will need to verify your identity. We will only use personal information provided in your request to verify your identity or authority to make the request.
13. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date. If we make material changes, we may notify you either by prominently posting a notice or by directly sending you a notification.
14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may email us at support@parcel.social or contact us by post at:
Parcel Tunes 1449 South Michigan Ave STE 13226 Chicago, IL 60605, United States
15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
You have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. You can delete your account and its associated personal information directly in the app (Profile → Delete account) or by submitting a request at parcel.social/delete-account. To request to review, update, or otherwise delete your personal information, please email us at support@parcel.social.