Privacy Policy

01Information We Collect

1.1 Information You Provide Directly

• Account information: Name, email address, password, and contact details provided when you create a portal account.
• Billing information: Payment method details processed through our payment processor — we do not store full payment card numbers.
• Onboarding information: Sound links, aesthetic references, content preferences, release dates, and other information you provide through the onboarding form or kickoff call.
• Communications: Emails, messages, and other communications you send to us.
• Content: Footage, music, and other materials you upload or share through the portal or Google Drive.

1.2 Information We Collect Automatically

• Usage data: Pages visited, features used, time spent in the portal, and other interaction data.
• Device information: Browser type, operating system, IP address, and device identifiers.
• Log data: Server logs including access times, errors, and referring URLs.
• Cookies and similar technologies: See Section 6 below.

1.3 Information From Third-Party Platforms

When you connect your social media accounts through the portal, we receive access tokens and account data from those platforms (TikTok, Instagram, YouTube, Facebook) sufficient to post content on your behalf. We do not collect or store your social platform passwords. The scope of data we receive from each platform is governed by that platform's API policies and the permissions you grant during the connection flow.

1.4 Information From Analytics

We collect performance data from connected social media accounts including post views, impressions, follower counts, engagement metrics, and stream data from Spotify and connected platforms. This data is used to provide analytics reporting and performance dashboards within the operator portal.

02How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service.
• Set up and manage your client account and portal access.
• Connect your social media accounts and post content on your behalf across Artist-Owned, Faceless Niche, and Fan/HQ account types.
• Build and deliver content per your SOW and onboarding preferences.
• Generate analytics reports and performance dashboards.
• Send invoices, payment reminders, and billing-related communications.
• Send service updates, strategy call reminders, and operational communications.
• Respond to your support requests and communications.
• Enforce our Terms of Service and Acceptable Use Policy.
• Comply with legal obligations.
• Use aggregated and anonymized data for internal research and service improvement.

We do not sell your personal information to third parties.

03How We Share Your Information

We share your information only as described below.

3.1 Service Providers

We work with third-party vendors who help us operate the Service. These vendors have access to your information only as necessary to perform their functions and are contractually bound to protect it. Current service providers include:

• Bundle Social — social media scheduling and posting
• Creatomate — video rendering and content production
• Google Drive / Google Workspace — file storage and collaboration
• Railway — cloud infrastructure and hosting
• Typeform — onboarding and inquiry forms
• Payment processor — billing and invoicing (e.g. Stripe)
• Email provider — transactional and operational email

3.2 Social Media Platforms

By connecting your accounts through the portal, you authorize us to interact with TikTok, Instagram, YouTube, Facebook, and other connected platforms on your behalf. Data transmitted to these platforms is governed by their respective privacy policies.

3.3 Case Studies & Marketing

As described in your SOW and our Terms of Service, we may use your name, campaign results, and content for marketing and case study purposes unless you opt out in writing.

3.4 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect the rights, property, or safety of Songclimber, our clients, or the public.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email before your information is transferred and becomes subject to a different privacy policy.

04Data Retention

We retain your information for as long as your account is active and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account data: Retained for the duration of your engagement plus three (3) years.
• Billing records: Retained for seven (7) years as required by law.
• Content and analytics data: Retained for the duration of your engagement plus one (1) year.
• Communication records: Retained for two (2) years.

You may request deletion of your personal data at any time (see Section 7). Some data may be retained after deletion requests to comply with legal obligations.

05Data Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, loss, alteration, or disclosure. These measures include:

• Encrypted data transmission (HTTPS/TLS)
• Secure cloud infrastructure via Railway
• Access controls limiting data access to authorized personnel only
• Secure credential storage — social media access tokens are stored encrypted and never logged in plain text

No system is completely secure. We cannot guarantee absolute security and are not liable for unauthorized access that is beyond our reasonable control. If we become aware of a data breach that affects your personal information, we will notify you as required by applicable law.

06Cookies & Tracking Technologies

The Songclimber portal uses cookies and similar technologies to:

• Maintain your logged-in session
• Remember your preferences
• Analyze portal usage and performance

We do not use cookies for cross-site advertising or sell cookie data to third parties. You may disable cookies in your browser settings, but doing so may affect your ability to use certain portal features.

07Your Rights & Choices

Depending on your location, you may have the following rights with respect to your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to our retention obligations.
• Portability: Request your data in a portable format.
• Opt-out of marketing: Unsubscribe from non-essential communications at any time.
• Opt-out of case study usage: Withdraw permission for use of your name and results in marketing materials.

To exercise any of these rights, contact us at evan@songclimber.com. We will respond within thirty (30) days.

08California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell.
• Delete personal information we have collected (subject to exceptions).
• Opt out of the sale of personal information — we do not sell personal information.
• Non-discrimination for exercising your privacy rights.

To submit a CCPA request, contact evan@songclimber.com.

09Children's Privacy

The Service is intended for use by adults aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected personal information from a minor, we will delete it promptly. If you believe we have inadvertently collected information from a minor, please contact us at evan@songclimber.com.

10Third-Party Links & Platforms

The Service may contain links to or integrations with third-party platforms (TikTok, Instagram, YouTube, Facebook, Spotify, and others). This Privacy Policy does not apply to those platforms. We encourage you to review the privacy policies of any third-party platform you connect through the Service.

11Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email at least fourteen (14) days before the changes take effect. The updated policy will be posted at songclimber.com/privacy-policy with the new effective date. Continued use of the Service after the effective date constitutes acceptance.

12Contact