Privacy Policy

1. Introduction

Welcome to SongBiz ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our music marketing platform at songbizpro.com.

By using SongBiz, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and authentication credentials (via Google OAuth)
• Profile Information: Artist name, bio, location, social media handles, photos
• Music Content: Song titles, Spotify URLs, audio files, cover art
• Campaign Data: Playlist curator contacts, email content, campaign preferences
• Payment Information: Processed securely through Stripe (we do not store payment card details)

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies, preference cookies, analytics cookies
• Analytics: Campaign performance metrics, email open rates, click tracking

2.3 Third-Party Data

• Spotify Data: Artist profiles, song metadata, playlist information (via Spotify API)
• Social Media: Public profile information from Instagram, TikTok, YouTube (when provided)
• Email Verification: Contact validation through Hunter.io and similar services
• AI-Generated Content: Prompts you enter into Content Studio are processed by third-party AI providers (Kie.ai, RunwayML, OpenAI) to generate images, videos, and audio. We do not store your prompts long-term beyond what is required for generation and session logging.

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide playlist pitching, campaign management, and music marketing services
• Communication: To send campaign updates, system notifications, and customer support responses
• Personalization: To customize your experience and provide relevant recommendations
• Analytics: To analyze platform usage and improve our services
• Security: To protect against fraud, abuse, and unauthorized access
• Legal Compliance: To comply with applicable laws and regulations
• Marketing: To send promotional emails about new features (you can opt-out anytime)

4. Information Sharing and Disclosure

We DO NOT sell your personal information.

We may share your information in the following circumstances:

• Playlist Curators: When you initiate a pitch, we share your artist profile and song information with the curator
• Service Providers: Third-party vendors who assist with email delivery (Postmark), payments (Stripe), hosting, and analytics
• Legal Requirements: If required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share specific information

5. Data Security

We implement industry-standard security measures to protect your information:

• SSL/TLS encryption for data in transit
• Encrypted storage for sensitive data at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Secure third-party integrations (OAuth 2.0 for Google, Spotify)

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Export your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing emails (account notifications still apply)
• Cookie Control: Manage cookie preferences through your browser settings

To exercise these rights, contact us at cheston@songbizpro.com

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you delete your account:

• Personal data is deleted within 30 days
• Campaign analytics are anonymized and aggregated
• Legal and financial records are retained as required by law (typically 7 years)
• Backup data is permanently deleted within 90 days

8. International Data Transfers

SongBiz operates globally. Your information may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place through:

• Standard contractual clauses approved by regulatory authorities
• Privacy Shield frameworks (where applicable)
• Data processing agreements with third-party providers

9. Children's Privacy

SongBiz is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@songbizpro.com.

10. Third-Party Services

SongBiz integrates with third-party services that have their own privacy policies:

• Google: Authentication via Google OAuth (Google Privacy Policy)
• Spotify: Music data via Spotify API (Spotify Privacy Policy)
• Stripe: Payment processing (Stripe Privacy Policy)
• Postmark: Email delivery (Postmark Privacy Policy)

We are not responsible for the privacy practices of these third-party services. Please review their policies independently.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it's used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising CCPA rights

To exercise these rights, email cheston@songbizpro.com with "CCPA Request" in the subject line.

12. GDPR Compliance (EU Users)

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR):

• Legal Basis: We process data based on consent, contract performance, and legitimate interests
• Data Protection Officer: Contact cheston@songbizpro.com
• Right to Lodge Complaint: You may file complaints with your local supervisory authority
• Data Transfers: We use standard contractual clauses for international transfers

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying an in-app notification upon your next login

Continued use of SongBiz after changes indicates acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:cheston@songbizpro.com