This Privacy Policy explains how Coldbeatz ("we", "us", "our") collects, uses, stores, and shares personal information when you use our beat marketplace Platform.
1. Who we are
Coldbeatz operates an online marketplace connecting music producers and buyers. For privacy inquiries, contact privacy@coldbeatz.com.
2. Information we collect
Account and profile data
When you register or update your profile, we collect:
- Email address, display name, password (hashed by Supabase Auth)
- Role (producer or buyer), avatar, bio, social links
- Phone number, currency preference
- OAuth profile data if you sign in with Google (name, avatar)
Stored in: profiles table and Supabase Auth.
Producer compliance data
Producers may provide:
- Legal name, tax ID, legal address, country
- Identity/tax documents uploaded during beat submission (stored in private storage)
- Payout account reference from Bachs Connect onboarding (we store the connected account ID, not full payout credentials)
Marketplace activity
- Beats uploaded (metadata, audio files, cover art)
- Purchases, cart items, license types, transaction references
- Inquiries between buyers and producers
- Play counts, download counts
- In-app notifications
- Followers and subscription history
Payment data
Bachs processes payments. We store transaction references, amounts, commission splits, and payout records. We do not store card numbers or full bank account numbers.
Cookies and local storage
See our Cookie Policy. We use essential cookies (auth session, cart, currency), and optional analytics (Plausible) and marketing cookies with your consent.
Newsletter
If you subscribe to marketing emails, we store your email address and consent status in newsletter_subscribers and/or profiles.marketing_opt_in.
Logs
Server logs may include IP addresses, request metadata, and user IDs for security and debugging. Passwords and tokens are redacted.
3. How we use information
We use personal data to:
- Provide and improve the Platform (accounts, uploads, purchases, downloads)
- Process payments and producer split payouts via Bachs
- Send in-app notifications (sales, inquiries, moderation, purchases)
- Send marketing emails when you have opted in
- Enforce Terms, prevent fraud, and comply with law
- Analyze usage (with analytics consent) to improve the product
4. Legal bases
Depending on your location, we rely on:
- Contract — providing services you signed up for
- Legitimate interests — security, fraud prevention, product improvement
- Consent — analytics cookies, marketing emails, optional newsletters
- Legal obligation — tax, financial, and regulatory record-keeping
5. How we share information
We share data with service providers who assist us:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, file storage |
| Bachs | Payment processing and producer split payouts |
| Plausible | Privacy-friendly analytics (consent required) |
| Vercel | Application hosting |
We do not sell your personal information. We may disclose information if required by law, to protect rights and safety, or in connection with a business transfer.
Producer profiles (display name, avatar, bio, public beats) are publicly visible on the marketplace by design.
6. Data retention
- Account data — retained while your account is active
- Purchase records — retained for tax, audit, and license proof (typically 7+ years or as required by law)
- Anonymized accounts — upon deletion request, personal identifiers are removed but transaction records may be kept in de-identified form
- Newsletter — until you unsubscribe
- Cookie consent — 1 year in browser storage
7. Security
We use industry-standard measures including encrypted connections (HTTPS), Supabase Row Level Security, and service-role access only where necessary. No system is 100% secure; report concerns to privacy@coldbeatz.com.
8. International users
Coldbeatz is operated from Ghana. If you access the Platform from the EU, UK, or other regions, you may have additional rights under local law (see Section 9). Data may be processed in countries where our providers operate.
9. Your rights
Depending on applicable law (including Ghana's Data Protection Act, 2012, Act 843, and GDPR where applicable), you may have the right to:
- Access — request a copy of your data (use Download my data in Settings)
- Rectification — update profile information in Settings or Profile
- Erasure — request account deletion in Settings (subject to legal retention exceptions)
- Restrict or object — to certain processing, including marketing
- Portability — receive data in a structured format via export
- Withdraw consent — for cookies (banner/settings) and marketing (Settings or unsubscribe)
To exercise rights, contact privacy@coldbeatz.com or use in-app tools in Settings. We respond within 30 days where required.
Account deletion
When you delete your account:
- Your profile is anonymized (name, bio, avatar, contact details removed)
- Your beats are removed from the marketplace (soft-deleted; files may be retained for existing license holders)
- Purchase and payout records are preserved for legal and tax compliance
- You will be signed out and unable to log in
Marketing opt-out
Unsubscribe from marketing emails via the link in any email or at /unsubscribe?token=.... You can also toggle newsletter preferences in Settings.
10. Children
The Platform is not intended for users under 18. We do not knowingly collect data from children. Contact us if you believe a child has provided personal information.
11. Changes to this policy
We will update this page when practices change. Material changes may require renewed consent. Check the "Last updated" date above.
12. Contact
Coldbeatz — Privacy
Email: privacy@coldbeatz.com
Support: support@coldbeatz.com