Privacy Policy

Last updated: 16 April 2026 · Effective: 16 April 2026

SpinLoud, Inc. ("SpinLoud", "we", "us", "our") provides a professional background music service for businesses — the SpinLoud Venue application (the "Service"). This Privacy Policy explains what personal information we collect, how we use it, and the rights you have over it.

1. Who this policy applies to

This policy covers (a) the account holder — the business or individual who creates a SpinLoud account — and (b) that account's authorized team members (brand managers, venue managers, staff). It does not cover end customers of the venue (the people sitting in the café, bar, restaurant, etc.); the venue operator is responsible for any information they collect from those customers directly.

2. Information we collect

• Account information: email address, password (stored as a one-way hash), name, business name, phone number, postal address, country, and timezone.
• Venue information: venue name, address, opening hours, logo, timezone, playlist preferences, and channel configuration.
• Payment information: processed by Stripe, Inc. We do not see or store card numbers. We retain Stripe customer IDs, invoice history, and subscription status.
• Device information: when the SpinLoud Venue application runs on a device, we record a device identifier, the active venue and zone, playback state, software version, and approximate geographic region (inferred from IP address — not GPS).
• Listening analytics: the tracks your venues play, play timestamps, skip events, and volume changes. Used for reporting, rotation analytics, and royalty accounting.
• Support correspondence: emails and tickets you send us, plus our replies.
• Usage logs: IP address, browser or app version, operating system, crash reports, and interaction events (page views, clicks) necessary to operate and secure the Service.

3. Information we do NOT collect

• We do not collect microphone, camera, or live audio input from your devices. The Service only plays back music files delivered by our CDN.
• We do not collect precise GPS coordinates.
• We do not sell or rent your personal information to third parties.
• We do not use your data for advertising or profile-based ad targeting.

4. How we use information

• To operate the Service — authenticate you, stream music to your registered venues, process subscription billing, and deliver support.
• To generate usage reports you see in your account dashboard.
• To report aggregated, anonymized play counts to licensing bodies and rights holders as required by music licensing agreements.
• To prevent fraud, abuse, and unauthorized access.
• To send service-related communications (billing receipts, security alerts, outage notifications). You cannot opt out of these while you hold an active subscription.
• To send optional marketing communications — only if you opt in.

5. How we share information

We share personal information only with service providers that operate parts of the Service on our behalf, under confidentiality agreements:

• Amazon Web Services, Inc. — cloud hosting, database, media CDN (eu-central-1 region).
• Stripe, Inc. — payment processing.
• SMTP and email delivery providers — transactional emails.
• Anthropic, PBC — AI-assisted rotation planning and weather/event analysis on anonymized data.
• OpenWeather Ltd. — weather data for venue locations.
• MusicBrainz — artist metadata enrichment.
• Microsoft Corporation, Apple Inc., Google LLC — only with respect to the respective Store listings, device push notifications, and crash reporting for the applications they distribute.

We may disclose information if required by law, to comply with valid legal process, to protect our rights, or in the context of a merger or acquisition (with the same protections continuing to apply).

6. Where we store information

Personal information and listening analytics are stored on AWS servers in Frankfurt, Germany (eu-central-1). Payment data is stored by Stripe in accordance with their privacy policy. We do not intentionally transfer your data outside the European Economic Area except as necessary to provide the Service (for example, when the AI and metadata providers listed above process data in the United States).

7. Data retention

• Account records: kept for as long as the account is active, plus a reasonable period after closure to satisfy accounting and legal obligations (generally up to 10 years for tax records in the European Union and Turkey).
• Listening analytics: retained for reporting and royalty accounting for up to 3 years, then aggregated and anonymized.
• Support correspondence: kept for 3 years from the last interaction.
• Security logs: up to 12 months.

8. Your rights

Depending on where you are based, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and the associated personal information, subject to the retention periods above.
• Export your account data in a machine-readable format.
• Object to or restrict certain processing activities.
• Withdraw consent to optional processing (for example, marketing emails) at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@spinloud.com. We respond within 30 days.

9. Security

We protect your data with industry-standard measures: HTTPS/TLS for all network traffic, bcrypt password hashing, encrypted database storage at rest, role-based access controls, and quarterly security reviews. No system is perfectly secure; if we ever detect a breach that affects you, we will notify you without undue delay.

10. Children

SpinLoud Venue is a B2B service for businesses and is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, contact privacy@spinloud.com and we will promptly delete it.

11. Cookies and similar technologies

The web version of the Service uses strictly necessary cookies for authentication and session management. We do not use advertising or third-party tracking cookies. The desktop and mobile applications store equivalent authentication tokens in the operating system's secure storage.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced by email to the account holder at least 30 days before taking effect. The "Last updated" date above always reflects the current version.

13. Contact

SpinLoud, Inc.
Email: privacy@spinloud.com
Support: support@spinloud.com
Website: https://spinloud.com