Radio Mania SaaS Platform — Operated by SC MOVING RECORDS SRL

Last updated: 2026.02.21

This Privacy Policy explains how SC MOVING RECORDS SRL ("Provider", "we", "us", or "our") collects, uses, stores, and protects data in connection with the Radio Mania SaaS Platform, including the associated iOS and Android mobile applications powered by the Platform.

SC MOVING RECORDS SRL
Registered office: Alba Iulia, Alba, Romania
CUI (Tax ID): RO36516097

1. SCOPE OF THIS POLICY

1.1 This Privacy Policy applies to:
(a) Clients — businesses, radio stations, or individuals who purchase and manage a subscription to the Radio Mania SaaS Platform via the dashboard;
(b) End Users — individuals who use a mobile application (iOS or Android) powered by the Radio Mania Platform on behalf of a Client.

1.2 The Radio Mania Platform operates as a multi-tenant SaaS backend. Each Client is independently responsible for the privacy practices of their own application and End Users. Clients must publish their own privacy policy to their End Users.

2. DATA WE COLLECT

2.1 Data collected from Clients (dashboard users):

- Full name and/or company name
- Email address
- Billing address and country
- Payment information (processed by Stripe — we do not store card details)
- Plan and subscription details
- IP address and browser/device information for security purposes
- Dashboard activity logs

2.2 Data collected from End Users (via the mobile app):

- Anonymous device identifier (for app personalization and analytics)
- Firebase Authentication data if the End User signs in (email address,
  display name, profile photo URL, UID) — collected only if the Client
  has enabled Firebase Auth
- Favorites and preferences stored in the app (radio stations, podcasts)
- Push notification tokens (for sending notifications, if enabled)
- General usage analytics (screens visited, features used) — via Firebase
  Analytics, anonymized and aggregated
- IP address (for stream delivery and general security)

2.3 Data we do NOT collect:
- Precise geolocation
- Contacts, call logs, or messages
- Health or financial information
- Biometric data

3. HOW WE USE DATA

3.1 Client data is used to:
- Provision and manage the Client's subscription and dashboard access
- Process billing and payments via Stripe
- Provide technical support
- Send service-related communications (billing, updates, maintenance)
- Comply with legal obligations

3.2 End User data is used to:
- Deliver the audio streaming service (radio, podcasts, audiobooks)
- Personalize the app experience (favorites, preferences)
- Send push notifications (if the End User has consented)
- Analyze aggregate usage to improve the Platform
- Maintain platform security

3.3 We do not sell, rent, or trade personal data to third parties for marketing purposes.

4. LEGAL BASIS FOR PROCESSING (GDPR)

For individuals in the European Economic Area (EEA), we process personal data under the following legal bases:

- Contract performance: Processing necessary to fulfill the subscription agreement with Clients.
- Legitimate interests: Analytics, fraud prevention, platform security, and service improvement.
- Consent: Push notifications and optional analytics tracking by End Users.
- Legal obligation: Where required by applicable law (e.g., accounting, tax records).

5. THIRD-PARTY SERVICES

The Radio Mania Platform integrates with the following third-party services that may process data:

5.1 Firebase (Google LLC)
- Used for: Authentication (optional), Cloud Firestore (favorites sync), Push Notifications (FCM), Analytics
- Privacy policy: https://firebase.google.com/support/privacy

5.2 Stripe, Inc.
- Used for: Payment processing and subscription billing
- Privacy policy: https://stripe.com/privacy

5.3 Google AdMob (Google LLC)
- Used for: In-app advertising (on Client apps that have ads enabled)
- Privacy policy: https://policies.google.com/privacy
- Note: AdMob may collect device identifiers and usage data for ad targeting. Clients using AdMob must disclose this in their own app's privacy policy and comply with Apple App Store and Google Play Store requirements.

