YOUR DATA
Privacy policy
What we receive, how we use it and how you can stay in control. Submitting a project and receiving promotional updates are separate choices.
Last updated: September 27, 2026.
Who manages your data
Songtraction manages information received through this site to handle inquiries and assess potential artist development partnerships. You may contact the privacy team in English or Spanish at mysongtraction@gmail.com. You do not need to enter a contract or submit music to exercise your rights.
Information we receive
For project submissions we request your name, artist or project name, email, goal, listening link and context. You may provide project type, market, release timing, availability, team and existing rights commitments. Your phone number is optional unless you choose WhatsApp as your contact preference. General inquiries require a name, email and message.
We record the date, language, request identifiers, privacy version and authorizations you accept. For new project submissions we also record the submission version and your declaration that you are an adult authorized to share the material. Promotional updates are a separate choice.
We retain the landing page, referrer and UTM campaign parameters during the session and associate them with the submission. Landing and referring pages are stored without query strings or fragments. The server may log technical information for operation and abuse prevention. We do not request payment cards, passwords, identity documents or complete contracts in the initial submission.
How forms and WhatsApp work
When you submit a form, the data is sent to our server and saved in protected storage. The confirmation page only says we have received your request when the server confirms it has been recorded. WhatsApp is an optional follow-up channel; you do not need to open it for your request to be saved.
Email notifications supplement the record of your request. We use the Songtraction email account to review inquiries and respond through your chosen channel. Not receiving a confirmation email does not mean your request was not recorded.
If you choose to continue on WhatsApp, a link opens with a short message that may include your project name. That text is shared with the provider when the link opens; the team receives the message when you confirm sending it there. We do not include the rest of your form responses in that link. You can also email us directly.
WhatsApp processes account, device, and usage data under its own privacy policy.
How we use information
We use data to record and assess submissions, respond to inquiries, explore partnership fit, prepare agreements and, if formalized, coordinate their performance and administration. We also use it to handle privacy requests, prevent abuse and meet applicable obligations.
Permission to respond to your request is separate from receiving resources and updates. The latter is voluntary and unchecked by default. You may withdraw that consent by email at any time. We do not use submissions to create advertising audiences or make decisions with legal effects through exclusively automated processing.
Where a legal basis is required, processing relies on requested pre-contractual steps or a contract, legal obligations, consent where appropriate, or legitimate operational and security interests, taking your rights into account. Submission does not authorize commercial use of your music or its use to train artificial intelligence.
Your data is not for sale
We do not sell or rent your personal data. We do not share it with third parties so they can send you their own advertising or for cross-site behavioral advertising. We do not trade contact lists, inquiries, or project information.
The limited access providers need to host the website, handle a communication, or deliver a service is explained below. It does not authorize those providers to sell your data on Songtraction’s behalf.
Providers, recipients, and transfers
The site is hosted and its data stored through Hostinger. We use Google Gmail to receive and manage inquiries sent to our official email address. Choosing WhatsApp means using a Meta service. Hosting, email, and communication providers process the information needed for their functions under their own policies.
We may use Google technology services, including Google Workspace and Google Sheets, to organize inquiries, evaluate projects, manage follow-up and maintain a business history related to your inquiry. Information is saved in our private storage first and may be copied to the CRM for that internal purpose. Sending marketing resources, content and news still depends on your optional consent.
For a contracted project, we will share only the information needed with collaborators or providers involved in the work, subject to confidentiality and data protection obligations where appropriate. We may also disclose information when legally required or when necessary to establish, exercise, or defend a legal claim.
Some providers may process data in other countries. Where a transfer is subject to specific requirements, we will apply the required safeguards, such as adequacy decisions or appropriate contractual clauses. You can request information about the providers and safeguards relevant to your situation.
Cookies, language and tracking
We use technical storage that is necessary for site security, form operation, and temporary visit attribution. These essential functions do not depend on accepting analytics.
With your permission, we may use Google Analytics 4 to understand site usage in aggregate, such as pages visited, the general source of a visit, device type, and navigation interactions. Analytics is not used to build advertising audiences or for cross-site behavioral advertising. Information sent to Google Analytics must not include names, email addresses, phone numbers, form contents, submitted music, or other submission data.
Analytics remains disabled until you choose “Accept analytics.” If you choose “Essential only,” analytics storage remains denied. You can change your choice at any time through “Cookie preferences” in the footer. When permission is withdrawn, we attempt to remove Google Analytics cookies created on this domain. Browser controls remain available as well.
Google may process technical analytics data under its own terms and policies. We do not use Meta or TikTok pixels in this version. Subscribing to updates does not authorize analytics or advertising, and we do not sell or share data for cross-site advertising.
How long we keep data
We keep inquiries for as long as needed to respond and follow up on the requested project. If you purchase a service, we retain information during the relationship and afterward only for the periods needed for tax or accounting obligations and possible legal claims. The period depends on the type of data and applicable law.
Technical logs are retained according to the hosting service’s operational and security needs. When data is no longer needed, we delete or anonymize it unless retention is legally required. If we must keep some information when handling a deletion request, we will explain why and restrict its use.
Your rights and how to exercise them
You can request access to your data, information about its use, correction, or deletion. Depending on applicable law, you may also request portability, restrict processing, object to certain uses, and withdraw consent without affecting the lawfulness of earlier processing. You will not receive discriminatory treatment for exercising your rights.
Send us your request stating which right you wish to exercise and the channel you used to contact us. We will only ask for reasonable information to verify your identity or an authorized person’s representation. We will respond within the applicable legal deadline and explain any permitted extension or exception.
Where applicable, we will respect rights under the General Data Protection Regulation in the European Economic Area, UK rules, and privacy laws in your place of residence, including California rules for covered individuals and processing. You can complain to the competent authority and request a review of our response.
Security and confidentiality
We limit the use of and access to information to what is needed for the purposes described. We adopt reasonable safeguards and review the information we need to keep. No transmission or storage method is completely infallible; if an incident occurs, we will take steps to contain it and notify individuals and authorities where the law requires.
Do not send passwords, identity documents, or sensitive financial information through the forms or initial messages. If a service requires access to an account, we will agree on an appropriate authorization method limited to the contracted work.
Submissions involving minors
The form must be completed by someone at least 18 years old. If the project belongs to a minor, an authorized adult representative must make contact. We do not knowingly request data from children under 13 or minors’ sensitive documents. If we receive information from a minor without authorization, notify us so it can be reviewed and deleted where appropriate.
Updates and contact
We will update this policy when our practices or applicable requirements change and display the date of the new version. Material changes will be communicated through an appropriate channel, and we will request new consent where required. An update does not, by itself, authorize incompatible uses of data already received.