Introduction
SongShift, LLC (“Company” or “We”) respect your privacy and are committed to protecting it through our compliance with this policy.
We recognize that the privacy of your information is important to you, and it is of paramount importance to us. Frankly, we believe the less we know about you, the better, and that is why we aim to limit the information we collect to the minimum necessary.
This privacy policy (this “Privacy Policy”) describes the types of information we may collect from you or that you may provide when you use our websites (the “Site”), mobile application(s) (the “App”), and other online products and services (“Services,” and collectively, with the Site and App, the “Platform”) and our practices for collecting, using, maintaining, protecting, and disclosing that information. Specifically, this Privacy Policy will address:
• Age Restrictions
• What Information We Collect About You
• How We Collect Information
• Company Partners May also Collect Information
• Collection within the United States
• How We Use the Information We Collect
• How We Share the Information We Collect
• How We Retain and Protect Your Information
• Third-Party Sites and Apps
• Accessing and Correcting Your Information
• Your Data Rights
• Changes to This Privacy Policy
• Contact Us
We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy, and in some cases, we may provide you with additional notice.
BY USING OR ACCESSING OUR PLATFORM, YOU AFFIRM YOUR CONSENT TO THE PRACTICES AND POLICIES SET OUT IN THIS PRIVACY POLICY. Your use of the Platform, and any dispute arising out of or in any way related to privacy, will be subject to this Privacy Policy and any other terms and conditions that are applicable to the Platform (the “Terms”), which are hereby incorporated into this Privacy Policy. If you do not agree to this Privacy Policy or the Terms, please do not use the Platform.
We reserve the right to revise our Privacy Policy at any time. If we modify our Privacy Policy, we will post those changes to this Privacy Policy page (and revise the date at the top) and, in some cases, we may provide you with additional notice that we deem appropriate (such as adding a statement to our blog, homepage or sending you a notification). Your continued use of or access to any portion of our Platform following the publication of the updated Privacy Policy on the Site or the App, as applicable, will constitute your assent to the updated Privacy Policy. We encourage you to review the Privacy Policy whenever you access the Platform or otherwise interact with us to stay informed about our information practices and the choices available to you.
If you have any questions regarding the Platform or this Privacy Policy, please contact us at support@songshift.com.
Age Restrictions
The Platform is not intended for persons under the age of 13 (a “Child”) and/or who is otherwise unable to enter into a contract (a “Minor”) without consent from such the parent or legal guardian of such Child User or Minor User, as applicable (“Parent”). By creating an account or using the Platform, you verify that you are not a Child User or Minor User. We do not knowingly collect personal information from a Minor or a Child. If we learn we have collected or received personal information from a Minor or a Child without verification of parental consent, we will delete that information. If you believe we might have any information from or about a person who is a Child User or Minor User without parental consent, please contact us at support@songshift.com.
What Information We Collect About You
When using the Platform, we collect anonymized information about specific actions within the Platform, such as Shift creation details, Shift completion details, purchase information, and SongShare usage. This information helps us improve the Platform by providing insight into where hiccups occur and highlighting areas for improvement. The personal data we collect does not include any device-specific information, and we aim to limit it in scope to only the minimum we need to provide you with the Services and validate your identify, which is done through the use of access tokens.
Here are some examples of what we collect and why:
- We use purchase receipts to validate the legitimacy of your subscription; although, the personal information used to perform this function is only used for this purpose and is not shared with anyone else, other than third party contractors that assist us in managing payments, refunds and subscriptions.
- When signing into music services, your username and password are exchanged for access tokens, which are then used to access the music service. In the event a music service does not support access tokens, your username and password are securely stored locally on your device “keychain,” which is a secure part of iOS/macOS that is responsible for securely storing your login information.
- When you use the Platform, we read your media library from your connected music service accounts. We read the contents of your library to perform the Services requested, such as transfer your music. We do not store any of your data on external servers, except for the QuickMatching service, which keeps your match results for a limited period (e.g., as needed to download the results and for a short period thereafter) and then delete the server version.
How We Collect Information
As you navigate through and interact with the Platform, we collect information through our in-house analytics service within the Platform, which was designed with privacy in mind and to only collect what is necessary. We do not use any third-party analytics software, and we do not use any third-party ad platforms. By using our in-house analytics service, we are better able to maintain minimal collections standards, keep data safe and prevent it from being resold or shared with anyone.
