Privacy Policy

Jubilujah.com (“Jubilujah,” “we,” “us,” or “our”), operated by Jubilee Software, Inc., provides a faith-centered music streaming and discovery experience. This Privacy Policy applies to the Jubilujah.com website and the services offered through it (the “Service”). By creating an account or using the Service, you agree to the practices described below.

1. Information We Collect

Information you provide

• Account details. When you sign up we collect your first and last name, date of birth, and email address. Your password is stored only in a securely hashed form — we never keep it in plain text.
• Content you create. Comments you post, star ratings you give, award nominations (and the reasons you provide), and the playlists you build are stored and associated with your account.
• Communications. If you contact us for support, we keep the messages and contact details you send so we can respond.

Information collected automatically

• Security & verification. To confirm your email and protect your account we generate one-time, 6-digit verification codes (used at sign-up and, when enabled, for two-step sign-in), and we record your “keep me signed in” preference.
• Technical & usage data. Like most websites, our servers automatically log information such as your IP address, browser type and user-agent, the pages you request, and the date and time of each request. This helps us operate, secure, and improve the Service.
• Cookies. We use the cookies described in Section 4 to keep you signed in and to protect requests against forgery.

Information from sign-in providers

If you choose to continue with JubileeInspire Single Sign-On (SSO), we receive basic profile information (such as your name and email address) from your JubileeInspire account so we can create or link your Jubilujah profile. Your Jubilujah and JubileeInspire accounts may be kept in sync as part of the Jubilee family of services.

2. How We Use Your Information

• Create and manage your account, authenticate you, and keep your session secure.
• Provide the core experience — streaming the catalog and saving your playlists, ratings, comments, and nominations.
• Send you service-related (transactional) email, such as verification codes, password-reset links, and important account or security notices.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Maintain, analyze, and improve the Service.
• Comply with legal obligations and enforce our terms.

We do not use your personal information to serve third-party advertising, and we do not sell your personal information.

3. Email Communications

The emails we send (verification codes, password resets, and security notices) are necessary to operate your account and are delivered on our behalf by a third-party email provider (currently SendGrid). These transactional messages are part of the Service and are not marketing email. If we ever introduce optional newsletters or promotional email, you will be able to opt out at any time.

4. Cookies and Similar Technologies

We rely on a small number of strictly necessary cookies; we do not use advertising or cross-site tracking cookies.

• Session cookies. Secure, HTTP-only cookies that keep you signed in as you move between pages.
• CSRF token cookie (jv_csrf). A security cookie used to protect form submissions and other actions against cross-site request forgery.
• Bot-protection. Our sign-in page may use Cloudflare Turnstile to tell humans from automated abuse; Cloudflare may set its own cookie for this purpose.

You can block or delete cookies in your browser settings, but disabling the essential cookies above will prevent you from signing in or using account features.

5. How We Share Information

We share personal information only in these limited situations:

• Service providers. Vendors who process data on our behalf and under our instructions — for example our email delivery provider (SendGrid), security and content delivery (Cloudflare), and our hosting infrastructure.
• The Jubilee family of services. If you use JubileeInspire SSO, account information is shared with JubileeInspire to provide and synchronize your single sign-on.
• Legal and safety. When we reasonably believe disclosure is required by law, legal process, or to protect the rights, property, or safety of our users, the public, or Jubilujah.
• Business transfers. In connection with a merger, acquisition, or sale of assets, in which case we will continue to protect your information consistent with this policy.

Public content you create (such as comments and ratings) may be visible to other users of the Service.

6. Data Retention

We keep your personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we remove your account and its associated data as described in Section 7, except where we are required or permitted by law to retain certain records.

7. Your Choices and Rights

• Access and update. You can view your sign-in email and update your password from your account page.
• Delete your account. You can permanently delete your account and its associated data at any time from the “Danger zone” on your account page. This action cannot be undone.
• Email. Transactional email is required to operate your account; any optional email will include an unsubscribe link.
• Regional rights. Depending on where you live (for example under the GDPR or CCPA/CPRA), you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain uses. To exercise these rights, contact us using the details below.

8. Data Security

We use technical and organizational safeguards designed to protect your information, including encryption of data in transit (HTTPS/TLS), hashed password storage, CSRF protection, and optional two-step verification. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.

9. Children's Privacy

While our catalog includes music made for children and families, the Service itself is intended for users who are old enough to maintain their own account. We do not knowingly collect personal information from children under the age of 13 (or the minimum age required in your jurisdiction). If you believe a child has provided us personal information, please contact us and we will take steps to delete it. Parents and guardians are encouraged to supervise children's use of the Service.

10. International Users

Jubilujah.com is operated from the United States. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate, which may have data protection laws different from those in your country.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Effective” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update takes effect means you accept the revised policy.

12. Contact Us

If you have questions or requests regarding this Privacy Policy or your personal information, contact us: