1.Introduction
BrownKits ("BrownKits", "we", "us" or "our") operates the website brownkits.com and the BrownKits platform, a digital music library offering royalty-free sounds, loops, samples and sample packs to music producers and creators through subscription and credit-based access (the "Service").
This Privacy Policy explains what information we collect when you use the Service, how we use it, who we share it with and the choices you have. By creating an account or using the Service you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Service.
If you have any question about this policy, contact us at support@brownkits.com.
2.Information We Collect
We collect only the information needed to operate the Service, deliver the sounds you license and keep your account secure. It falls into four groups:
- Information you give us directly — when you register, sign in, update your profile, contact support or make a purchase.
- Information received from Google — if you choose to sign in with Google (see section 4).
- Transaction information — created when you subscribe, buy credits or unlock a sound.
- Technical and usage information — generated automatically as you browse, search, preview and download.
We do not knowingly collect special categories of personal data (such as health, religious or biometric data), and the Service does not ask for them.
3.Account Information
When you create a BrownKits account with an email address and password we store:
- your name and email address;
- a cryptographically hashed version of your password (we never store or can see your actual password);
- your account status, role (for example customer or administrator), currency preference and the dates you registered and last signed in;
- the verification status of your email address and any email-verification or password-reset tokens we issue, which expire automatically.
Your email address is used to sign you in, to send account emails (verification, password reset, download notices) and to contact you about your account. You can update your name, password and currency preference from your account settings.
4.Google Sign-In / OAuth
You may choose to sign in to BrownKits with your Google account. If you do, Google asks for your consent and then shares with us only the basic account information required for authentication:
- your name;
- your email address (and whether Google has verified it);
- your basic profile information, including your profile image where Google provides one.
We use this information to authenticate you, to create your BrownKits account (or link the sign-in to an existing account registered with the same email address), to manage your account and to provide the Service. Your BrownKits profile image is taken from the image Google provides.
BrownKits requests only the standard "openid", "email" and "profile" sign-in scopes. We do not request or receive access to your Google Drive, Gmail, Contacts, Calendar, YouTube or any other Google data. We never receive your Google password. You can review or revoke BrownKits' access to your Google account at any time from your Google Account security settings (Third-party apps & services). Google's handling of your data is governed by the Google Privacy Policy.
5.Payment and Subscription Information
Payments for subscriptions and credit packs are processed by third-party payment providers, currently Razorpay for payments in Indian Rupees (INR) and, where offered, Stripe for payments in US Dollars (USD). When you pay, you enter your card, UPI, net-banking or wallet details directly with the payment provider through its secure checkout.
BrownKits does not receive, store or process your full card number, CVV, banking credentials or UPI PIN. The payment provider handles these under its own privacy policy and security standards.
What BrownKits does keep is a record of each transaction so we can deliver what you paid for and support you: the plan or credit pack purchased, the amount, currency, discount and any coupon code applied, the payment status, the payment provider's reference identifiers (such as an order, payment or subscription ID), and the status and renewal dates of your subscription. Payment providers may also send us confirmations ("webhooks") about successful, failed or cancelled payments, which we verify and record.
6.Purchases and Credit Transactions
BrownKits operates a credit system. To keep your balance accurate and auditable we keep:
- your credit wallet, including subscription credits and separately purchased credits, and whether the wallet is temporarily frozen (for example while a subscription is paused or a payment is overdue);
- a credit ledger recording every credit movement — allocations, renewals, rollovers, purchases, sound unlocks and any adjustment made by our support team, together with the reason for an adjustment;
- your entitlements — the sounds you have unlocked, when, at what credit cost and under which version of the BrownKits license;
- your download history — which files you downloaded and when;
- your favorites, collections and recently played sounds, which power your personal library.
These records are necessary to perform our contract with you, to allow free re-downloads of sounds you have already unlocked, to resolve billing questions and to prevent abuse of the credit system.
7.Website Usage and Technical Information
When you use the Service we automatically generate certain technical information:
- Server logs and security data — your IP address and the time of requests are used to protect sign-in and registration against brute-force attacks and abuse (for example, repeated failed login attempts are counted per IP address and email address and temporarily locked).
- Product usage events — such as which sounds you previewed, which packs you viewed, which filters you used, and when you signed up or signed in. These are associated with your account when you are signed in and are used to improve the catalog, show trending content and understand how the Service is used.
- Search queries — the terms you search for and whether they returned results, used to improve search quality and our taxonomy.
- Administrative audit logs — if you are an administrator, actions you take in the admin panel are recorded.
- Analytics and performance tools — our hosting platform may provide analytics and session-analytics tooling that records page views, interactions and technical performance to help us detect errors and improve the Service.
