Privacy Policy

ReleaseTrax is operated from New Zealand. The responsible operator is identified on our Operator Information page. For privacy enquiries, contact releasetrax@gmail.com.

This policy applies to ReleaseTrax websites, accounts, Artist Pages, Link Pages, Scene, Channels, messaging, subscriptions and related services.

• Account information: display name, email address, authentication records, account status and settings.
• Artist information: artist name, URL slug, biography, genres, location, profile images, external links and verification information.
• Music and media: releases, tracklists, artwork, audio masters, playback derivatives, images, videos, embeds, events and Link Page content.
• Social activity: communities and Channels you join, posts, replies, messages, attachments, reactions, saves, mentions, applications, invitations and reports.
• Billing information: plan, subscription status, Stripe customer and transaction references, invoices, introductory-offer status and Upload Boost records. ReleaseTrax does not receive or store your complete card number.
• Technical information: device and browser information, request and security data, approximate country, referrer domain, cookie or storage identifiers and service logs.
• Support and safety information: correspondence, reports, appeals, moderation decisions and information provided to resolve ownership, safety or account disputes.

We collect information directly from you, automatically from your device and activity, from other ReleaseTrax users, from payment and infrastructure providers, and from public sources when you request automatic artist-page creation.

Automatic import may examine the public artist links you provide and public catalogue or profile information exposed by Spotify, YouTube, Apple/iTunes, SoundCloud, Bandcamp, Instagram and the wider web. We use this information to prepare the draft you requested, not to create unrelated profiles about people.

• Provide, personalise and maintain accounts, pages, music delivery, communities and messaging.
• Process subscriptions, confirm entitlements, manage storage and prevent duplicate or fraudulent payments.
• Build an artist-page draft when you request automatic importing.
• Operate discovery, notifications, search, analytics and audience insights.
• Enforce rules, respond to reports, prevent abuse and protect users and the platform.
• Provide support, comply with law and establish or defend legal claims.
• Improve ReleaseTrax using service-level trends and feedback.

Where European or UK data-protection law applies, these activities rely as appropriate on performing our contract with you, legitimate interests in operating and securing ReleaseTrax, consent, and compliance with legal obligations.

Artist Pages, published Link Pages, public releases, public events, public communities and public Channel content can be viewed and shared by anyone. Members-only or private content is shared with the audience indicated by the relevant settings, although recipients may still copy or disclose what they receive.

Do not publish personal information you do not want the selected audience to see. Location is displayed on an Artist Page only when the corresponding publication setting is enabled.

Link Page analytics record page views and outbound clicks using a randomly generated visitor identifier in local storage and a session identifier in session storage. Events may include the Link Page or block, destination category, referrer domain, approximate country and device category. Raw IP addresses are not stored in Link Page analytics events.

For security and abuse prevention, ReleaseTrax may temporarily process IP addresses and browser information and retain hashed IP, account or anonymous identifiers with rate-limit violations and security flags. These records help detect spam, account abuse, malicious uploads and repeated policy violations.

We disclose information only as needed to operate ReleaseTrax, follow your instructions, protect the service, complete a transaction or comply with law. Providers currently include:

• Supabase for authentication, database and application infrastructure.
• Cloudflare for media storage, delivery, image processing and network information.
• Stripe for subscriptions, invoices and payments.
• OpenAI for automatic artist-page research and structured drafting.
• Modal for audio-processing infrastructure.
• Spotify, Google/YouTube, Apple, SoundCloud, Bandcamp and Instagram when their links, APIs or embeds are used.

Some providers process information outside New Zealand. We use provider terms and other safeguards appropriate to the service and applicable law. More detail appears in the Third-Party Services Policy.

We may also disclose information to professional advisers, regulators, courts or law enforcement when reasonably necessary, or as part of a genuine business transfer subject to appropriate protection. We do not sell personal information.

We retain personal information only for as long as reasonably needed for the purposes described here, including providing an active account, maintaining shared conversations, resolving disputes, preventing abuse and satisfying legal obligations.

• Owner-deleted communities and Channels normally remain recoverable for 30 days before permanent purge.
• Media exceeding a downgraded account’s storage entitlement receives a 60-day grace period before becoming eligible for deletion.
• An approved account-deletion request will hide the public Artist Page and begin a 30-day recovery period before permanent deletion or de-identification.
• Payment, fraud, moderation, security and dispute records may be kept longer where reasonably required by law or for legitimate claims and platform protection.
• Backups and cached copies may take additional time to expire through normal secure rotation.

You can update much of your information through account settings and the Page Editor. Depending on where you live, you may also have rights to access, correct, delete, restrict, object to or receive a portable copy of personal information.

To request an account export or account deletion, email releasetrax@gmail.com from your registered email address. We may take reasonable steps to verify account ownership. The “Reset artist page” tool clears page material and onboarding state; it does not delete the ReleaseTrax account.

You may complain to us or to the privacy regulator available in your jurisdiction. New Zealand users may contact the Office of the Privacy Commissioner.

We use technical and organisational safeguards intended to protect information, including access controls, protected media delivery, service-role separation, rate limits and security monitoring. No online system is completely secure, so you should use a unique password and notify us promptly of suspected account misuse.

We may update this policy as ReleaseTrax changes. Material changes will be communicated reasonably, and renewed consent will be requested where required.

Privacy requests and questions may be sent to releasetrax@gmail.com.