Last updated: September 27, 2026
1. Data Controller
Cloosi is operated from the United States. For the purposes of the EU General Data Protection Regulation (GDPR), Cloosi is the data controller responsible for your personal data.
Contact: privacy@cloosi.com
2. Information We Collect
Information You Provide
- Email address when you create an account (we use passwordless sign-in and never store passwords)
- Profile information: display name, first name, last name, bio, city, state, country, profile picture, and up to three profile links
- Artist application details: artist name, genres, represented groups, platform links, and other information you submit for review
- Collective listings: collective name, description, photo, city, country, Instagram handle, and member artists
- Music and artwork you upload, along with track titles, prices, and descriptions
- Music preferences expressed through likes, follows, and Top 8 selections
- Messages you send us, such as support or refund requests
Purchase and payout information
- Buyers: we keep records of what you bought, when, the amount, and its status (for example completed or refunded). Card details are collected and stored by Stripe; Cloosi never sees or stores full card numbers
- Artists: to receive payouts, you complete onboarding directly with Stripe, which collects your identity, tax, and bank information. Cloosi stores only your Stripe account identifier, account status, and sale and payout records
Information Collected Automatically
- Music listening activity (tracks played, play counts)
- Interaction data (likes, follows, profile views)
- Basic usage events (such as pages visited and buttons used), stored without names, emails, or other identifying details, to help us improve the Platform
- The date of your most recent sign-in, visible only to you and Cloosi administrators
- Authentication session data
What we do NOT collect: We do not store your IP address, user agent, device fingerprints, or precise geolocation data. We practice data minimization by design.
Public artist information from other platforms
For artist profiles, we may import publicly available information from SoundCloud and YouTube Music, such as track titles, artwork, release dates, and profile images, to display their music on Cloosi.
3. How We Use Your Information
- To create and maintain your account
- To review artist applications and collective listings
- To host, stream, and deliver uploaded music, including downloads for buyers
- To process purchases, refunds, and artist payouts through Stripe, and to show artists their sales
- To provide personalized music discovery and recommendations
- To enable social features (following artists, sharing playlists, Top 8)
- To display aggregated listening metrics (trending tracks, play counts)
- To send account emails, such as sign-in links, application updates, and receipts
- To check profile links for malicious or unsafe websites
- To enforce our Terms of Service and community standards
- To improve and develop new Platform features
4. Legal Bases for Processing (GDPR)
If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:
- Contract Performance: Processing necessary to provide the Platform services you signed up for (account creation, music discovery, purchases, payouts, social features)
- Legitimate Interest: Processing for Platform improvement, security, fraud prevention, and aggregated analytics, where our interests do not override your fundamental rights
- Consent: Where you have given explicit consent for specific processing activities. You may withdraw consent at any time
- Legal Obligation: Processing necessary to comply with applicable laws, including tax and financial record-keeping
5. Data Sharing
We do not sell your personal information. We may share data in limited circumstances:
- Public profiles: Artist profiles and approved collectives are public. Listener profile information you choose to make public, including optional location and links, is visible to others
- Aggregated Metrics: Artist profiles display aggregated listening metrics (play counts, follower counts)
- Artists you buy from: Artists can see their sales (track, amount, date, status). We do not share buyers' email addresses or payment details with artists
- Service Providers: We use trusted providers to run the Platform, listed in the next section, who process data on our behalf
- Third-Party Embeds: When you play synced music, embedded players from SoundCloud and YouTube Music may collect data according to their own privacy policies
- Legal Requirements: When required by law, subpoena, or court order, or to protect our rights or the safety of our users
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity
6. Third-Party Services
Our Platform integrates with the following third-party services:
- Supabase: Authentication, database, and file storage (including uploaded music and images)
- Stripe: Payment processing, refunds, and artist payouts through Stripe Connect. Stripe's privacy policy applies to information you give Stripe directly
- Resend: Delivery of sign-in and account emails
- SoundCloud: Music playback via embedded player and import of public artist information
- YouTube Music: Music playback via embedded player and import of public artist information. Google's privacy policy applies
We encourage you to review the privacy policies of these services.
7. International Data Transfers
Cloosi is based in the United States. If you are located outside the United States, your personal data will be transferred to and processed in the United States. For users in the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and other appropriate safeguards to ensure adequate protection of your data during international transfers.
8. Data Retention
- Account Data: Retained while your account is active. When you delete your account, it is hidden immediately and can be restored for 30 days. After 30 days, your profile, likes, follows, uploaded music, and managed collectives are permanently deleted
- Switching from artist to listener: Your artist profile and music are hidden and kept for 30 days so you can switch back, then permanently deleted
- Purchases and sales: Transaction records, and tracks that buyers purchased, are kept after account deletion so buyers keep access and we can meet tax, accounting, and payment obligations
- Listening Activity: Play history and interaction data is retained while your account is active and deleted with your account
- Aggregated Data: Anonymized, aggregated metrics (e.g., total play counts) may be retained indefinitely as they cannot be linked to individual users
9. Your Rights
All Users
- Access and review your personal information through your profile settings
- Correct inaccurate information
- Delete your account and associated data
- Opt out of non-essential communications
Additional Rights for EEA/UK/Swiss Users (GDPR)
- Right of Access: Request a copy of all personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restriction: Request that we restrict processing of your data in certain circumstances
- Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Where processing is based on consent, withdraw at any time without affecting prior processing
- Right to Lodge a Complaint: File a complaint with your local data protection supervisory authority
To exercise any of these rights, contact us at privacy@cloosi.com. We will respond within 30 days (or within the timeframe required by applicable law).
California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out of Sale: We do not sell personal information. No opt-out is necessary
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To exercise your CCPA/CPRA rights, contact us at privacy@cloosi.com.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. Authentication is handled by Supabase with industry-standard security practices. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Children's Privacy
The Platform is not directed to children under 13 (United States) or under 16 (European Economic Area). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected data from a child below the applicable age, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at privacy@cloosi.com.
12. Cookies and Similar Technologies
We use essential cookies and browser storage to keep you signed in, remember playback, and remember choices such as dismissed notices. We do not use advertising or tracking cookies. Stripe may set cookies during checkout for fraud prevention. Third-party embeds (SoundCloud, YouTube) may set their own cookies when you interact with embedded content; these are governed by their respective privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email or an in-platform notice. Your continued use of the Platform after changes constitutes acceptance.
14. Contact Us
If you have questions about this Privacy Policy, wish to exercise your data rights, or have a privacy concern, please contact us:
Email: privacy@cloosi.com
Subject: Privacy Inquiry
For GDPR-related inquiries, you may also contact your local data protection authority.