Privacy Policy

We take the security of your information seriously. While no system is completely immune to breaches, here's what we do to keep your data protected:

• Encryption: Your data is encrypted both in transit (via TLS) and at rest (AES-256). This means your information is protected from the moment it leaves your device until it's stored on our servers.
• Access Control: We use row-level security policies, which means our team can only access data they need to do their job — and every access is logged and monitored. You own your data.
• Infrastructure: Our platform is hosted on Supabase, which is SOC 2 Type 2 compliant and regularly audited by third-party security firms. Each project runs on isolated database instances to prevent data leakage.
• No Third Parties: We don't sell your data to data brokers, analytics companies, or advertisers. Period.
• A note on risk: Despite these measures, no digital system is completely immune to breaches. If a security incident occurs, we commit to transparency — we'll notify affected users within 30 days and explain what happened and what steps we're taking.

We collect your name and email, the content of claims, messages, and files you submit, and profile information including date of birth, gender, ethnicity, sexuality, religion, location, the year you entered the industry, and your industry role.

• Date of birth: Helps us understand if certain issues affect different career stages or age groups differently.
• Gender: Gender disparities are real in music. We need to see them to advocate for change.
• Ethnicity: Racial and cultural barriers in music are documented. Understanding who's affected helps us push for systemic solutions.
• Sexuality: LGBTQ+ creators face specific challenges in the industry. Knowing this helps us identify and address them.
• Religion: Religious identity can affect access to opportunities, networks, and safety in music communities. Understanding this helps us identify faith-based barriers.
• Location: Geography affects opportunity and support networks. We need to see where issues are concentrated.
• Year started: Early-career folks face different barriers than veterans.
• Industry role: Different roles (artist, producer, engineer) face different systemic issues.

Only you and our moderation team. Claims are never public and are never shared with anyone mentioned in them. In the admin panel, claimants are anonymized by default and shown by initials. An administrator must deliberately reveal an identity, and every reveal is logged.

We do not sell your email address or personally identifying information.

Our intention is not to sell data. However, if we believe we can share anonymized data with companies making positive change in the music industry, that will be a transparent community discussion. If our privacy policy changes, you will receive a minimum of 30 days notice via email and the opportunity to opt out. You can opt out now using our contact form.

We send account emails and a confirmation when you file a claim. We do not send marketing email.

You can access, correct, export, or request deletion of your data. To request deletion, use the deletion form in your dashboard and include a reason so our team can review and process it. You may also contact us about your privacy rights.

We store account, profile, claim, and related data indefinitely unless you request deletion. Once a deletion request is approved and processed, the related account data is permanently removed.