Privacy Policy

1. Who this notice covers

This notice describes PoweredBy, a PagePact company, and its artist-and-brand marketplace. The operator’s registered legal identity and privacy contact have not yet been provided and must be added to complete this notice.

2. Information you provide

• Account details: email address, artist or brand account type, display or company name, genre, and any Spotify artist URL.
• Campaign details: brand name, creative direction, genre, budget, currency, and CPM rate.
• Submission details: five stream counts, calculated median and payout, uploaded audio, Spotify proof, release links, review status, and the time you acknowledge licensing terms.
• Payment records: funding amounts, refunds, transaction references, connected payout account references, and payout setup status.

3. How information is used and shared

Account information supports sign-in and the correct artist or brand dashboard. Campaign and submission information supports matching, review, budget calculations, payments, and refunds.

Brands can see the name, email address, genre, stream counts, proof links, and audio of artists who apply to their campaigns. An artist’s email is shown to the reviewing brand so they can contact the artist. Do not put unrelated personal information into creative directions or uploaded tracks.

4. Services used by the marketplace

Lovable Cloud provides account authentication and storage for profiles, campaigns, submissions, and uploaded tracks. Account confirmation and password-reset emails use Lovable’s email service, which receives recipient addresses and the information needed for the email.

Stripe processes campaign payments, refunds, and Connect Express artist payouts. Information entered into Stripe Checkout or Stripe onboarding is sent to Stripe. Read Stripe’s privacy policy for its handling of that information.

Spotify links open Spotify when you choose to verify a track or visit an artist profile. Spotify handles that visit under its privacy policy. The site loads fonts from Google Fonts, which receives the browser request needed to serve them; see Google’s privacy policy.

5. Browser storage

Sign-in uses browser local storage to keep authentication session information so you can remain signed in. This is separate from visitor analytics. Stripe’s payment surfaces may use their own browser storage and cookies under Stripe’s policies.

6. Visitor analytics

On the published site, Lovable records pages visited, where visitors came from, country, browser, operating system, device type, time on page, page load speed, errors, and clicks on buttons and links. The editor preview is not counted.

With the site’s current setup, clicks are recorded for every visitor. Page visits, time on page, page speed, and errors are also recorded for every visitor, without cookies and without identifying anyone.

Lovable’s visitor analytics uses no cookies, stores nothing on the visitor’s device, does not keep IP addresses, and does not identify visitors. Detailed analytics data is kept for 90 days and daily summaries for a year.

Lovable collects this data for us. Lovable’s privacy policy explains how it handles it.

7. Retention and privacy requests

A retention schedule for account, campaign, submission, audio, and financial records has not yet been confirmed. The analytics retention periods above apply only to visitor analytics.

You can update available profile fields in your account. A privacy contact and process for access, correction, deletion, and other requests still need to be supplied by the operator. This notice does not promise a specific response time or deletion period.

8. Completing this notice

The operator must confirm the relevant legal bases, applicable privacy rights, international data-processing arrangements, retention periods, and contact details before finalizing this notice. No certification or regulatory compliance claim is made by this draft.