Privacy Policy

1. Introduction

BackTune ("we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our free music distribution platform and related services.

As a music distribution platform serving independent artists worldwide, we handle sensitive information including artist profiles, financial data, streaming analytics, and intellectual property. We comply with international data protection regulations including GDPR (General Data Protection Regulation), CCPA (California Consumer Privacy Act), and other applicable privacy laws.

By using BackTune's services, you consent to the data practices described in this policy. If you do not agree with our privacy practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

When you create an account or use our services, we collect:

• Account Information: Name, stage name, email address, password (encrypted), phone number, date of birth
• Profile Information: Artist biography, profile pictures, social media links, website URLs, genre preferences
• Identity Verification: Government-issued ID, tax information (for royalty payments), business registration documents (if applicable)
• Payment Information: Bank account details, PayPal email, Payoneer information, tax identification numbers
• Contact Preferences: Communication preferences, notification settings, language preferences

2.2 Music and Content Data

• Audio Files: Master recordings, metadata, ISRC codes, UPC codes
• Artwork and Media: Album covers, promotional images, music videos
• Metadata: Track titles, album names, artist credits, genre classifications, release dates, lyrics, songwriter information
• Rights Information: Copyright ownership details, licensing agreements, collaboration credits, publishing information

2.3 Analytics and Usage Data

• Streaming Statistics: Play counts, listener demographics, geographic data, platform-specific metrics
• Revenue Data: Streaming royalties, payment history, royalty split percentages, earnings by track and platform
• Platform Usage: Dashboard interactions, feature usage, login frequency, device information
• Performance Metrics: Playlist placements, follower growth, engagement rates, peak listening times

2.4 Technical Information

• Device Data: IP address, browser type, operating system, device identifiers, screen resolution
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies (see Cookie Policy for details)
• Log Data: Access times, pages viewed, referral URLs, error logs, security events
• Communication Records: Support tickets, email correspondence, chat transcripts

2.5 Third-Party Data

We receive data from streaming platforms (Spotify, Apple Music, Amazon Music, etc.) including streaming counts, listener demographics, playlist additions, and revenue reports. We also collect publicly available information from social media platforms you connect to your artist profile.

3. How We Use Your Information

3.1 Service Delivery

• Distribute your music to 150+ streaming platforms and digital stores globally
• Generate and assign ISRC and UPC codes to your releases
• Process and deliver royalty payments based on streaming performance
• Provide real-time analytics dashboards and detailed reporting
• Manage your artist profile across multiple platforms
• Coordinate release scheduling and pre-save campaigns

3.2 Account Management

• Create and maintain your BackTune account
• Authenticate your identity and prevent unauthorized access
• Verify content ownership and copyright compliance
• Determine royalty share percentages based on artist profile metrics
• Communicate important account updates and service notifications

3.3 Platform Improvement

• Analyze usage patterns to improve user experience
• Develop new features based on artist needs and feedback
• Optimize dashboard performance and load times
• Conduct A/B testing for feature enhancements
• Monitor system security and prevent fraudulent activity

3.4 Marketing and Promotion

• Send promotional emails about new features and opportunities (with your consent)
• Feature your music in BackTune's promotional channels
• Provide industry insights and educational content
• Offer personalized recommendations for release strategies
• Showcase success stories and artist spotlights (with permission)

3.5 Legal and Compliance

• Comply with copyright laws and DMCA requirements
• Process tax documentation and regulatory filings
• Respond to legal requests and court orders
• Enforce Terms of Service and prevent Terms violations
• Investigate and prevent streaming manipulation and fraud

4. How We Share Your Information

4.1 Streaming Platforms and DSPs

We share your music content, metadata, and artwork with digital streaming platforms (Spotify, Apple Music, Amazon Music, YouTube Music, Tidal, Deezer, etc.) as necessary to distribute your releases. These platforms have their own privacy policies governing how they handle data.

4.2 Payment Processors

We share payment information with trusted third-party processors (PayPal, Stripe, Payoneer, banking partners) to facilitate royalty payments. These partners comply with PCI DSS standards and applicable financial regulations.

