Privacy Policy

This policy explains what personal data Loud (stayloud.co) collects, why, and what you can do about it. Contact: hello@stayloud.co.

It covers three groups of people: artists who use Loud, fans who sign up on an artist's page, and visitors of any Loud page.

1. Who is responsible for your data

• Artists and visitors: Loud is the controller (in Colombia, responsable del tratamiento).
• Fans: the artist whose list you joined is the controller of your data. Loud processes it on the artist's behalf and only to provide the service (in Colombia, encargado del tratamiento). You can contact the artist through their page, or write to us and we will help.

2. What we collect

Artists

• Account data: name and email from your Google sign-in.
• Artist data you give us or that we find in public sources linked to your Spotify profile: artist name, photos, releases, videos, genres, city, social links and, when available, a Wikipedia summary.
• What you add: bio, contact emails for booking or management, Instagram username, shows and links.
• Billing: handled by Paddle (see section 4). We receive your plan status and country, not your card.
• Usage of your pages: visits, clicks and sign-ups, counted without cookies.

Fans

• Email and city. Each artist can also ask for first name, country, WhatsApp number or birthday; the sign-up form shows which ones.
• Proof of consent: the version of the text you accepted, its language, the page and the date and time.
• Whether you opened or clicked an artist's email, and unsubscribes, bounces and complaints.

Visitors

• Our hosting provider keeps technical logs (such as IP address and browser) for security and to keep the service running. We do not use advertising or tracking cookies.

3. Why we use it

• To create and run your site, link in bio and account (contract).
• To store a fan's sign-up and let the artist email them with news, releases and shows in their city (consent, which you can withdraw at any time with the unsubscribe link).
• To keep Loud secure, prevent abuse and impersonation, and meet legal obligations (legitimate interest and legal obligation).
• To send artists service emails, such as new fans, detected releases or billing notices (contract and legitimate interest).
• To understand aggregated, anonymous trends, such as which cities have more fans. We never publish anything that identifies a fan.

We do not sell personal data. We do not use fans' data to market other artists.

4. Who we share it with

Only with providers that help us run Loud, under agreements that protect your data:

• Vercel (hosting, United States)
• Supabase (database, United States)
• Resend (email delivery, on Amazon Web Services)
• Paddle (payments; Paddle is the Merchant of Record for purchases)
• Google (sign-in with Google, YouTube data)
• ImprovMX (forwarding of emails sent to @stayloud.co)

We may also share data if the law requires it, or to protect the rights and safety of people.

5. International transfers

Our providers store data outside Colombia, mainly in the United States and Brazil. When we transfer data, we rely on the safeguards available under applicable law, such as standard contractual clauses.

6. How long we keep it

• Artist account data: while the account is active. After you delete your account, your site goes offline and your data is deleted within 30 days, except what we must keep by law (for example, billing records).
• Fans: while the artist keeps their list. If a fan unsubscribes, we keep only their email in a suppression list so they are not emailed again.
• Server logs: for the time our providers keep them, usually a few weeks.

7. Your rights

Depending on where you live (including Colombia's Law 1581 of 2012, the EU and UK GDPR and US state laws), you can:

• know what data we have about you and get a copy;
• correct it;
• delete it;
• object to or restrict some uses;
• withdraw consent at any time;
• complain to your data protection authority (in Colombia, the Superintendencia de Industria y Comercio).

Fans can unsubscribe with the link in any email. For anything else, write to hello@stayloud.co. We answer within 15 business days.

8. Children

Loud is not directed to children under 13, and artists' accounts require being an adult. We do not knowingly collect data from children under 13. If you think a child gave us data, write to us and we will delete it.

9. Security

We use encryption in transit, access controls and providers with strong security practices. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

10. Changes

We may update this policy. If a change is important, we will tell artists by email and show a notice on Loud before it applies.

11. Contact

Loud · Medellín, Colombia · hello@stayloud.co