Privacy Policy

You provide: name, artist/writer name, email address, password (stored only as a salted hash by our authentication provider), profile photo, bio, social links, role tags, PRO and publisher affiliations, IPI/ISWC/ISRC identifiers, songs, stems, artwork, community posts, playlists, messages, split and ownership data, and support correspondence.

Collected automatically: IP address, device and browser type, pages and features used, timestamps, and error/diagnostic logs, for security and reliability.

From third parties: basic profile data from Google if you choose to sign in with Google.

We do not knowingly collect information from children under 13 (or under 16 in the EEA/UK without appropriate consent). We do not intentionally collect sensitive personal information (such as government ID numbers, precise geolocation, health data, or racial, religious, or biometric data) and ask that you not submit it.

To create and operate your account, host and play your songs, enable collaboration, messaging, communities and playlists, generate registration exports, and provide the AI assistant — performance of our contract with you.

To secure the Service, prevent fraud and abuse, debug, maintain records, and enforce our Terms — legitimate interests.

To publish blockchain anchor records at your request (song title, SongHub Work ID, and ownership names and percentages become permanently public) — your consent and our contract. Do not anchor data you wish to keep private.

To send optional product updates and to use non-essential analytics or cookies — your consent, which you may withdraw at any time.

To comply with legal obligations and respond to lawful requests — legal obligation.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use your songs or stems to train public or third-party generative AI models.

Your profile (name, photo, bio, links, role tags) is visible to other signed-in users so you can be found for collaboration. Songs you mark private are visible only to you and collaborators you authorize; songs you mark public are visible to other users. Community posts are visible to that community’s members. Messages are visible to the participants. Contact and affiliation details such as your email and publisher/IPI data are not exposed to other users.

We share personal information only with processors acting on our instructions: cloud hosting, database, storage and authentication (Supabase), application hosting and CDN, email delivery, AI model providers for assistant prompts, and the public Polygon blockchain for anchoring. We may also disclose information to comply with law, respond to valid legal process, protect rights and safety, or in connection with a merger or acquisition (with notice as required). We require processors to protect your data by contract, including GDPR Article 28 terms.

We operate in the United States, so personal information of EEA, UK, and Swiss users is transferred to the U.S. We rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum) plus supplementary technical measures such as encryption in transit and at rest. You may request a summary of the safeguards by emailing support@songhub.co.

We keep account and content data while your account is active and for a limited period afterward to resolve disputes, meet legal obligations, and complete backup rotation (ordinarily up to 90 days for backups). Logs are kept up to 12 months. Blockchain anchor records are permanent and cannot be altered or deleted.

We use encryption in transit (TLS) and at rest, hashed passwords, row-level security on database tables, private storage buckets with expiring signed links, role-based access controls, and least-privilege administrative access. No system is perfectly secure; keep your own archive of your master files and use a strong, unique password.

You have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, to withdraw consent at any time, and to lodge a complaint with your supervisory authority. We do not carry out automated decision-making that produces legal effects on you. To exercise these rights, email support@songhub.co; we respond within one month.

California residents have the right to know and access the categories and specific pieces of personal information collected, the sources, purposes, and recipients; the right to delete; the right to correct; the right to opt out of sale or sharing (we do neither) and of profiling; the right to limit use of sensitive personal information (we do not use it for inferences); and the right not to be discriminated or retaliated against for exercising these rights.

Categories collected in the last 12 months: identifiers, customer records (name, email, account credentials), commercial information, internet/network activity, audio and visual information (your uploads and photos), professional information (PRO/publisher affiliation), and inferences drawn only to operate the Service. Business purposes are described in Section 2, and recipients in Section 4. We do not sell or share personal information, including that of consumers under 16.

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have comparable rights to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and profiling, plus a right to appeal a denial. Submit requests to support@songhub.co (you may use an authorized agent); we verify requests through your account email and respond within 45 days, extendable once. To appeal, reply with “Privacy Appeal” in the subject.

We honor Global Privacy Control and similar opt-out preference signals where applicable.

We use strictly necessary cookies and local storage to keep you signed in and to remember preferences. We do not use advertising cookies. Any optional analytics are deployed only with consent where consent is legally required, and you may withdraw consent or clear storage in your browser at any time.

We will post updates here with a new effective date and, for material changes, provide additional notice. Controller: SongHub LLC. Privacy contact: support@songhub.co.