Privacy Policy

Effective Date: June 1, 2025  |  Last Updated: June 1, 2025

1. Who We Are

Artist's Toolkit is operated by Spawnpoint Media LLC ("we," "us," or "our"), a limited liability company. This Privacy Policy explains how we collect, use, disclose, and protect information about users ("you") of our web application available at artist-toolkit.com and associated pages (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Your email address
• A hashed password (we never store your password in plain text)
• Your purchase date and credit balance
• Account preferences and settings

2.2 Uploaded Data

The Service allows you to upload royalty and streaming data exports from digital service providers (DSPs). This data may include information such as track names, streaming counts, geographic data, revenue figures, and platform identifiers. This data is:

• Used exclusively to provide in-session analysis and visualization features
• Not permanently stored on our servers after your session ends
• Not shared with third parties except as described in Section 4 (Third-Party Services)
• Not used to train AI models or for any purpose beyond delivering the Service to you

2.3 Analysis Results

When you use AI-powered features (Metrics Deep Dive AI Analysis, Ask the Expert, Ask the Data), the inputs you provide and the analysis results generated are stored in your account so you can access them in future sessions. You may delete stored analysis results at any time from your account settings.

2.4 Usage Analytics

We collect anonymized data about how users interact with the Service, including:

• Pages visited and features used
• Session duration and click patterns
• Browser type, device type, and operating system
• IP address (used for geolocation and fraud prevention, not stored long-term)
• Error logs and performance data

This data is collected in aggregate and is not tied to your personal identity for the purpose of usage analysis.

2.5 Communications

If you contact us by email, we retain the content of that communication and your email address for the purpose of responding and maintaining a support record.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process payments and manage your credit balance
• Deliver AI-powered analysis based on your inputs
• Store and display your analysis history
• Respond to support requests and communications
• Monitor and improve Service performance and reliability
• Detect and prevent fraud, abuse, or unauthorized use
• Send transactional emails (purchase confirmations, account alerts) — we do not send marketing emails without your explicit opt-in
• Comply with applicable legal obligations

4. Third-Party Services

We use the following third-party providers to operate the Service. Each has its own privacy policy governing how they handle data.

Anthropic (AI Processing)

AI-powered features in the Service are powered by Anthropic's Claude API. When you use Ask the Expert, Ask the Data, or Metrics Deep Dive AI Analysis, your inputs and any uploaded file content are transmitted to Anthropic's servers for processing. Anthropic processes this data under their API usage policies and does not use API inputs to train their models by default. For more information, see Anthropic's Privacy Policy.

Supabase (Database & Authentication)

We use Supabase for user authentication, account data storage, and analysis result storage. Your email address, hashed password, credit balance, and saved analysis results are stored in Supabase's infrastructure. For more information, see Supabase's Privacy Policy.

Stripe (Payment Processing)

All payments are processed by Stripe, Inc. We do not collect or store your payment card information — it is handled entirely by Stripe. We receive only a transaction confirmation and your order metadata. For more information, see Stripe's Privacy Policy.

5. Data Retention

We retain different types of data for different periods:

• Account information: Retained as long as your account is active. Deleted within 30 days of account deletion.
• Uploaded DSP data: Processed in-session only. Not retained on our servers after the session closes.
• AI analysis results: Stored in your account until you delete them or close your account.
• Usage analytics: Aggregated and anonymized data may be retained indefinitely for Service improvement purposes.
• Support communications: Retained for up to 2 years for support record purposes.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data:

6.1 Access

You may request a copy of the personal information we hold about you by emailing spawnpointmedia@gmail.com. We will respond within 30 days.

6.2 Deletion

You may request deletion of your account and all associated personal data by emailing us or using the account deletion feature in your settings. We will process deletion requests within 30 days. Some data may be retained for legally required periods.

6.3 Correction

If any personal information we hold about you is inaccurate, you may update it in your account settings or contact us to request a correction.

6.4 Portability

You may request an export of your account data (email address, credit history, saved analysis results) in a machine-readable format by contacting us at spawnpointmedia@gmail.com.

6.5 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected about you, the right to request deletion, and the right to opt out of sale. We do not sell personal information to third parties.

7. Cookies and Local Storage

We use cookies and browser local storage for the following purposes:

• Session management: To keep you logged in between visits. These are essential cookies and cannot be disabled without breaking account functionality.
• Preferences: To remember your settings and UI preferences within the application.

We do not use advertising cookies, tracking pixels from advertising networks, or cross-site tracking technologies. We do not share cookie data with advertising platforms.

8. Security

We take reasonable technical and organizational measures to protect your information, including:

• All data transmitted between your browser and our servers is encrypted via TLS (HTTPS)
• Passwords are hashed using industry-standard algorithms — we cannot recover your password
• Access to production databases is restricted to authorized personnel
• We conduct regular security reviews of our infrastructure and third-party dependencies

No security system is impenetrable. In the event of a data breach that affects your personal information, we will notify you by email within 72 hours of discovery, as required by applicable law.

9. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are between 13 and 18, you must have parental or legal guardian consent to use the Service. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information as quickly as possible. If you believe we may have any information from or about a child under 13, please contact us at spawnpointmedia@gmail.com.

10. International Data Transfers

Our Service is operated in the United States. If you are accessing the Service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer.

11. Links to Third-Party Sites

The Service may contain links to third-party websites (such as Spotify for Artists or other music platforms). This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last Updated" date at the top of this page. Your continued use of the Service after notification constitutes your acceptance of the updated policy. If you disagree with any changes, you should discontinue use of the Service and may request account deletion.