Privacy Policy

1. Introduction

At Distrify.me ("we", "our" or "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website, mobile applications, and services (collectively, the "Service").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Personal Data

We may collect personal information that you voluntarily provide when using our Service, including but not limited to:

• Account Information: Name, email address, password, phone number, and profile photo.
• Artist Information: Artist name, biography, social media links, and music genre.
• Financial Information: Payment details, bank account information, and tax identification numbers.
• Content Information: Metadata related to your music, including titles, descriptions, release dates, and artwork.
• Communication Data: Messages, emails, and other communications between you and Distrify.me.
• Marketing Preferences: Your preferences for receiving marketing communications and the types of marketing that interest you.

2.2 Information Collected Automatically

When you access or use our Service, we may automatically collect certain information, including:

• Device Information: Information about your device, including IP address, device type, operating system, browser type, and mobile network information.
• Usage Data: Information about how you use our Service, including pages visited, time spent on pages, navigation paths, and features used.
• Location Data: General location information determined from your IP address.
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar technologies. For more information, see our Cookies Policy.

2.3 AI-Related Data

If you use our AI-powered features, we may collect additional data, including:

• AI Interaction Data: Your inputs, prompts, and interactions with our AI agents.
• Generated Content: Content created by our AI agents based on your instructions.
• Feature Usage: Information about which AI features you use and how you use them.
• Credits Transactions: Records of credit purchases and usage for AI features.

2.4 NFC Device Interaction Data (FANICONS)

If you purchase or activate a FANICON (a physical object with an NFC chip linked to digital content), we may collect additional data relating to interaction with that device, including:

• NFC Tap Events: Timestamp of each interaction with the NFC chip, device identifier, and IP address from which the access occurs.
• Activation Data: Code used, date and time of first activation, and the link between the artefact's unique identifier (UID) and your user account.
• Engagement Data: Actions performed within the FANICON (audio playback, video viewing, link access) to inform the artist about interaction with their content.
• Device Information: Device type, operating system, and browser used when accessing content via the FANICON URL.

sections.informationCollected.nfcData.legalBasis

3. How We Use Your Information

We may use the information we collect for various purposes, including:

• Provide the Service: To operate, maintain, and deliver the features and functionality of our Service.
• Account Management: To create and manage your account, including authentication and identity verification.
• Content Distribution: To distribute your content to digital music services, stores, and platforms.
• Royalty Collection and Payment: To collect, process, and distribute royalties for your content.
• Communication: To communicate with you about your account, our Service, and to respond to your inquiries.
• Marketing Services: To provide and optimize marketing services for your content.
• AI Feature Delivery: To provide AI-powered features and process your interactions with our AI agents.
• Improvement and Development: To analyze, improve, and develop our Service and features.
• Personalization: To personalize your experience and provide content and features that may interest you.
• Marketing: To send you marketing communications, with your consent where required by law.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Protection: To protect the rights, property, and safety of Distrify.me, our users, and others.

4. How We Share Your Information

We may share your information with certain third parties, including:

• Digital Service Providers: We share your content and related metadata with digital music services, stores, and platforms to fulfill our distribution services.
• Service Providers: We engage third-party service providers to perform functions on our behalf, such as hosting, data analytics, payment processing, and customer service.
• Marketing Partners: If you use our marketing services, we may share necessary information with advertising platforms and marketing tools.
• Business Partners: We may share information with business partners for joint marketing efforts or to offer complementary services.
• Legal Requirements: We may disclose information if required by law or in response to valid legal requests.
• Business Transfers: If Distrify.me is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.
• With Your Consent: We may share your information for other purposes with your explicit consent.
• Platform Artists: When you purchase content in an artist's store or activate a FANICON, we share with the artist the data necessary to manage the commercial relationship (name, email, purchase history, and FANICON interaction data). The artist acts as an independent data controller with respect to their fans' data and is contractually obliged to comply with GDPR and not to use such data for purposes other than those communicated to the fan. In this context, Distrify.me acts as a data processor on behalf of the artist (Art. 28 GDPR).

4.1 AI Technology Partners

For our AI-powered features, we work with AI technology providers who may process your data. When you use these features:

• We share your inputs and prompts with these providers to generate responses and content.
• We implement appropriate safeguards to protect your data during these transfers.
• AI providers may use this data to improve their services, but we require them to adhere to strict privacy and security standards.

4.2 Infrastructure and Payment Providers

For the technical operation of the Service, we work with the following providers who may process personal data:

• sections.howWeShare.infrastructureProviders.stripe.name: sections.howWeShare.infrastructureProviders.stripe.purpose sections.howWeShare.infrastructureProviders.stripe.scc
• sections.howWeShare.infrastructureProviders.gcs.name: sections.howWeShare.infrastructureProviders.gcs.purpose sections.howWeShare.infrastructureProviders.gcs.scc

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you
• Legal obligations we have to retain data
• Whether retention is advisable considering our legal position (such as for statutes of limitations, litigation, or regulatory investigations)
• FANICON interaction data (tap events, access history, and engagement) is retained for the duration of the artist's subscription and up to 12 additional months after cancellation, to ensure the fan's continued access to already-activated content. After that period, data will be anonymised or deleted.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Regular security assessments
• Access controls and authentication procedures
• Secure development practices
• Regular backups and disaster recovery plans

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Your Data Protection Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: The right to request copies of your personal information.
• Rectification: The right to request that we correct inaccurate or incomplete information.
• Erasure: The right to request that we delete your personal information in certain circumstances.
• Restriction: The right to request that we restrict processing of your information in certain circumstances.
• Data Portability: The right to receive your personal information in a structured, commonly used format.
• Objection: The right to object to our processing of your personal information in certain circumstances.
• Withdraw Consent: The right to withdraw your consent at any time when we rely on consent to process your information.

To exercise these rights, contact us using the information provided in the "Contact Information" section.

8. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from your country's laws.

When we transfer your information to other countries, we will take appropriate steps to protect your information and ensure that the transfer complies with applicable data protection laws, such as using Standard Contractual Clauses approved by the European Commission.

9. Children's Privacy

Our Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to remove that information from our servers.

10. Third-Party Links and Services

Our Service may contain links to third-party websites, plugins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of each website you visit.

11. Cookies and Similar Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our Service.

For more information about the cookies we use, please see our Cookies Policy.

12. Marketing Communications

We may use your personal information to send you marketing communications about our products and services. You can opt out of receiving these communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your communication preferences in your account settings
• Contacting us using the information provided in the "Contact Information" section

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

15. Data Protection Authority

If you have concerns about our processing of your personal information that we cannot resolve, you have the right to lodge a complaint with the data protection authority in your jurisdiction.