Legal

Privacy Policy

Effective Date: January 1, 2026 · Last Updated: February 10, 2026

1. Introduction

SongAcquire Inc. (“Company,” “we,” “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketplace platform at songacquire.com (“the Platform”).

2. Information We Collect

We collect the following categories of personal information:

2.1 Account Information

When you register, we collect your name, email address, password (hashed), and optional profile information such as company name and billing address.

2.2 Transaction Data

We collect records of purchases, sales, negotiation history, escrow transactions, and payment method details (processed securely via Stripe).

2.3 Uploaded Content

Sellers upload audio files, video recordings, and legal documents. These files are stored securely and associated with the corresponding asset listings.

2.4 Usage Data

We automatically collect information about your interactions with the Platform, including IP address, browser type, pages visited, time spent, and referring URLs. This data is collected via Vercel Analytics.

3. Government ID & Identity Verification

Sellers are required to complete identity verification (KYC) before listing assets. This process involves uploading a government-issued photo ID and completing a real-time selfie check.

Processed via Stripe Identity

All government ID data -- including passport images, driver license photos, and biometric selfie data -- is transmitted directly to and processed by Stripe Identity, a PCI-DSS Level 1 certified service provider. SongAcquire does not store raw ID images, biometric data, or document numbers on our servers.

What We Retain

We only store a seller identity status flag, the date of the identity check, and the Stripe Identity session ID. This minimal data lets us confirm a seller's identity without retaining sensitive personal documents.

Data Deletion

Stripe retains identity verification data in accordance with their own retention policy. You may request deletion of your Stripe Identity data by contacting our support team, who will coordinate with Stripe on your behalf.

4. How We Use Your Information

We use the information we collect for the following purposes:

  • To create and manage your account and authenticate your identity.
  • To process transactions, including escrow payments and payout disbursements.
  • To verify seller identity through Stripe Identity for fraud prevention.
  • To confirm seller identity and provide the legal proof of ownership delivered to buyers.
  • To communicate with you about transactions, disputes, and platform updates.
  • To improve the Platform through analytics and usage pattern analysis.
  • To comply with legal obligations and enforce our Terms.

5. Data Sharing & Third Parties

We do not sell your personal data. We share information only with:

  • Stripe: Payment processing and identity verification.
  • Vercel: Platform hosting and edge analytics.
  • Transaction Counterparties: Buyer/seller names and contact details are shared as necessary to complete transactions and generate legal documents.
  • Law Enforcement: When required by valid legal process (subpoena, court order, or government request).

6. Data Security

We implement industry-standard security measures to protect your data, including: encryption in transit (TLS 1.3) and at rest, access controls with role-based permissions, regular security audits, and secure coding practices. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Transaction records and legal documents are retained for a minimum of seven (7) years to comply with tax and regulatory requirements. You may request deletion of your account and associated data at any time, subject to our retention obligations.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete your personal data (GDPR Art. 15-17).
  • Restrict or object to processing of your data (GDPR Art. 18, 21).
  • Request data portability (GDPR Art. 20).
  • Opt out of the sale of personal information (CCPA/CPRA).
  • Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at [email protected].

9. Cookies & Tracking

The Platform uses essential cookies for authentication and session management. We use Vercel Analytics for anonymized usage tracking. We do not use third-party advertising cookies. You can manage cookie preferences through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-platform notification at least thirty (30) days before taking effect. The “Last Updated” date at the top of this page reflects the most recent revision.

For questions about this Privacy Policy, contact us at [email protected] or visit our Support Center.