Privacy Policy

1. Data Controller

The Data Controller for personal data is:

Cast Motion Frontier di F.H.A.B
P.IVA: 02571270970
Seano, Prato (PO), Italy
Email: support@musicly.space

2. Data We Collect

We collect the following data when you use MusicLy:

• Account information: email, username, display name
• Content: music, cover images, descriptions you upload
• Payment data: processed securely through Stripe
• Usage data: sales statistics, page views

3. Legal Basis for Processing

We process your personal data based on:

• Contract performance (Art. 6(1)(b) GDPR): to provide you the MusicLy service, process payments, and manage your account
• Legal obligation (Art. 6(1)(c) GDPR): to comply with tax and regulatory obligations
• Consent (Art. 6(1)(a) GDPR): to send you marketing communications or share your email with artists
• Legitimate interest (Art. 6(1)(f) GDPR): to improve the service, prevent fraud, and ensure security

4. How We Use Your Data

We use your data to:

• Provide and maintain the MusicLy service
• Process transactions and payments
• Send you notifications about your account and sales
• Improve the platform and develop new features

5. Buyer Data

We do our best to protect your privacy when you purchase music on MusicLy. By default, your email is masked and not visible to the artist. Only if you give explicit consent during checkout can the artist see your email to contact you about new releases.

When you share your email with an artist, they become the controller for that data. MusicLy facilitates the sharing but does not control how the artist will use your email. We encourage you to review any policies the artist may have.

You can withdraw consent at any time by contacting us.

Artist Communications. If you opt in to receive updates from an artist, they may send you messages about new releases, updates, or offers through MusicLy's platform. MusicLy delivers these messages on the artist's behalf. You can unsubscribe from an artist's messages at any time.

6. Data Sharing and Sub-processors

We do not sell your personal data. We share data with the following service providers (sub-processors):

• Stripe, Inc. (USA): payment processing - Privacy Policy
• Cloudflare, Inc. (USA): file hosting and CDN - Privacy Policy
• Supabase, Inc. (USA): database and authentication - Privacy Policy
• Artists: view sales statistics with masked email. Full email is shared only if you gave explicit consent during purchase

7. International Transfers

Some of our service providers are located outside the European Economic Area. We take all reasonable precautions to ensure that data transfers comply with applicable data protection laws.

8. Data Retention

We retain your data only for as long as necessary to provide you the service and comply with our legal and tax obligations. Once your account is deleted, we remove your personal data, except as required by law.

9. Security

We use industry-standard security measures to protect your data, including SSL/TLS encryption for all communications and secure storage of credentials.

10. Your Rights (GDPR)

Under Regulation (EU) 2016/679 (GDPR), you have the following rights:

• Access (Art. 15): obtain confirmation of processing and a copy of your data
• Rectification (Art. 16): correct inaccurate or incomplete data
• Erasure (Art. 17): request deletion of your data
• Restriction (Art. 18): restrict processing in certain circumstances
• Portability (Art. 20): receive your data in a structured, readable format
• Objection (Art. 21): object to processing based on legitimate interest
• Withdraw consent: withdraw consent at any time

To exercise your rights, contact us at support@musicly.space.

Complaint to Supervisory Authority: You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at www.garanteprivacy.it.

11. Cookies

We use essential cookies for the platform to function, including session cookies for authentication. We do not use advertising tracking cookies.

12. Mandatory and Optional Data

To use MusicLy, some data is required (email and password for account), while other data is optional (bio, profile image, marketing consents). Not providing required data means you cannot use the service.

13. Automated Decisions

We do not use fully automated decision-making processes that produce significant effects on you.

14. Age Requirements

MusicLy is intended for users who meet the age requirements under data protection laws in their jurisdiction. We do our best to comply with applicable minimum standards and trust that users will respect the laws of their country.

15. Changes to Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the platform. Continued use of the service after changes constitutes acceptance of the new policy.

16. Contact

Questions about privacy? Contact us at: support@musicly.space

MusicLy is operated by Cast Motion Frontier di F.H.A.B, P.IVA 02571270970.