We do not use this information to build advertising profiles and we do not sell it.
9.How We Use Information
We use the information described above to:
- create, secure and manage your account and authenticate you (including via Google);
- provide the Service — browsing, searching, previewing, unlocking and downloading sounds, and maintaining your library;
- process subscriptions, credit purchases and credit transactions, and keep accurate billing and credit records;
- send transactional emails such as email verification, password reset and download notices;
- respond to your support requests;
- detect, prevent and investigate fraud, abuse, unauthorized sharing of licensed files and security incidents;
- understand how the Service is used so we can improve the catalog, search and user experience;
- comply with legal obligations, including tax and accounting rules; and
- enforce our Terms of Service and the BrownKits royalty-free license.
Where applicable law requires a legal basis, we rely on the performance of our contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations and, where relevant, your consent.
10.Service Providers and Necessary Data Sharing
We do not sell your personal information. We share it only with service providers that help us operate the Service, and only to the extent necessary:
- Payment providers (Razorpay; Stripe where offered) — to process payments and subscriptions.
- Google — when you choose to sign in with Google.
- Cloud hosting and database infrastructure — the platform that runs the BrownKits application and database.
- Cloud file storage (Amazon Web Services S3) — stores the audio files you preview and download; downloads are delivered through short-lived, signed links generated for your account.
- Email delivery provider — sends our transactional emails to you.
- Analytics and error-monitoring tooling — as described in section 7.
These providers process data on our behalf and under their own security and privacy commitments. We may also disclose information if required by law, regulation, legal process or a government request; to enforce our Terms and protect the rights, property or safety of BrownKits, our users or the public; or in connection with a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information. Some providers may process data outside your country; where they do, we rely on their contractual and legal safeguards.
11.Data Security
We take reasonable technical and organizational measures to protect your information, including:
- passwords stored only as salted cryptographic hashes;
- authentication cookies marked Secure and HttpOnly and transmitted over HTTPS;
- protection against brute-force sign-in attempts and request-rate limits;
- cross-site request forgery and cross-origin protections on authenticated actions;
- role-based access controls and audit logs for administrative functions;
- master audio files kept in private cloud storage, encrypted at rest and delivered only through short-lived signed links tied to your entitlement;
- verification of payment-provider signatures on all payment notifications.
No system is completely secure. If we become aware of a breach affecting your personal information we will notify you and the relevant authorities where required by law.
12.Data Retention
We keep your information for as long as your account is active and as long as needed for the purposes described in this policy. In particular:
- account information is retained until your account is deleted;
- transaction, subscription, credit-ledger and entitlement records are retained for as long as needed to provide re-downloads, resolve disputes and meet tax, accounting and legal obligations, which may require retention after account closure;
- email-verification and password-reset tokens expire automatically;
- security logs and usage events are retained for a limited period necessary for security and analytics purposes.
Where information is no longer needed we delete it or anonymize it.
13.User Rights
Depending on where you live, you may have rights under applicable data-protection law, including the right to:
- access the personal information we hold about you;
- correct inaccurate or incomplete information (you can update your name, password and currency preference in account settings);
- request deletion of your information (see section 14);
- object to or request restriction of certain processing;
- receive a copy of information you provided to us in a portable format;
- withdraw consent where processing is based on consent; and
- lodge a complaint with your local data-protection authority.
To exercise any of these rights, email support@brownkits.com from the email address registered to your account. We may need to verify your identity before acting on a request.
14.Account and Data Deletion Requests
You may request deletion of your BrownKits account and associated personal information at any time by emailing support@brownkits.com from your registered email address with the subject "Account deletion".
When we delete an account we remove or anonymize your profile information, library data (favorites, collections, recent plays) and usage events. We may retain transaction, credit-ledger, entitlement and download records in a form that no longer identifies you, or where we are legally required to keep them (for example for tax and accounting purposes or to document license grants). Deleting your account ends any active subscription benefits and forfeits remaining credits; you may wish to cancel an active subscription before requesting deletion.
If you signed in with Google, you may also revoke BrownKits' access from your Google Account settings; this does not by itself delete your BrownKits account.
15.Children's Privacy
The Service is intended for music producers and creators and is not directed to children under the age of 13 (or the higher minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact support@brownkits.com and we will delete it promptly.
16.Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to the Service, our practices or legal requirements. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, we will take reasonable steps to notify you (for example by email or a notice within the Service). Your continued use of the Service after a change takes effect means you accept the updated policy.
17.Contact Information
For questions, requests or complaints about this Privacy Policy or our handling of your information, contact:
BrownKits Website: brownkits.com Email: support@brownkits.com
Questions about this document?
BrownKits · brownkits.com