--- title: "Privacy Policy | Groove Guru" description: "How Groove Guru collects, uses, and protects your data. GDPR compliant. Learn about cookies, your rights, and how to contact us." lang: en json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "name": "Groove Guru", "url": "https://grooveguru.lovable.app/", "logo": "https://grooveguru.lovable.app/favicon.png", "description": "Vinyl intelligence platform: marketplace search, pressing verification and fair-market-value tools for collectors." }, { "@context": "https://schema.org", "@type": "LocalBusiness", "name": "Groove Guru", "url": "https://grooveguru.lovable.app/", "email": "info@grooveguru.nl", "address": { "@type": "PostalAddress", "streetAddress": "Loolaan 41-76", "addressLocality": "Apeldoorn", "addressCountry": "NL" }, "vatID": "NL005425491B66", "description": "Vinyl marketplace search and collector intelligence tools." }, { "@context": "https://schema.org", "@type": "WebSite", "name": "Groove Guru", "url": "https://grooveguru.lovable.app/", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://grooveguru.lovable.app/search?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "SoftwareApplication", "name": "Groove Guru Floor", "applicationCategory": "BusinessApplication", "operatingSystem": "Web, iOS, Android", "url": "https://grooveguru.lovable.app/business", "description": "Point of sale, inventory, consignment and channel sync for record shops and professional vinyl sellers.", "offers": [ { "@type": "Offer", "name": "Groove Lite", "price": "29.95", "priceCurrency": "EUR" }, { "@type": "Offer", "name": "Groove Standard", "price": "69.00", "priceCurrency": "EUR" }, { "@type": "Offer", "name": "Groove Pro", "price": "129.00", "priceCurrency": "EUR" } ] } ] --- [![Groove Guru logo](/assets/groove-guru-logo-mobile-BLlDv6oQ.png)POS & Inventory Vinyl sellers & Record stores ![Groove Guru logo](/assets/groove-guru-logo-mobile-BLlDv6oQ.png)POS & Inventory Vinyl sellers & Record stores ](/business) BusinessConsumer [Home](/business)[Features](/business/features)[Prices](/subscription)[Tools](/tools)[About](/about)[Contact](/contact) [Sign In](/auth) [Back to Home](/) # Privacy Policy Last updated: March 19, 2026 Groove Guru ("we", "us", or "our") operates [grooveguru.nl](https://grooveguru.nl). We are committed to protecting and respecting your privacy. This policy explains what personal data we collect, why we collect it, how we store and protect it, and your rights under the General Data Protection Regulation (GDPR) and other applicable data-protection laws. Data Controller Cyrazz Digital Solutions (sole proprietorship / eenmanszaak) KVK: 42001435 · VAT: NL005425491B66 Loolaan 41-76, 7314AD Apeldoorn, The Netherlands Email: [support@grooveguru.nl](mailto:support@grooveguru.nl) ## 1\. Data We Collect ### Account information When you create an account we collect your **email address** and, optionally, a **display name**. ### Usage data We record search queries you perform, the sites you enable or disable, saved items, wishlist entries, collection data you add, and general interaction metrics (e.g. search count per month). ### Technical data Standard web-server logs may include your IP address, browser type, operating system, referral URL, and pages visited. These are used solely for security, diagnostics, and aggregated analytics. ### Payment data If you subscribe to a paid tier, payment processing is handled by a third-party provider (Stripe). We do **not** store your credit-card number or full payment details on our servers. Stripe acts as an independent data controller for payment data. ### Marketing consent If you opt in during registration, we record your consent to receive marketing communications, along with the date and time of consent. ## 2\. Why We Collect It (Legal Bases) We process your data for the following purposes, each with a specific legal basis under GDPR Article 6: - To provide and personalise the search and collection-tracking service. Contract - To authenticate your account and manage your subscription tier. Contract - To save your preferences, searches, and collection data across sessions. Contract - To monitor and enforce usage limits (e.g. free-tier search caps). Legitimate interest - To improve the platform through aggregated, anonymised analytics. Legitimate interest - To communicate important service updates or respond to support requests. Legitimate interest - To send optional marketing or feature announcements. Consent - To comply with legal obligations and prevent fraud or abuse. Legal obligation ## 3\. How We Store & Protect Your Data Your data is stored on servers located **within the European Union (EU)**, ensuring compliance with GDPR data-residency requirements. The infrastructure uses a secure, managed cloud database with encryption at rest and in transit (TLS). Access to the database is restricted to authorised services via row-level security policies and API-key authentication. We do **not** transfer your personal data outside the EU/EEA. Should this ever change, we will update this policy and ensure appropriate safeguards (e.g. Standard Contractual Clauses) are in place before any transfer occurs. Passwords are never stored in plain text; authentication is handled via industry-standard hashing and token-based sessions. ## 3.5 Consignor & Customer Sensitive Data **Fields we are responsible for.** The dedicated _name_, _email address_ and _phone number_ fields for consignors and customers are provided and secured by Groove Guru. Consignor email addresses and phone numbers are **encrypted at rest** and can only be retrieved by the account owner through access-controlled server-side functions; the encryption key is not accessible to client applications. Groove Guru accepts responsibility, including liability, for the secure storage and processing of data entered in these dedicated fields. **Fields you are responsible for.