5.4 Apple Sign In / Google Sign In
- Used for: Optional End User authentication in the mobile app
- Privacy policies: https://www.apple.com/legal/privacy / https://policies.google.com/privacy

5.5 App Distribution (Apple App Store / Google Play Store)
- The mobile application powered by the Radio Mania Platform may be distributed through the Apple App Store (iOS) and/or Google Play Store
(Android). Each platform has its own data practices:
- Apple: https://www.apple.com/legal/privacy
- Google: https://policies.google.com/privacy

5.6 Web Hosting / Server Infrastructure
- Client and End User data is hosted on servers located within the EU or with appropriate data transfer safeguards in place.

We have no control over the privacy practices of these third-party providers and encourage you to review their respective privacy policies.

6. DATA RETENTION

6.1 Client account data is retained for the duration of the active subscription and for up to 30 days after account termination, after which it is permanently deleted unless retention is required by law (e.g., tax records may be retained for up to 5 years as required under Romanian and EU accounting law).

6.2 End User data (favorites, push tokens) is retained while the End User's account is active within the Client's app. Deletion follows the Client's own retention policy.

6.3 Analytics data (aggregated, anonymized) may be retained indefinitely as it cannot be used to identify individuals.

7. DATA SECURITY

7.1 We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure.

7.2 Measures include:
- Encrypted data transmission (HTTPS/TLS)
- API key authentication for all tenant API requests
- JWT tokens for End User authentication with expiry limits
- Access controls limiting dashboard access to authenticated Clients
- Regular security review of the Platform codebase

7.3 No system is 100% secure. In the event of a data breach that is likely to result in a risk to individuals' rights and freedoms, we will notify affected parties and relevant authorities as required by applicable law (within 72 hours under GDPR Article 33).

8. YOUR RIGHTS (GDPR AND APPLICABLE LAW)

If you are a Client or End User located in the EEA (including Romania), you have the following rights regarding your personal data:

- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate data.
- Right to erasure ("right to be forgotten"): Request deletion of your data, subject to legal retention obligations.
- Right to restriction: Request that we limit how we use your data.
- Right to data portability: Receive your data in a machine-readable format.
- Right to object: Object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us using the details in Section 11.
We will respond within 30 days.

You also have the right to lodge a complaint with the Romanian supervisory authority:
ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal)
Website: www.dataprotection.ro

9. COOKIES AND TRACKING

9.1 The Radio Mania dashboard (web interface) may use session cookies strictly necessary for authentication and security. No third-party advertising or tracking cookies are used on the dashboard.

9.2 The mobile applications (iOS and Android) powered by the Platform may use:
- Firebase Analytics SDK (anonymized usage analytics)
- AdMob SDK (if enabled by the Client — may use device identifiers for ads)

9.3 End Users can opt out of personalized advertising through their device settings:
- iOS: Settings > Privacy & Security > Tracking
- Android: Settings > Google > Ads > Opt out of Ads Personalization

10. INTERNATIONAL DATA TRANSFERS

10.1 Some third-party services (Firebase, Stripe, AdMob) may process data outside the European Economic Area (EEA). Where such transfers occur, we rely on:
- EU Standard Contractual Clauses (SCCs), or
- Adequacy decisions by the European Commission, or
- The provider's own certification (e.g., EU-US Data Privacy Framework)

10.2 By using the Platform, Clients and End Users acknowledge that their data may be transferred internationally as described above.

11. CONTACT AND DATA CONTROLLER INFORMATION

The data controller for personal data collected via the Radio Mania SaaS
Platform is:

SC MOVING RECORDS SRL
Alba Iulia, Alba, Romania
CUI (Tax ID): RO36516097

For privacy-related inquiries, data subject requests, or to exercise your rights under GDPR, please contact us at the support email address: [email protected]

We aim to respond to all privacy-related requests within 30 calendar days.

12. CHANGES TO THIS PRIVACY POLICY

12.1 We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

12.2 We will notify Clients of material changes via email or dashboard notification at least 14 days before the changes take effect.

12.3 The "Last updated" date at the top of this document will always reflect the most recent revision.