Privacy Policy

Introduction

Tunebump ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our music promotion platform at www.tunebump.com.

Information We Collect

Personal Information You Provide

• Account Information: Username, email address, password
• Profile Information: Artist name, bio, social media links, Spotify profile URL
• Payment Information: Billing details, payment method information (processed securely by third-party payment processors)
• Music Content: Track uploads, metadata, album artwork
• Communication Data: Messages, feedback, support inquiries

Automatically Collected Information

• Usage Data: Campaign activity, submission history, platform interactions
• Technical Data: IP address, browser type, device information, operating system
• Analytics Data: Page views, click patterns, session duration
• Cookies: See our Cookie Policy section below

How We Use Your Information

• Service Provision: Facilitate music submissions, curator matching, feedback delivery
• Payment Processing: Handle transactions, refunds, and curator payments
• Communication: Send service updates, campaign notifications, support responses
• Platform Improvement: Analyze usage patterns, optimize user experience
• Legal Compliance: Meet regulatory requirements, enforce terms of service
• Marketing: Send promotional content (with your consent where required)

Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract Performance: Providing our music promotion services
• Legitimate Interests: Platform security, fraud prevention, service improvement
• Consent: Marketing communications, non-essential cookies
• Legal Obligations: Tax reporting, anti-money laundering compliance

How We Share Your Information

With Playlist Curators

We share necessary information with verified curators including:

• Artist name and track information
• Music files and metadata
• Genre and campaign details

With Service Providers

• Payment Processors: PayPal, Stripe for secure transactions
• Cloud Storage: AWS, Google Cloud for data hosting
• Analytics: Google Analytics for usage insights
• Email Services: For platform notifications and support

Legal Disclosures

We may disclose information when required by law, to protect our rights, or to ensure platform safety.

Data Retention

• Account Data: Retained while your account is active
• Music Content: Stored for campaign duration plus 30 days
• Payment Records: Kept for 7 years for tax compliance
• Communication Logs: Retained for 2 years for support purposes
• Analytics Data: Anonymized after 26 months

Your Privacy Rights

Under GDPR (EU Users)

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Data Portability: Receive your data in a portable format
• Restrict Processing: Limit how we use your data
• Object: Opt out of certain data processing activities
• Withdraw Consent: Revoke consent for marketing or cookies

All Users

• Update account information through your profile settings
• Unsubscribe from marketing emails
• Request account deletion
• Contact us with privacy concerns

Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption: SSL/TLS encryption for data transmission
• Access Controls: Role-based access with multi-factor authentication
• Regular Audits: Security assessments and vulnerability testing
• Data Minimization: Collect only necessary information
• Staff Training: Regular privacy and security education

International Data Transfers

As we operate globally, your data may be transferred to countries outside your residence. We ensure adequate protection through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for countries with equivalent protection
• Certification schemes and codes of conduct

Cookie Policy

Essential Cookies

Required for platform functionality, including authentication, session management, and security.

Analytics Cookies

Help us understand platform usage — Google Analytics (anonymized), internal usage tracking, performance monitoring.

Cookie Management

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.

Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last modified" date. For significant changes, we will provide additional notice through email or platform notifications.

Contact Us

For privacy-related questions, requests, or concerns, please contact us: