Introduction
SongShift, LLC ("Company" or "We") respect your privacy and are committed to protecting it through our compliance with this policy.
We recognize that the privacy of your information is important to you, and it is of paramount importance to us. Frankly, we believe the less we know about you, the better, and that is why we aim to limit the information we collect to the minimum necessary.
This privacy policy (this "Privacy Policy") describes the types of information we may collect from you or that you may provide when you use our websites (the "Site"), mobile application(s) (the "App"), and other online products and services, including those integrated into the products and services of digital song providers or other third parties) (collectively, with the Site and App, the "Services") and our practices for collecting, using, maintaining, protecting, and disclosing that information. Specifically, this Privacy Policy will address:
• Age Restrictions
• Information We Collect About You and Your Use of the Services
• How We Collect Information
• Company Partners May also Collect Information
• Collection within the United States
• How We Use the Information We Collect
• How We Share the Information We Collect
• How We Retain and Protect Your Information
• Third-Party Sites and Apps
• Accessing and Correcting Your Information
• Your Data Rights
• Changes to This Privacy Policy
• Contact Us
BY USING OR ACCESSING OUR SERVICES, YOU AFFIRM YOUR CONSENT TO THE PRACTICES AND POLICIES SET OUT IN THIS PRIVACY POLICY. Your use of the Services, and any dispute arising out of or in any way related to privacy, will be subject to this Privacy Policy and any other terms and conditions that are applicable to the Services (the "Terms"). If you do not agree to this Privacy Policy or the Terms, please do not use the Services.
If you have any questions regarding the Platform or this Privacy Policy, please contact us at support@songshift.com.
Age Restrictions
The Services are not intended for persons under the age of 13 (a "Child") and/or who is otherwise unable to enter into a contract (a "Minor") without consent from such the parent or legal guardian of such Child User or Minor User, as applicable ("Parent"). By creating an account or using the Services, you verify that you are not a Child User or Minor User. We do not knowingly collect personal information from a Minor or a Child. If we learn we have collected or received personal information from a Minor or a Child without verification of parental consent, we will delete that information. If you believe we might have any information from or about a person who is a Child User or Minor User without parental consent, please contact us at support@songshift.com.
Information We Collect About You and Your Use of the Services
When using the Services, we collect information about specific actions, such as Playlist creation details (such as artists names, when a Playlist was created, when each song was added to the Playlist, etc.), Shift request and completion details, purchase information, and SongShare usage. This information helps us provide and improve the Services by revealing where errors occur and highlighting areas for improvement. The personal data we collect does not include any device-specific information, and we aim to limit it in scope to only the minimum we need to provide you with the Services and validate your identify, which is done through the use of access tokens.
Here are some examples of what we collect and why:
We use purchase receipts to validate the legitimacy of your subscription; although the personal information used to perform this function is only used for this purpose and is not shared with anyone else, other than the third party contractors that assist us in managing payments, refunds and subscriptions.
When signing into DSPs, your username and password are exchanged for access tokens, which are then used to access your account with the DSP. If a DSP does not support access tokens, your username and password are securely stored locally on your device "keychain," which is a secure part of iOS/macOS that is responsible for securely storing your login information.
When you use the Services, we read your media library from your connected DSP accounts. We read the contents of your library to perform the Services requested, such as transfer your music. We do not store any of your data on external servers, except for the QuickMatching service, which keeps your match results for a limited period (e.g., as needed to download the results and for a short period thereafter) and then delete the server version.
When we download a Playlist from your account with a DSP, we also download data related to the Playlist such as artist information, when a Playlist was created and when each song was added to the Playlist.
How We Collect Information
As you navigate through and interact with the Services, we collect information through our in-house analytics service, which was designed with privacy in mind and to only collect what is necessary. We do not use any third-party analytics software, and we do not use any third-party advertising platforms. By using our in-house analytics, we are better able to maintain minimal collections standards, keep data safe and prevent it from being resold or shared with anyone.
To be clear, we do not collect personal information automatically.
Company Partners May also Collect Information
We use the services and products of RevenueCat, Inc. ("RevenueCat") to assist us in managing subscriptions, payments, refunds and other activities related to the Services. Because of that relationship, RevenueCat has access to certain types of data, including data related to users of the Services. Please consult RevenueCat's privacy policy for information on data RevenueCat collects, how that data is used and related information: https://www.revenuecat.com/privacy/. In some cases, such as where refunds are requested, RevenueCat may share that information with third parties, like Apple.
RevenueCat may also provide some of that data to the Company. In most cases, that data is shared in anonymized form, but there are some cases, such as when refunds are requested, where RevenueCat shares information specific to a given user. Any information we receive from RevenueCat related to our users is treated in accordance with this policy.
Collection within the United States and Abroad
SongShift is based in the United States, and we process and store information in the U.S. Therefore, we and those that perform work for us may transfer your personal information to, or store or access it in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction. By using our Services, you consent to the processing of your information in the U.S. We will take steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which we process it.
The Services may be accessed in the United States and from other countries. In such cases, certain data and information will be transferred to the United States. For personal information protection purposes, SongShift is the controller and, unless otherwise noted, is also the processor of the personal information. User account information remains in your account until you choose to delete it. If you are using the Services from outside of the United States, your data and the information collected may be subject to the data protection laws of the country in which you are located, regardless of whether or not your data is transferred to the United States.
To the extent permitted by applicable law, if you would like to request to review, correct, restrict or delete personal information that you have previously provided to us, object to the processing of personal information, or if you would like to request to receive an electronic copy of your personal information for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), please contact us at support@songshift.com. We will respond to your request in accordance with the applicable law that governs the collection, use and deletion of your data and information. The requested deletion will be as comprehensive as possible but is always subject to issues outside of our control, including applicable regulations and laws, your actions and the actions of third parties. It is important to note that we may retain a copy of the information for archival purposes and to avoid identity theft or fraud. Certain users may have additional personal information rights and choices based on where they live. Please see the "Your Data Rights" section below for more information.
How We Use the Information We Collect
We use the information we collect to provide, maintain, and improve our Services and in some cases to create new products or services. We may also use the information we collect to:
administer your account, send you technical notices, updates, security alerts and support and administrative messages, to respond to your comments, questions and customer service requests;
carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing, refunds and collection;
notify you about changes to the Services or any products or services we offer or provide though it
communicate with you about products, services, offers, and events offered by us and others, and provide news and information we think will be of interest to you (see the "Your Data Rights" section below for information about how to opt out of these communications at any time);
monitor and analyze trends, usage and activities in connection with our Services;
monitor and analyze the frequency and timing of when songs and artists are added to various Playlists.
detect, investigate and prevent fraudulent transactions and other illegal activities and protect the rights and property of the Company and others;
personalize and improve the Services; and
create de-identified, anonymized, or aggregated information.
How We Share the Information We Collect
We may disclose, without any restrictions: aggregated information about our users; aggregated information about how they use the Services, aggregated information about the frequency and timing of when songs and artists are added to various Playlists, and other information that does not identify any individual.
We may disclose personal information that we collect, or you provide as described in this Privacy Policy in the following ways:
with partners and service providers who need access to such information to provide services to us, such as companies through which you receive access to the Services (like Apple) and companies that assist us with web hosting, payment processing, subscription management, refunds, fraud prevention and customer service;
if we believe your actions are inconsistent with our terms or policies, or to protect the rights, property and safety of the Company or others;
in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by others;
between and among the Company and our current and future parents, subsidiaries and other companies under common control and ownership;
for any other purpose disclosed by us when you provide the information; and/or
with your consent.
We may also disclose your personal information:
to comply with any court order, law, or legal process, including to respond to any government or regulatory request;
to enforce our Terms and other agreements, including for billing and collection purposes; and/or
if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
How We Retain and Protect Your Information
We store data associated with your account for as long as your account remains active, however we may store and use anonymized data related to your Playlists, including the artists, the songs, when the Playlist was created or changed, and when individual songs were added or deleted from the Playlists, even after your account is no longer active or has been deleted. We store personal data for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Privacy Policy.
We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls. Any payment transactions will be encrypted using SSL technology.
The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to the Services. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures for the Services.
Third-Party Sites and Apps
The Platform may, from time to time, contain links to and from the Services to and from our partners and digital service providers. If you follow a link to any of these external websites or applications, please note that these websites and applications have their own privacy policies and that we do not accept any responsibility or liability for these websites or applications or their policies. Please check these policies before you submit any personal data to these external websites and/or applications.
