Privacy Policy

1. Information We Collect

We collect the following categories of information when you use Song Sprouts:

2. How We Use Information

We use the information we collect to:

• Operate the Platform — host your profile, fulfill orders, deliver files, and route payouts.
• Verify your identity and prevent fraud, impersonation, and money laundering.
• Process payments through Stripe Connect and remit your share to you.
• Deliver and distribute your music to digital service providers through Too Lost.
• Sync studio sessions to Google Calendar and host live sessions through Google Meet.
• Fulfill physical merchandise orders through Printify.
• Send transactional emails (order updates, payout receipts, security alerts) and, with your consent, marketing emails.
• Power referral attribution so the 5% lifetime referral cut is paid to the right person.
• Enforce our Terms, investigate disputes, and respond to legal requests.
• Improve the Platform — debug, run analytics, and develop new features.

3. Biometric Data

If you onboard as a Verified Songwriter (or once you reach $50 in sales as a Standard Marketplace Artist), you'll complete a biometric identity scan. We use this data only to confirm that the person behind the account is who they say they are.

• Biometric verification is performed by our identity-verification provider, not in-house.
• We do not sell, license, or share biometric data with advertisers or data brokers.
• Biometric templates are retained only as long as needed to keep your account verified and to comply with applicable laws, then deleted.
• You can request deletion of your biometric data at any time; doing so will revoke your Verified status and may pause payouts until identity is re-confirmed.

4. Payment Data

Payments are processed by Stripe, which is a PCI-DSS Level 1 certified payment processor. When you onboard for payouts or purchase as a buyer, your card and bank details are entered directly with Stripe — Song Sprouts receives only tokens and metadata (last four digits, brand, country) needed to display and reconcile transactions.

If PayPal becomes available as an additional payout method, it will be governed by its own privacy policy and data handling rules, which we will surface inside the dashboard at the point of connection.

5. Third-Party Services

We share information with a small set of carefully chosen vendors. Each only receives what's necessary to do its job:

• StripePayments, payouts, identity, tax forms
• Too LostDistribution to 480+ stores; ISRC/UPC assignment
• PrintifyPhysical merchandise fulfillment & shipping
• Google CalendarStudio booking sync
• Google MeetLive remote sessions and collaboration calls
• CalendlyBooking 1-on-1 onboarding and Q&A calls
• DiscordCommunity channels (you authenticate directly with Discord)
• ForminatorApplication forms hosted on our website
• Email & analytics providersTransactional mail, anti-fraud, usage analytics

We may also disclose information when required by law, to enforce our Terms, to protect the rights or safety of users, or in connection with a merger or acquisition (with notice to you).

6. Cookies & Tracking

We use cookies and similar technologies to keep you logged in, remember preferences, attribute referrals, measure performance, and prevent abuse. You can control cookies through your browser settings, but disabling them may break parts of the Platform (logins, checkouts, dashboards).

We do not knowingly use cross-site advertising trackers that follow you around the web. If that changes, this policy and our cookie banner will be updated before the change takes effect.

7. Data Retention

We keep your information for as long as your account is active, and for a reasonable period afterward to:

• Complete payouts, tax reporting, and royalty accounting on already-distributed music.
• Honor existing licenses purchased by buyers (an Exclusive Full Buyout, for example, is permanent).
• Resolve disputes, respond to legal requests, and enforce our Terms.

When data is no longer needed for any of these purposes, we delete or anonymize it.

8. Your Rights & Choices

Depending on where you live, you may have rights to:

• Access — request a copy of the personal data we hold about you.
• Correct — update inaccurate or incomplete data through your dashboard or by emailing us.
• Delete — request deletion of your account and associated data, subject to the retention rules in Section 7.
• Export — receive a portable copy of your content and account data.
• Opt out — unsubscribe from marketing emails at any time (transactional emails will continue while you have an active account).
• Object or restrict — limit certain uses of your data, where required by law.

To exercise any of these rights, email legal@songsprouts.com. We may need to verify your identity before acting on a request.

9. Children

Song Sprouts is strictly an 18+ Platform. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact legal@songsprouts.com and we will investigate and, if confirmed, remove the account and associated data.

10. International Transfers

Song Sprouts operates from the United States and our vendors are located in multiple jurisdictions. By using the Platform, you understand that your information may be transferred to, stored in, and processed in countries other than your own, including the United States, which may have different data protection laws than your country of residence.

Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

11. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information — encryption in transit, hashed credentials, scoped access controls, and vendor due diligence. No system is perfectly secure, however, and we cannot guarantee absolute security. Use a strong, unique password and enable any available two-factor authentication.

If we ever discover a security incident affecting your data, we will notify you as required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we'll bump the version number, update the effective date, and notify you by email or dashboard alert. Continued use of the Platform after the changes go live constitutes acceptance of the updated policy.

13. Contact

Questions about this Privacy Policy, requests about your data, or anything privacy-related: