Privacy Policy

Last Updated: January 1, 2025

This Privacy Policy describes how Transfer Tunes LLC ("we," "us," or "our") collects, uses, and protects your personal information when you use our website and services (the "Service").

1. Information We Collect

1.1 Information You Provide Directly

When you create an account or use our Service, we collect:

Information Type	Purpose	Examples
Account Information	Create and manage your account	Email address, password (encrypted), name (optional)
Payment Information	Process Premium subscriptions	Credit card details (processed by Stripe, not stored by us)
Communication Data	Provide customer support	Support tickets, email correspondence

1.2 Platform Authorization Data

When you authorize Transfer Tunes to access your music streaming accounts, we temporarily collect:

• Playlist Metadata: Song titles, artist names, album names, playlist names
• Artist Follows: List of artists you follow (if using artist transfer feature)
• OAuth Tokens: Encrypted access tokens to communicate with streaming platforms

1.3 Automatically Collected Information

We automatically collect certain information when you use our Service:

• Usage Data: Pages visited, features used, transfer success rates, time spent on site
• Device Information: Browser type, operating system, screen resolution, device type
• Location Data: Approximate location based on IP address (country/region level only)
• Cookies and Tracking: See our Cookie Policy for details

1.4 Third-Party Analytics

We use the following analytics services to understand how users interact with our Service:

• Google Analytics: Website traffic and user behavior analysis
• Microsoft Clarity: Session recordings and heatmaps (anonymized)

These services may collect information about your use of our Service. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Provide Our Service

• Transfer playlists between your authorized streaming platforms
• Match songs using our smart matching algorithms
• Generate export files (CSV, JSON, M3U)
• Transfer artist follows between platforms
• Create purchase export links to music retailers

2.2 Maintain and Improve Our Service

• Analyze usage patterns to improve features
• Identify and fix technical issues
• Develop new features and functionality
• Test and optimize matching algorithms
• Monitor service performance and reliability

2.3 Process Payments

• Manage Premium subscriptions
• Process billing and payments (via Stripe)
• Send invoices and payment confirmations
• Handle refund requests (when applicable)

2.4 Communicate With You

• Respond to support inquiries and questions
• Send service announcements and updates
• Notify you of changes to our Terms or Privacy Policy
• Send marketing communications (only with consent - you can opt out)

2.5 Ensure Security and Prevent Fraud

• Detect and prevent unauthorized access
• Identify fraudulent activity or payment abuse
• Enforce our Terms of Service
• Comply with legal obligations

3. How We Share Your Information

3.1 Music Streaming Platforms

When you authorize Transfer Tunes to access your streaming accounts:

• We send API requests to streaming platforms using your OAuth tokens
• We share only the playlist metadata necessary for transfers
• Each platform has its own privacy policy governing their data handling
• You can revoke our access at any time through each platform's settings

3.2 Payment Processors

We use Stripe to process Premium subscription payments. When you subscribe:

• Your payment information is transmitted directly to Stripe
• We do not store your full credit card details on our servers
• Stripe's privacy policy governs their handling of payment data
• We receive only transaction confirmations and billing status

3.3 Service Providers

We may share information with trusted third-party service providers who assist us, including:

• Cloudflare: Website hosting and content delivery
• Google Workspace: Email communication and support
• Analytics Services: Google Analytics, Microsoft Clarity

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

3.4 Affiliate Partners

When you use our purchase export feature:

• We provide referral links to music retailers (Bandcamp, Qobuz, HDtracks, etc.)
• These retailers may track clicks from our affiliate links
• We do not share your playlist data with retailers
• Each retailer's privacy policy governs their data practices

3.5 Legal Requirements

We may disclose your information if required by law or if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect the rights, property, or safety of Transfer Tunes, our users, or others
• Prevent fraud or security threats
• Enforce our Terms of Service

3.6 Business Transfers

If Transfer Tunes is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4. Data Retention and Deletion

4.1 How Long We Keep Your Data

Data Type	Retention Period	Reason
Playlist Metadata	Deleted immediately after transfer	We process in real-time and don't store playlists
OAuth Tokens	While authorized (you can revoke anytime)	Required to access streaming platforms
Account Information	While account is active	Provide ongoing service
Payment Records	7 years	Tax and legal compliance requirements
Support Communications	2 years	Quality assurance and issue resolution
Usage Analytics	26 months (Google Analytics default)	Service improvement and feature development

4.2 Deleting Your Data

You have the right to request deletion of your personal information. You can:

• Delete your account: Through account settings (deletes all account data)
• Revoke platform access: Through each streaming platform's settings
• Request data deletion: Email privacy@transfertunes.com

When you delete your account, we will:

• Immediately delete your account information and preferences
• Remove your OAuth tokens and platform authorizations
• Anonymize any analytics data (cannot be tied back to you)
• Retain only what's legally required (payment records for tax compliance)

5. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

5.1 General Rights (All Users)

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications

5.2 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), UK, or Switzerland, you have additional rights under GDPR:

• Right to Object: Object to processing of your personal data
• Right to Restriction: Request restriction of processing
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Legal Basis for Processing (GDPR):

• Contract Performance: Providing the Service you requested
• Legitimate Interests: Improving our Service, preventing fraud
• Consent: Marketing communications (you can withdraw anytime)
• Legal Obligation: Complying with tax and financial regulations

5.3 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about data we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the "sale" of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of exercising privacy rights

5.4 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: privacy@transfertunes.com
• Subject Line: "Privacy Rights Request"
• Include: Your name, email, and specific request

We will respond within 30 days. We may request verification of your identity before processing requests.

6. Data Security

We implement industry-standard security measures to protect your information:

6.1 Technical Safeguards

• Encryption: All data transmitted over HTTPS/SSL (256-bit encryption)
• Password Protection: Passwords are hashed using bcrypt (never stored in plain text)
• OAuth Security: Access tokens are encrypted and stored securely
• Database Security: Encrypted databases with restricted access
• Regular Updates: Security patches and software updates applied promptly

6.2 Operational Safeguards

• Access Controls: Limited employee access to personal information (need-to-know basis)
• Monitoring: Automated security monitoring and threat detection
• Audits: Regular security audits and vulnerability assessments
• Incident Response: Documented procedures for security incidents

6.3 Limitations

7. International Data Transfers

Transfer Tunes is based in the United States. If you access our Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries.

These countries may have different data protection laws than your country of residence. By using our Service, you consent to the transfer of your information to the United States and other countries where we operate.

For European users, we ensure appropriate safeguards are in place for international transfers in accordance with GDPR requirements.

8. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@transfertunes.com. We will delete such information promptly.

Users between 13 and 18 should have permission from a parent or guardian before using our Service.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies. For detailed information about the cookies we use and your choices, please see our Cookie Policy.

Quick Summary:

• Essential cookies (required for service functionality)
• Analytics cookies (Google Analytics, Microsoft Clarity)
• Preference cookies (save your settings)

You can control cookies through your browser settings, but disabling certain cookies may affect service functionality.

10. Third-Party Links and Services

Our Service contains links to third-party websites and services (music streaming platforms, purchase retailers, etc.).

We are not responsible for the privacy practices of third parties. When you leave our Service:

• You are subject to the privacy policy of that website or service
• We encourage you to review their privacy policies
• We have no control over their data practices

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our practices or services
• Legal or regulatory requirements
• Industry standards

When we make material changes, we will notify you by:

• Email to your registered address
• Prominent notice on our website
• In-app notification

The "Last Updated" date at the top of this policy indicates when it was last revised. Continued use of our Service after changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

---

← Back to Transfer Tunes