1. Introduction
Core Creatives (“we”, “us”, “our”) operates Brandmusic (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you consent to the data practices described in this policy.
3. Information We Collect
3.1 Information You Provide
- Account Information: Name, email address, password, company name, business type, country, phone number
- Profile Information: Profile photo, display name
- Payment Information: Payment details are processed and stored by Stripe, our payment processor. We do not store credit card numbers on our servers.
- Support Communications: Messages and information you provide when contacting support
3.2 Information Collected Automatically
- Usage Data: Tracks played, playlists created, listening history, feature usage
- Stream Data: Track play counts, playback duration (streams are counted after 30 seconds of continuous playback)
- Device Information: Browser type, operating system, screen resolution
- Log Data: IP address, access times, pages viewed, referring URLs
4. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process your subscription and payments
- Personalize your experience (e.g., AI playlist recommendations)
- Send you Service-related communications
- Monitor usage patterns and analyze trends to improve the Service
- Detect, prevent, and address technical issues and fraud
- Comply with legal obligations
5. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:
- Contract Performance: Processing necessary to fulfill our subscription agreement with you
- Legitimate Interest: Analytics, Service improvement, and fraud prevention
- Consent: Where you have given explicit consent (e.g., marketing communications)
- Legal Obligation: Where processing is required by applicable law
6. Data Sharing & Third Parties
We do not sell your personal data. We share data only with the following categories of third parties:
- Stripe: Payment processing (subject to Stripe's Privacy Policy)
- Supabase: Database and authentication infrastructure
- Vercel: Hosting and content delivery
- Anthropic: AI playlist generation (anonymized usage data only)
We may also disclose your information if required by law, court order, or to protect our rights, property, or safety.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. Upon account deletion, we will delete or anonymize your personal data within 30 days, unless retention is required by law (e.g., billing records).
Stream and usage data may be retained in anonymized, aggregated form for analytics purposes indefinitely.
8. Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption in transit (TLS/SSL) and at rest
- Secure authentication with hashed passwords
- Row-level security on database tables
- Regular security reviews of our infrastructure
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.
9. Your Rights (GDPR)
If you are located in the European Economic Area (EEA), you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data (“right to be forgotten”)
- Right to Restriction: Request restriction of processing in certain circumstances
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interest
- Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at support@core-creatives.com. We will respond within 30 days.
10. Cookies & Local Storage
We use browser local storage (not tracking cookies) to store:
- Authentication session data
- Theme preference (light/dark mode)
- Liked tracks
- AI playlist usage status
We do not use third-party advertising or tracking cookies.
11. International Data Transfers
Your data may be transferred to and processed in countries outside the EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.
12. Children's Privacy
The Service is intended for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at:
Core Creatives
Email: support@core-creatives.com
You also have the right to lodge a complaint with your local data protection authority.