To be clear, we do not collect personal information automatically.
Company Partners May also Collect Information
We use the services and products of RevenueCat, Inc. (“RevenueCat”) to assist us in managing subscriptions, payments, refunds and other activities related to the Platform. Because of that relationship, RevenueCat has access to certain types of data, including data related to users of the Platform. Please consult RevenueCat’s privacy policy for information on data RevenueCat collects, how that data is used and related information: https://www.revenuecat.com/privacy/. In some cases, such as where refunds are requested, RevenueCat may share that information with third parties, like Apple.
RevenueCat may also provide some of that data to the Company. In most cases, that data is shared in anonymized form, but there are some cases, such as when refunds are requested, where RevenueCat shares information specific to a given user. Any information we receive from RevenueCat related to our users is treated in accordance with this policy.
Collection within the United States and Abroad
SongShift is based in the United States, and we process and store information in the U.S. Therefore, we and those that perform work for us may transfer your personal information to, or store or access it in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction. By using our Platform, you consent to the processing of your information in the U.S. We will take steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which we process it.
The Platform may be accessed in the United States and abroad. In such cases, certain data and information will be transferred to the United States. For personal information protection purposes, SongShift is the controller and, unless otherwise noted, is also the processor of the personal information. User account information remains in your account until you choose to delete it. If you are using the Platform outside of the United States, your data and the information collected may be subject to the data protection laws of the country in which you are located, regardless of whether or not your data is transferred to the United States.
To the extent permitted by applicable law, if you would like to request to review, correct, restrict or delete personal information that you have previously provided to us, object to the processing of personal information, or if you would like to request to receive an electronic copy of your personal information for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), please contact us at support@songshift.com. We will respond to your request in accordance with the applicable law that governs the collection, use and deletion of your data and information. The requested deletion will be as comprehensive as possible but is always subject to issues outside of our control, including applicable regulations and laws, your actions and the actions of third parties. It is important to note that we may retain a copy of the information for archival purposes and to avoid identity theft or fraud. Certain users may have additional personal information rights and choices based on where they live. Please see the “Your Data Rights” section below for more information:
How We Use The Information We Collect
We use the information we collect to provide, maintain, and improve our Platform and Services. We may also use the information we collect to:
administer your account, send you technical notices, updates, security alerts and support and administrative messages, to respond to your comments, questions and customer service requests;
carry out our obligations and enforce our rights arising from any
contracts entered into between you and us, including for billing, refunds and collection;notify you about changes to the Platform or any products or services we offer or provide though it
communicate with you about products, services, offers, and events offered by us and others, and provide news and information we think will be of interest to you (see the “Your Data Rights” section below for information about how to opt out of these communications at any time);
monitor and analyze trends, usage and activities in connection with our Platform;
detect, investigate and prevent fraudulent transactions and other illegal activities and protect the rights and property of SongShift and others;
personalize and improve the Platform; and
create de-identified, anonymized, or aggregated information.
How We Share The Information We Collect
We may disclose, without any restrictions: aggregated information about our users; aggregated information about how they use the Platform and other information that does not identify any individual.
We may disclose personal information that we collect or you provide as described in this Privacy Policy in the following ways:
with partners and service providers who need access to such information to provide services to us, such as companies through which you receive access to the Platform (like Apple) and companies that assist us with web hosting, payment processing, subscription management, refunds, fraud prevention and customer service;
if we believe your actions are inconsistent with our user agreements or policies, or to protect the rights, property and safety of the Company or others;
in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company;
between and among the Company and our current and future parents, subsidiaries and other companies under common control and ownership;
for any other purpose disclosed by us when you provide the information; and/or
with your consent.
We may also disclose your personal information:
to comply with any court order, law, or legal process, including to respond to any government or regulatory request;
to enforce our Terms and other agreements, including for billing and collection purposes; and/or
if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
How We Retain and Protect Your Information
We store data associated with your account for as long as your account remains active. We store personal data for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Privacy Policy.
We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls. Any payment transactions will be encrypted using SSL technology.
The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Platform, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to the Platform. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Platform.
