Privacy Policy

Introduction & Who We Are

Welcome to Music Unincorporated. This Privacy Policy describes how Music Unincorporated, Inc. ("Music Unincorporated," "we," "us," or "our") collects, uses, and shares information about you when you use our website (musicunincorporated.com), and any related services (collectively, the "Service").

This policy applies to "Artists" (who create pages and sell music) and "Fans" (who purchase music or browse the Service). Collectively, we refer to Artists and Fans as "Users."

Information We Collect and Legal Basis for Processing

We only collect the information necessary to provide, protect, and improve our Service. We have broken down the data we collect by User type and explained why we collect it and the legal basis for doing so under GDPR.

Table 1: Processing of Artist Data

Table 2: Processing of Fan Data

How We Use Your Information

In addition to the purposes listed above, we use your information to:

• Provide and Operate the Service: To allow Artists to upload music and Fans to purchase it.
• Process Payments: To facilitate transactions between Fans and Artists via our payment processor.
• Communicate With You: To send service-related messages, security alerts, and receipts.
• Secure and Protect the Service: To detect and prevent fraud, abuse, and security incidents.
• Comply with Legal Obligations: To respond to subpoenas, legal requests, or to enforce our Terms of Service.

How We Share and Disclose Information

We do not "sell" your personal information in the traditional sense. We share it only in the following limited circumstances:

With Our Payment Processor (Stripe):

This is a critical and mandatory part of our Service.

For Artists: To sell music and receive payouts, you must create a "Connected Account" with our processor, Stripe, Inc.. To facilitate your onboarding, we may share your information (such as your name and email) with Stripe. You will then provide your financial, identity, and "Know Your Customer" (KYC) information directly to Stripe via their hosted onboarding page. Stripe processes this data as an independent Data Controller for its own compliance and fraud prevention purposes, as described in the Stripe Privacy Policy. Your relationship with Stripe is governed by the Stripe Connected Account Agreement.

For Fans: When you make a purchase, your payment information is provided directly to Stripe. We do not store your full credit card number.

With Service Providers:

We use third-party vendors for hosting, database management, and analytics. They are contractually bound to only use the information to perform services on our behalf.

For Legal Reasons:

We may disclose your information if we believe in good faith that it is necessary to comply with a law, regulation, legal process, or government request.

In a Business Transfer:

If Music Unincorporated is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

International Data Transfers

Music Unincorporated is based in the United States, and our servers are located in the US. If you are accessing the Service from outside the US (including the European Economic Area (EEA), United Kingdom (UK), or Switzerland), your information will be transferred to, stored, and processed in the United States.

We rely on legally-provided mechanisms to lawfully transfer this data. For transfers of personal data from the EEA, UK, and Switzerland, this may include the EU-U.S. Data Privacy Framework, the UK Extension, and/or the European Commission's Standard Contractual Clauses.

Your Data Rights and Choices (GDPR & CCPA)

You have specific rights regarding your personal information. To exercise any of these rights, please contact us at [email protected].

For All Users:

• Access and Update: You can review and update your account information by logging into your account.
• Marketing Communications: You can opt out of any marketing emails by clicking the "unsubscribe" link.

For Users in the EEA, UK, and Switzerland (GDPR):

You have the following rights:

• Right to Access: The right to request a copy of the personal data we hold about you.
• Right to Rectification: The right to have inaccurate or incomplete data corrected.
• Right to Erasure ("Right to be Forgotten"): The right to request that we delete your personal data, under certain conditions.
• Right to Restrict Processing: The right to request that we limit the processing of your data.
• Right to Data Portability: The right to receive your data in a structured, machine-readable format.
• Right to Object: The right to object to our processing of your data, especially for legitimate interest-based processing.

For Users in California (CCPA / CPRA):

You have the following rights:

• Right to Know: The right to request details about the categories and specific pieces of personal information we have collected, used, and shared.
• Right to Delete: The right to request the deletion of your personal information, subject to certain exceptions.
• Right to Correct: The right to request the correction of inaccurate personal information.
• Right to Opt-Out of "Sale" or "Sharing": We do not "sell" your data for money. However, under California law, the use of certain analytics or advertising cookies may be considered "sharing." You have the right to opt out of this. You can exercise this right by visiting our link: Do Not Sell or Share My Personal Information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Data Security and Retention

We implement reasonable technical and organizational security measures to protect your information from unauthorized access, loss, or disclosure. However, no internet transmission is 100% secure.

We retain your personal data for as long as you have an active account with us or as long as is necessary to provide the Service. We may retain data for longer periods to comply with legal obligations, resolve disputes, or enforce our agreements.

Children's Privacy

The Service is not intended for or directed at children under the age of 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If we learn we have, we will take steps to delete it immediately.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Service (e.g., to keep you logged in), for analytics (to understand how you use the Service), and to support payment processing. Unlike some platforms, we require these technologies to function. For more information, please see our separate Cookie Policy (link to be added).

Policy Updates and Contact Information

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service. Per CCPA, this policy will be reviewed and updated at least every 12 months.

Contact Us:

If you have any questions about this Privacy Policy, please contact us at: