Privacy Policy

Last updated: 2026-10-17

This policy explains what personal data Loud (stayloud.co) collects, why, and what you can do about it. Contact: hello@stayloud.co.

It covers three groups of people: artists who use Loud, fans who sign up on an artist's page, and visitors of any Loud page.

1. Who is responsible for your data

  • Artists and visitors: Loud is the controller (in Colombia, responsable del tratamiento).
  • Fans: the artist whose list you joined is the controller of your data. Loud processes it on the artist's behalf and only to provide the service (in Colombia, encargado del tratamiento). You can contact the artist through their page, or write to us and we will help.

2. What we collect

Artists

  • Account data: name and email from your Google sign-in.
  • The email you give before seeing your site, to save your site so you can come back to it, and to write to you about it. You can ask us to delete it at any time.
  • Artist data you give us or that we find in public sources linked to your Spotify profile: artist name, photos, releases, videos, genres, city, social links and, when available, a Wikipedia summary.
  • What you add: bio, contact emails for booking or management, Instagram username, shows and links.
  • Billing: handled by Paddle (see section 4). We receive your plan status and country, not your card.
  • Usage of your pages: visits, clicks and sign-ups, counted without cookies.

Fans

  • Email and city. Each artist can also ask for first name, country, WhatsApp number or birthday; the sign-up form shows which ones.
  • Proof of consent: the version of the text you accepted, its language, the page and the date and time.
  • Whether you opened or clicked an artist's email, and unsubscribes, bounces and complaints.

Visitors

  • Our hosting provider keeps technical logs (such as IP address and browser) for security and to keep the service running. Artists' sites, link in bio and song pages have no advertising cookies.
  • On stayloud.co itself we count visits and the steps of creating a site (for example, opening the sign-up or creating an account) the same way as artists' pages: without cookies, with no IP address or browser stored, only the country and where the visit came from.
  • On Loud's own pages (the home page, the blog, sign-up and these legal pages) we also use Google Analytics to understand how people find and use Loud. It sets analytics cookies; in the European Economic Area, the United Kingdom, Switzerland and Brazil it runs without cookies. Google processes this data under its own policy (policies.google.com/privacy). It is never used on artists' sites, link in bio or song pages, and never for advertising.
  • On the same pages we use the Meta Pixel to measure Loud's own ads on Instagram and Facebook (whether someone who saw an ad built a site). It sets cookies and sends Meta your visit, never the artist you looked up or your email. It doesn't load in the European Economic Area, the United Kingdom, Switzerland or Brazil, nor with Do Not Track or Global Privacy Control on. Meta processes this data under its own policy (facebook.com/privacy/policy). It is never used on artists' sites, link in bio or song pages.

3. Why we use it

  • To create and run your site, link in bio and account (contract).
  • To store a fan's sign-up and let the artist email them with news, releases and shows in their city (consent, which you can withdraw at any time with the unsubscribe link).
  • To keep Loud secure, prevent abuse and impersonation, and meet legal obligations (legitimate interest and legal obligation).
  • To send artists service emails, such as new fans, detected releases or billing notices (contract and legitimate interest).
  • To understand aggregated, anonymous trends, such as which cities have more fans. We never publish anything that identifies a fan.

We do not sell personal data. We do not use fans' data to market other artists.

4. Who we share it with

Only with providers that help us run Loud, under agreements that protect your data:

  • Vercel (hosting, United States)
  • Supabase (database, United States)
  • Resend (email delivery, on Amazon Web Services)
  • Paddle (payments; Paddle is the Merchant of Record for purchases)
  • Google (sign-in with Google, YouTube data)
  • ImprovMX (forwarding of emails sent to @stayloud.co)

We may also share data if the law requires it, or to protect the rights and safety of people.

YouTube and Google data

Loud uses YouTube API Services. By using Loud's YouTube features you agree to the YouTube Terms of Service, and Google's use of data is covered by the Google Privacy Policy.

  • Public videos: we show the public videos of the artist's YouTube channel on their site.
  • Confirm with YouTube: well-known artists can confirm their site by signing in with the Google account that manages their YouTube channel. With the read-only permission they grant (youtube.readonly), we read only the list of channel IDs that account manages, compare it with the artist's official channel, and record whether it matched. We do not store the access token (we revoke it right away), and we do not read or keep videos, comments, subscribers or any other account data.
  • You can remove Loud's access at any time in your Google Account permissions.

Loud's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

5. International transfers

Our providers store data outside Colombia, mainly in the United States and Brazil. When we transfer data, we rely on the safeguards available under applicable law, such as standard contractual clauses.

6. How long we keep it

  • Artist account data: while the account is active. After you delete your account, your site goes offline and your data is deleted within 30 days, except what we must keep by law (for example, billing records).
  • Fans: while the artist keeps their list. If a fan unsubscribes, we keep only their email in a suppression list so they are not emailed again.
  • Server logs: for the time our providers keep them, usually a few weeks.

7. Your rights

Depending on where you live (including Colombia's Law 1581 of 2012, the EU and UK GDPR and US state laws), you can:

  • know what data we have about you and get a copy;
  • correct it;
  • delete it;
  • object to or restrict some uses;
  • withdraw consent at any time;
  • complain to your data protection authority (in Colombia, the Superintendencia de Industria y Comercio).

Fans can unsubscribe with the link in any email. For anything else, write to hello@stayloud.co. We answer within 15 business days.

8. Children

Loud is not directed to children under 13, and artists' accounts require being an adult. We do not knowingly collect data from children under 13. If you think a child gave us data, write to us and we will delete it.

9. Security

We use encryption in transit, access controls and providers with strong security practices. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

10. Changes

We may update this policy. If a change is important, we will tell artists by email and show a notice on Loud before it applies.

11. Contact

Loud · Medellín, Colombia · hello@stayloud.co