Privacy policy

Version 2026-10-05. In force from 2026-10-05.

In short

• The data controller is UAB SNDM (Soundium). Questions: market@soundium.com.
• We collect only what we need for accounts, listings, chats, payments, shipping, fraud prevention and legal requirements (tax, accounting).
• We don't sell data and we don't use advertising cookies. We use our own analytics (no outside tools) only with your consent.
• Data is processed by our service providers (Stripe, Supabase, Cloudflare, Resend, DPD, Google, Apple, GitHub, Anthropic and others). The list is in section 5.
• You can get a copy of your data, correct it, delete your account (in the app or website settings or by writing to market@soundium.com) and complain to the Lithuanian State Data Protection Inspectorate.

1. Controller

UAB SNDM, company code 307138245, T. Ševčenkos g. 18, LT-03111 Vilnius, Lithuania. Email market@soundium.com, phone +370 601 61620. We have not appointed a data protection officer; for data questions write to the same address.

This policy applies to the Market websites and the Soundium Market app.

2. What data we collect and why

Some decisions are made automatically: the “Trusted seller” badge (using the criteria in section 9 of the Terms of use), hiding contact details in chats, flagging risky messages, holding payments and new listings for checks. Reports and disputes are handled by the Soundium team; some actions (rejecting a report, hiding a listing or review, a warning) may be taken by an automated tool supervised by a person. A person suspends accounts and decides about money. You can ask for any decision to be reviewed by a person — write to market@soundium.com.

3. Who sees your data

• Other members see your profile, listings, ratings, public behaviour signals and the messages you send them.
• The seller, after payment, sees the buyer's name, phone and delivery address — only to ship or hand over the item.
• The service provider sees the customer's name and the booked service, time and place. If the provider subscribes to the Market calendar link (iCal) in their calendar, the bookings with the customer's name, place, address and note also reach their calendar service (e.g. Google, Apple or Outlook).
• The Soundium team sees as much as needed for disputes, reports, payment checks and support. For this it also uses an AI assistant (Anthropic Claude), which can read cases, orders, member data and reports.
• Authorities — when the law requires it (e.g. VMI under DAC7).

4. How long we keep data

When you delete your account: your listings (except sold ones) are removed from Market; your favourites, settings, analytics events (also those of the browsers you were signed in on), blocks, saved sender addresses, follows and waitlist entries are deleted; your provider page is deleted together with its services, team, working hours and calendar data (busy times, calendar address and link); open offers are cancelled, and the address is deleted from unpaid offers and orders; your profile name becomes “Deleted account”, and your photo, bio, city, phone and links are cleared; sign-in is closed and your email is replaced; the app device ID is replaced with its hash, and the push token is deleted.

What stays: paid orders and receipts (for accounting), sold listings, ratings, messages, photos and videos you sent to others, dispute cases and their files, content reports, service bookings (with the customer's name, place and note), packaging photos, serial numbers entered for listings, the IP address recorded with an order's payment, the Soundium team's flags and account suspensions, tax (DAC7) data, the device ID hash, technical events, your Stripe customer and payout accounts (at Stripe), the payout bank account marker and its last 4 digits, the deletion record, and backups for up to 56 days.

You can't delete your account while you have unfinished orders or rentals, or while a buyer can still report a problem with an order that has been paid out (48 hours after the payout).

5. Service providers (data processors)

When data is transferred outside the EEA, we rely on a European Commission adequacy decision (e.g. the EU-US Data Privacy Framework) or standard contractual clauses.

6. Your rights

You can:

• get a copy of your data;
• correct inaccurate data (you can change some of it yourself in your profile);
• delete your account in the app or website settings or by writing to market@soundium.com, and ask us to delete your data;
• restrict processing or object to processing based on legitimate interest;
• get your data in a portable format;
• ask for a decision made automatically to be reviewed by a person;
• withdraw consent at any time (analytics: “Cookie settings” at the bottom of the page or in your account settings; news notifications can be turned off in settings, location permission in your phone settings).

Write to market@soundium.com. We reply within 1 month.

7. Complaints

If you think we process data unlawfully, you can contact the Lithuanian State Data Protection Inspectorate: L. Sapiegos g. 17, 10312 Vilnius, ada@ada.lt, vdai.lrv.lt.

8. Cookies

Essential cookies are always on; analytics cookies only with your consent. See the Cookie policy.

9. Changes

We tell you about significant changes by email and on Market. Every version has a date.