TuneTrader ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our music catalog marketplace platform ("Platform") and related services (collectively, the "Services").
By accessing or using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the practices described herein, please do not use the Services.
1. Information We Collect
We collect information in several ways depending on how you interact with our Platform.
1.1 Information You Provide Directly
- Account Information: When you register for an account, we collect your full name, email address, password, organization name, and account type (Broker or Buyer).
- Profile Information: Additional details you choose to provide, such as phone number, job title, company details, and professional background.
- Listing Information: If you are a Broker, information about music catalogs you list, including catalog names, descriptions, revenue data, song counts, genre classifications, and asking prices.
- Communications: Messages exchanged through the Platform, including deal thread messages, offers, and inquiries.
- Documents: Files uploaded to deal rooms, including financial statements, contracts, catalog analytics, and NDA signatures.
- Payment Information: Billing details and payment information processed through our third-party payment providers. We do not store full credit card numbers on our servers.
1.2 Information Collected Automatically
- Usage Data: Pages visited, features used, search queries, listings viewed, and interactions with other Users on the Platform.
- Device and Browser Information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
- Log Data: Server logs that record requests made to our Platform, including timestamps, referring URLs, and response codes.
- Location Data: Approximate geographic location derived from your IP address.
1.3 Information from Third Parties
- Authentication Providers: If you sign in using a third-party service (e.g., Google), we may receive your name, email address, and profile picture from that provider.
- Analytics Services: We may receive aggregated analytics data from third-party analytics providers to help us understand how Users interact with the Platform.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Providing the Services: To operate the Platform, process transactions, facilitate communications between Users, manage deal rooms, and deliver the features you request.
- Account Management: To create and manage your account, verify your identity, and process your organization membership.
- Personalization: To tailor the Platform experience to your preferences, including saved searches, recommended listings, and notification preferences.
- Communications: To send you transactional emails (e.g., account verification, offer notifications, deal updates), and, with your consent, marketing and promotional materials.
- Analytics and Improvement: To analyze usage patterns, diagnose technical issues, improve Platform features, and develop new services.
- Security and Fraud Prevention: To detect, prevent, and address fraud, unauthorized access, and other illegal activities, and to enforce our Terms of Service.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
3. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- With Other Users: Certain information is shared as part of the marketplace functionality. For example, Brokers' listing information is visible to Buyers, and messages exchanged within deal threads are visible to thread participants and deal team members.
- Service Providers: We share information with third-party vendors who perform services on our behalf, including cloud hosting (Supabase), payment processing, email delivery, and analytics. These providers are contractually obligated to use your information only to provide services to us.
- Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
- With Your Consent: We may share your information for any other purpose with your explicit consent.
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on the Platform.
4.1 Types of Cookies We Use
- Essential Cookies: Required for the Platform to function properly, including authentication tokens and session management. These cannot be disabled.
- Functional Cookies: Used to remember your preferences, such as language settings and display preferences.
- Analytics Cookies: Help us understand how Users interact with the Platform so we can improve our Services. These collect aggregated, anonymized data.
4.2 Managing Cookies
Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling essential cookies may prevent you from using certain features of the Platform, including logging in to your account.
5. Data Security
We take the security of your information seriously and implement appropriate technical and organizational measures to protect it, including:
- Encryption of data in transit using TLS/SSL and encryption of sensitive data at rest.
- Row-Level Security (RLS) policies on our database to ensure Users can only access data they are authorized to view.
- Secure, server-side signed URLs for accessing private documents in deal rooms, with no direct client-side access to private storage.
- Cryptographically random file paths for uploaded documents to prevent unauthorized access through URL guessing.
- Regular security reviews and monitoring of access logs.
Despite our efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your information. If you become aware of a security vulnerability, please report it to us immediately at support@tunetrader.io.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Services. We may also retain certain information as necessary to comply with legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes.
When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law or for legitimate business purposes (e.g., maintaining audit logs for completed transactions, preserving records required for legal compliance).
7. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: You may request a copy of the personal information we hold about you.
- Correction: You may request that we correct inaccurate or incomplete personal information. You can also update most account information directly through your account settings.
- Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
- Data Portability: You may request a copy of your personal information in a structured, commonly used, and machine-readable format.
- Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in our emails or by contacting us.
- Withdraw Consent: Where we rely on your consent to process your information, you may withdraw that consent at any time.
To exercise any of these rights, please contact us at support@tunetrader.io. We will respond to your request within 30 days, or as required by applicable law.
8. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- The right to know what personal information we collect, use, disclose, and sell.
- The right to request deletion of your personal information.
- The right to opt out of the sale of your personal information. As stated above, we do not sell your personal information.
- The right to non-discrimination for exercising your CCPA rights.
To submit a CCPA request, contact us at support@tunetrader.io. We may need to verify your identity before processing your request.
9. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including:
- The right to access, correct, delete, or restrict processing of your data.
- The right to data portability.
- The right to object to processing based on legitimate interests.
- The right to lodge a complaint with a supervisory authority in your jurisdiction.
Our legal bases for processing your information include: performance of a contract (providing the Services), legitimate interests (improving and securing the Platform), compliance with legal obligations, and your consent where applicable.
If your personal information is transferred outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
10. Children's Privacy
The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us at support@tunetrader.io.
11. Third-Party Links and Services
The Platform may contain links to third-party websites or services that are not owned or controlled by TuneTrader. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Platform.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending you an email notification. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: