Privacy Policy

1. Introduction

TrakPitch, operated by Sora Music Group ("we", "us", "our"), respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our music promotion marketplace at trakpitch.com.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and profile information. If you sign in with Google, we receive your name, email, and profile picture from Google.

Artist Content

We store tracks you upload (MP3 audio files or streaming links), along with metadata such as title, artist name, genres, BPM, key, mood, and description.

Promoter Information

If you apply as a Promoter, we collect your connected platform URLs (e.g., Spotify playlist links, YouTube channels, blog URLs), follower counts, genre preferences, and biographical information.

Payment Information

Payment processing is handled by Paddle, our merchant of record. We do not store your full credit card number, bank details, or payment credentials on our servers. Paddle processes and stores payment data in accordance with their own privacy policy. We retain transaction records including amounts, dates, and order details.

Usage Data

We automatically collect information about how you use the Platform, including pages visited, features used, browser type, device information, and IP address.

3. How We Use Your Information

• To operate and maintain the marketplace
• To match Artists with relevant Promoters based on genre and platform
• To process payments and manage Promoter payouts
• To calculate Promoter tier rankings and influence scores
• To send order updates, delivery notifications, and receipts
• To detect and prevent fraud or abuse
• To improve our services and user experience
• To communicate important changes to our Terms or policies

4. Third-Party Services

We use the following third-party services to operate TrakPitch:

• Paddle — Payment processing and merchant of record. Handles all payment transactions, billing, and refund processing.
• Supabase — Database infrastructure, authentication, and file storage.
• Vercel — Application hosting and content delivery.

These providers access your data only as necessary to perform their services and are bound by their own privacy policies and data protection obligations.

5. Information Sharing

We do not sell your personal data to advertisers or any third parties. We share information only in the following circumstances:

• Between parties in a transaction: Promoters see track details and Artist name for orders they receive. Artists see Promoter profile information.
• With service providers: As described in Section 4, limited to what is necessary for their services.
• When required by law: We may disclose information in response to valid legal requests, court orders, or regulatory requirements.

6. Data Storage and Security

Your data is stored securely using Supabase with row-level security policies ensuring users can only access their own data. All data transmission uses HTTPS encryption. While we implement industry-standard security measures, no system is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your account data for as long as your account is active. Transaction records are kept for 7 years for financial and legal compliance. Upon account deletion, your profile data is removed and any remaining uploaded files are deleted promptly.

8. Cookies

We use only essential cookies for authentication and session management. These cookies are strictly necessary for the Platform to function and cannot be disabled. We do not use advertising cookies, tracking cookies, or any third-party analytics cookies.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Export your data in a portable format
• Withdraw consent for optional data processing

To exercise any of these rights, including requesting full account deletion, contact us at support@trakpitch.com.

10. Children's Privacy

TrakPitch is not intended for users under 18. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a notice on the Platform. Continued use of TrakPitch after changes are posted constitutes acceptance of the revised policy.

12. Contact

For privacy-related questions, data requests, or to request account deletion, contact us at support@trakpitch.com.