** We do **not** collect or store home addresses or bank account numbers (IBAN/BIC) of consignors or customers. If a user voluntarily enters address or banking information in free-text notes, agreement text, or any other field not intended for it, that user acts as an independent data controller for those entries and assumes full liability. Groove Guru is not responsible for the security, accuracy, or lawful processing of such voluntarily entered data. **Current safeguards.** The Platform shows a fixed notice when a new consignor or customer record is created, and actively screens free-text notes fields for patterns resembling addresses or bank account numbers, warning the user before saving. These are supportive measures and do not transfer liability for data entered outside the dedicated fields. ## 4\. Data Retention Periods We retain personal data only as long as necessary for the purposes described in this policy: Data type Retention period Account & profile data Until account deletion + 30 days Search history & usage logs Until account deletion (deleted immediately) Collection, wishlist & saved items Until account deletion (deleted immediately) Marketing consent record 30 days after account deletion Server/security logs 90 days (rolling) Payment transaction records 7 years (Dutch fiscal obligation, Art. 52 AWR) Cookie consent preference Browser local storage (you control) When you delete your account, all personal data listed above is purged according to these schedules. You can delete your account at any time from your [account settings](/settings). ## 5\. Cookies We use a small number of **strictly necessary** cookies and local-storage items. We do **not** use any tracking, analytics, or advertising cookies. Cookie / storage item Type Purpose Session token Essential Keeps you logged in across page visits. cookie\_consent Essential Remembers whether you accepted or declined our cookie notice. Preference storage Functional Stores UI preferences (currency, enabled sites) locally in your browser. Since we only use essential and functional cookies (no tracking or profiling), explicit consent is not legally required under Dutch telecommunications law (Art. 11.7a Tw). We still show a cookie notice for transparency. You can clear cookies at any time via your browser settings. ## 6\. Your Rights (GDPR) Under the GDPR and equivalent regulations, you have the right to: - **Access:** Request a copy of the personal data we hold about you. - **Rectification:** Ask us to correct inaccurate or incomplete data. - **Erasure:** Request deletion of your personal data ("right to be forgotten"). You can delete your account from Settings. - **Restriction:** Ask us to restrict processing of your data in certain circumstances. - **Portability:** Receive your data in a structured, machine-readable format. - **Objection:** Object to processing based on legitimate interests. - **Withdraw consent:** Where processing is based on consent, withdraw it at any time without affecting prior processing. To exercise any of these rights, contact us at [support@grooveguru.nl](mailto:support@grooveguru.nl). We will respond within 30 days. ## 7\. Contact & Complaints If you have questions or concerns about this privacy policy or our data practices, please reach out: **Support & complaints:** [support@grooveguru.nl](mailto:support@grooveguru.nl) If you are unsatisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority: [Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl)](https://www.autoriteitpersoonsgegevens.nl). If you reside outside the Netherlands, you may also contact the supervisory authority in your country of residence. ## 8\. Third-Party Sub-Processors In accordance with GDPR Article 28, we use the following key sub-processors to deliver our service: - **Supabase Inc.:** Cloud database and authentication (EU data region — Frankfurt, Germany). - **Stripe Inc.:** Payment processing for subscriptions (certified PCI-DSS Level 1). - **Strato AG:** Email hosting services (EU-based, Germany). All sub-processors are bound by data-processing agreements that ensure GDPR-compliant handling of personal data. We will update this list if sub-processors change. ## 9\. Changes to This Policy We may update this privacy policy from time to time. When we make material changes we will notify registered users by email or through a notice on the platform. The "Last updated" date at the top of this page reflects the most recent revision. [Back to Home](/) © 2026 Groove Guru , by [![Cyrazz Digital Solutions](/img/cyrazzlogo.jpg) Cyrazz Digital Solutions](https://www.cyrazzdigitalsolutions.com) . All rights reserved. · CoC 42001435 · VAT NL005425491B66 · [info@grooveguru.nl Mail ](mailto:info@grooveguru.nl) · [Legal](/legal) · [ToS Terms of Service ](/terms) · [Privacy policy](/privacy) · [News](/news) · [Cancel subscription](/manage-subscription#cancel) This application uses Discogs' API but is not affiliated with, sponsored or endorsed by Discogs. “Discogs” is a trademark of Zink Media, LLC. Market data is retrieved in part through the eBay APIs. eBay is a trademark of eBay Inc.; Groove Guru is not affiliated with, sponsored or endorsed by eBay Inc. Price and listing information is provided for reference only, is not stored beyond what the eBay API Licence Agreement permits, and may differ from the data shown on eBay. We use essential cookies to keep you logged in and remember your preferences. We do not use tracking or advertising cookies. [Cookie details](/privacy#cookies) Decline allAccept all