The Services use YouTube API services where applicable. When Using YouTube API services through SongShift, please refer to YouTube's Terms of Service and Google's Privacy Policy for their respective privacy policies. To revoke YouTube API access, visit Google security settings page (https://myaccount.google.com/permissions?pli=1) of your Google account. Select SongShift under the manage third-party access and then select Remove Access.
Accessing and Correcting Your Information
You can review and change your personal information by logging into the Services and visiting your account profile page.
You may also send us an email at support@songshift.com to request access to, correct or delete any personal information that you have provided to us. We cannot delete your personal information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
Certain users may have additional personal information rights and choices based on where they live. Please see the "Your Data Rights" section below for more information.
Your Data Rights
The laws in certain jurisdictions require us to provide users, to the extent those laws apply to such users, with certain rights and information. This means that certain users may have additional personal information rights and choices based on where they live, and with respect to those users, to the extent this portion of the Privacy Policy conflicts with any other portion of this Privacy Policy, this portion of the Privacy Policy shall supersede and control. We have tried to provide links to websites that provide more information below. If you feel that this list does not cover your rights, please immediately notify us at support@songshift.com.
If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit https://oag.ca.gov/privacy.
If you are a resident of the European Union or European Economic Area (the "EU"), the General Data Protection Law ("GDPR") may provide you with additional rights regarding our use of your personal information. To learn more about your GDPR privacy rights, visit https://gdpr.eu/what-is-gdpr/. A list of European Union data protection authorities is available at: http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.
If you are a resident of Canada, Canadian law may provide you with additional rights regarding our use of your personal information. To learn more about your Canada privacy rights, visit https://www.priv.gc.ca/en/.
For example, certain users (such as users in California or the EU) may have the following rights with respect to their personal information:
The right to know what information the Company collects from you, why it is collected, and how it is shared.
The right to have access to your personal information in a portable format, to the extent technically feasible.
The right to have your personal information deleted by the Company and its service providers (see below) and to be notified when such deletion has been completed, colloquially known as the "right to be forgotten".
The right to have incomplete or inaccurate personal information rectified and to be notified upon rectification.
Withdraw your consent to the processing of your personal information.
The right to request information about the categories of information that are sold and/or to opt out of the sale of personal information. (Note: what is covered as a "sale" under California law is not yet clear, but we currently do not "sell" your information, as we understand it.)
The rights and options described above are subject to limitations and exceptions under applicable law. In situations in which the Company processes personal data on behalf of a user, the Company may refer the request to the relevant user and cooperate with their handling of the request, subject to any special contractual arrangement with that user.
If you would like to request to review, correct, restrict or delete personal information that you have previously provided to us, object to the processing of personal information, or if you would like to request to receive an electronic copy of your personal information for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), please contact us at support@songshift.com. We will respond to your request in accordance with the applicable law that governs the collection, use and deletion of your data and information. The requested deletion will be as comprehensive as possible but is always subject to issues outside of our control, including applicable regulations and laws, your actions and the actions of third parties. It is important to note that we may retain a copy of the information for archival purposes and to avoid identity theft or fraud.
You also have the right to lodge a complaint with the supervisory authority of your habitual residence, place of work or place of alleged infringement, if you consider that the processing of your personal data infringes applicable law. However, we encourage any such user to contact us first at support@songshift.com, and we will do our very best to promptly address such user's issue(s) and resolve the concern(s).
Use of Cookies
Our integration with some digital music providers requires use of first-party cookies for user authentication. You may delete such cookies by consulting the instructions for deleting cookies associated with the browser you use. Deleting cookies may interfere with your ability to use our services.
Changes to This Privacy Policy
We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy. In some cases, we may provide you with additional notice. Your continued use of or access to any portion of our Platform following the publication of the updated Privacy Policy on the Site or the App, as applicable, will constitute your assent to the updated Privacy Policy. We encourage you to review the Privacy Policy whenever you access the Platform or otherwise interact with us to stay informed about our information practices and the choices available to you.
Contact Us
If you have questions about our Privacy Policy or practices, or if you would like to make a complaint, please contact us at support@songshift.com.