4.3 Service Providers

We work with carefully vetted service providers for:

• Cloud Hosting: Secure storage of audio files and data (AWS, Google Cloud)
• Email Services: Transactional and marketing communications
• Analytics Tools: Usage tracking and performance monitoring
• Customer Support: Ticketing and chat support platforms
• Security Services: Fraud detection, DDoS protection, malware scanning

4.4 Legal Requirements

We may disclose your information when required by law, including:

• Responding to subpoenas, court orders, or legal processes
• Investigating copyright infringement claims (DMCA)
• Cooperating with law enforcement investigations
• Protecting BackTune's rights, property, or safety
• Preventing fraud, abuse, or Terms violations

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. You will be notified of any such change via email and dashboard notification.

5. Data Security Measures

5.1 Technical Safeguards

• Encryption: TLS/SSL encryption for data in transit, AES-256 encryption for data at rest
• Access Controls: Role-based access, multi-factor authentication, IP whitelisting for admin access
• Network Security: Firewalls, intrusion detection systems, DDoS protection
• Regular Audits: Penetration testing, vulnerability scanning, security code reviews
• Backup Systems: Automated daily backups with geographic redundancy

5.2 Organizational Safeguards

• Employee training on data privacy and security best practices
• Confidentiality agreements for all team members and contractors
• Strict access controls limiting data exposure to necessary personnel
• Incident response plan for potential data breaches
• Regular security awareness training and phishing simulations

5.3 Data Breach Protocol

In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours and provide details about the incident, affected data, and remediation steps. We maintain cyber liability insurance and work with forensic security experts to investigate breaches.

6. Your Privacy Rights

6.1 GDPR Rights (European Users)

If you are located in the European Economic Area, you have the following rights:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Revoke consent for data processing at any time

6.2 CCPA Rights (California Users)

California residents have additional rights under CCPA:

• Right to Know: Request disclosure of data collection and sharing practices
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of data sales (note: BackTune does not sell personal data)
• Right to Non-Discrimination: Equal service regardless of privacy rights exercise

6.3 Exercising Your Rights

To exercise any privacy rights:

• Email privacy@backtune.com with your request
• Use the privacy settings in your dashboard
• Contact our Data Protection Officer (DPO)
• Submit a request through our contact form

We respond to verified requests within 30 days. Some data may be retained for legal compliance or legitimate business purposes.

7. Data Retention

We retain your data for different periods depending on the type:

• Account Data: For the duration of your account plus 3 years for legal compliance
• Music Content: While actively distributed plus 7 years for copyright records
• Financial Records: 7 years minimum for tax and audit purposes
• Analytics Data: Aggregated data retained indefinitely; individual data for 2 years
• Communication Logs: 2 years for customer service quality and dispute resolution
• Technical Logs: 90 days for security monitoring and troubleshooting

Upon account closure, we delete unnecessary data within 90 days while retaining legally required records.

8. Children's Privacy

BackTune's services are not intended for individuals under 18 years old. We do not knowingly collect personal information from children. Users under 18 must have parental or guardian consent to use our services.

If we discover we have collected data from a child without proper consent, we will delete it immediately. Parents or guardians who believe their child has provided information to us should contact privacy@backtune.com.

9. International Data Transfers

BackTune operates globally and may transfer data across international borders to:

• Cloud servers in multiple regions for redundancy and performance
• Streaming platforms headquartered in various countries
• Payment processors operating internationally
• Service providers in different jurisdictions

We use Standard Contractual Clauses (SCCs) approved by the European Commission and other appropriate safeguards to protect data transferred internationally. All service providers must meet our security and privacy standards.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. For detailed information about our cookie usage, please see our Cookie Policy.

You can control cookies through your browser settings. However, disabling certain cookies may limit functionality of our platform.

11. Third-Party Links and Services

Our platform may contain links to third-party websites, streaming platforms, and social media. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

When you connect social media accounts or authorize third-party integrations, those services may access certain data according to their own privacy policies.

12. Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or service offerings. Material changes will be communicated via:

• Email notification to your registered address
• Dashboard notification upon next login
• Prominent notice on our website
• 30-day advance notice for significant changes

Continued use of our services after policy updates constitutes acceptance of the revised terms.