Third-Party Sites and Apps
The Platform may, from time to time, contain links to and from the Platform to and from our partners and digital service providers. If you follow a link to any of these external websites or applications, please note that these websites and applications have their own privacy policies and that we do not accept any responsibility or liability for these websites or applications or their policies. Please check these policies before you submit any personal data to these external websites and/or applications.
SongShift uses YouTube API services where applicable. When Using YouTube API services through SongShift, please refer to YouTube's Terms of Service and Google's Privacy Policy for their respective privacy policies. To revoke YouTube API access, visit Google security settings page (https://myaccount.google.com/permissions?pli=1) of your Google account. Select SongShift under the manage third-party access and then select Remove Access.
Accessing and Correcting Your Information
You can review and change your personal information by logging into the Platform and visiting your account profile page.
You may also send us an email at support@songshift.com to request access to, correct or delete any personal information that you have provided to us. We cannot delete your personal information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
Certain users may have additional personal information rights and choices based on where they live. Please see the “Your Data Rights” section below for more information.
Your Data Rights
The laws in certain jurisdictions require us to provide users, to the extent those laws apply to such users, with certain rights and information. This means that certain users may have additional personal information rights and choices based on where they live, and with respect to those users, to the extent this portion of the Privacy Policy conflicts with any other portion of this Privacy Policy, this portion of the Privacy Policy shall supersede and control. We have tried to provide links to websites that provide more information below. If you feel that this list does not cover your rights, please immediately notify us at support@songshift.com.
If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit https://oag.ca.gov/privacy.
If you are a resident of the European Union or European Economic Area (the “EU”), the General Data Protection Law (“GDPR”) may provide you with additional rights regarding our use of your personal information. To learn more about your GDPR privacy rights, visit https://eugdpr.org/the-regulation/. A list of European Union data protection authorities is available at: http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.
If you are a Canada resident, Canadian law may provide you with additional rights regarding our use of your personal information. To learn more about your Canada privacy rights, visit https://www.priv.gc.ca/en/.
For example, certain users (such as users in California or the EU) may have the following rights with respect to their personal information:
The right to know what information the Company collects from you, why it is collected, and how it is shared.
The right to have access to your personal information in a portable format, to the extent technically feasible.
The right to have your personal information deleted by the Company and its service providers (see below) and to be notified when such deletion has been completed, colloquially known as the “right to be forgotten”.
The right to have incomplete or inaccurate personal information rectified and to be notified upon rectification.
Withdraw your consent to the processing of your personal information.
The right to request information about the categories of information that are sold and/or to opt out of the sale of personal information. (Note: what is covered as a “sale” under California law is not yet clear, but we currently do not “sell” your information, as we understand it.)
The rights and options described above are subject to limitations and exceptions under applicable law. In situations in which the Company processes personal data on behalf of a user, the Company may refer the request to the relevant user and cooperate with their handling of the request, subject to any special contractual arrangement with that user.
If you would like to request to review, correct, restrict or delete personal information that you have previously provided to us, object to the processing of personal information, or if you would like to request to receive an electronic copy of your personal information for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), please contact us at support@songshift.com. We will respond to your request in accordance with the applicable law that governs the collection, use and deletion of your data and information. The requested deletion will be as comprehensive as possible but is always subject to issues outside of our control, including applicable regulations and laws, your actions and the actions of third parties. It is important to note that we may retain a copy of the information for archival purposes and to avoid identity theft or fraud.
You also have the right to lodge a complaint with the supervisory authority of your habitual residence, place of work or place of alleged infringement, if you consider that the processing of your personal data infringes applicable law. However, we encourage any such user to contact us first at support@songshift.com, and we will do our very best to promptly address such user’s issue(s) and resolve the concern(s).
Use of Cookies
Our integration with some digital music providers requires use of first-party cookies for user authentication. You may delete such cookies by consulting the instructions for deleting cookies associated with the browser you use. Deleting cookies may interfere with your ability to use our services.
Changes to This Privacy Policy
We reserve the right to change this Privacy Policy from time to time, so please be sure to check back here periodically.
Contact Us
If you have questions about our Privacy Policy or practices, or if you would like to make a complaint, please contact us at support@songshift.com.