Privacy Policy

This Privacy Policy explains what information SpinCounts collects, how we use it, and the choices you have. By using the Service you agree to the practices described here.

1. Information We Collect

Account information you provide

• Name, email address, password (stored hashed) when you sign up
• Role-specific profile data: stage name, hometown, primary genre, streaming and social profile URLs, contact emails — depending on whether you sign up as an Artist or Station Owner
• Country

Payment information

If you subscribe to a paid plan, our payment processor Stripe, Inc. collects and stores your payment card details directly. SpinCounts does not see or store full card numbers. We receive only the last 4 digits, card brand, expiration, and a charge ID from Stripe.

Usage data

• Pages visited, features used, timestamps
• Reports you generate (track, date range, station list)
• IP address, browser type, device type (from server logs)

Content you submit

Anything you enter into editable fields (track titles, artist images, etc.).

Information from third parties

We enrich public catalog data using third-party APIs (Apple Music, Deezer, Spotify, YouTube, Last.fm). We do not receive personal data about you from these providers; we receive metadata about songs, artists, and albums.

2. How We Use Information

• Provide and operate the Service (run reports, deliver charts, charge subscriptions)
• Send transactional emails — welcome message, password resets, receipts, service notices
• Communicate about your account, support requests, and product updates
• Improve and secure the Service (debug errors, monitor for abuse)
• Comply with legal obligations and enforce our Terms

3. Legal Bases (EEA / UK users)

If you are in the European Economic Area or the United Kingdom, our lawful bases for processing are:

• Contract — to provide the Service you signed up for
• Legitimate interests — to secure, improve, and market the Service in a way that does not override your rights
• Consent — for marketing emails and any optional cookies (you can withdraw at any time)
• Legal obligation — to retain billing records, respond to lawful requests, and meet tax requirements

4. How We Share Information

We do not sell your personal information. We share it only with:

• Service providers who help us run the Service:
  • Stripe (payment processing) — privacy
  • SiteGround (hosting) — privacy
  • Email delivery providers (transactional mail)
• Legal & safety — if required to comply with the law, enforce our Terms, or protect rights, property, or safety
• Business transfers — in connection with a merger, acquisition, or asset sale, where the successor agrees to honor this Policy

We do not share or sell personal data for cross-context behavioral advertising.

5. Cookies & Local Storage

We use a small number of cookies and browser-storage entries to make the Service work. See our Cookie Notice for the full list.

6. Data Retention

• Account data — kept while your account is active, then deleted within 90 days of account closure (longer if required for legal or billing purposes)
• Billing records — retained for 7 years for tax and accounting
• Server logs — typically rotated within 30 days
• Generated reports — retained while your account is active; saved-report PDFs deleted on request

7. Your Rights

All users

• Access — request a copy of the personal data we hold about you
• Correction — update incorrect information from your dashboard or by emailing us
• Deletion — request deletion of your account and associated data
• Opt-out — unsubscribe from non-transactional emails using the link at the bottom of each message

EEA / UK residents (GDPR)

You have additional rights to restrict or object to processing, to data portability, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority.

California residents (CCPA / CPRA)

You have the right to know what categories of personal information we have collected, to delete that information, to correct inaccurate information, and to opt out of sale or sharing for cross-context behavioral advertising (we do not engage in such activities). We do not discriminate against users who exercise their privacy rights.

To exercise any right, email support@spincounts.com. We may need to verify your identity before responding.

8. Security

We use industry-standard measures including HTTPS, password hashing, server-side access controls, and isolated database storage. No system is fully secure; we cannot guarantee absolute protection. If we discover a breach affecting your data, we will notify you and applicable authorities as required by law.

9. International Data Transfers

SpinCounts is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to and stored in the U.S. Where applicable, transfers from the EEA or UK are made under Standard Contractual Clauses or another approved mechanism.

10. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

11. Changes to This Policy

We will update the Effective Date at the top when we make changes. Material updates will be announced via email or an in-app notice at least 14 days before they take effect.

12. Contact

Privacy questions or requests: support@spincounts.com. Or visit our Contact page.