Privacy Policy

1. Who is responsible for your data

OwnYourMusic is operated by Own Your Music, based in Limoges, France. For the purposes of GDPR, we are the data controller for the information described below.

2. What we collect

• Account information: email address, authentication data (via Supabase Auth).
• Catalog data you provide: album/track titles, ISRCs, UPCs, credits, release dates, and other metadata you confirm during import.
• Files you upload for extraction: screenshots, PDFs, CSVs, or pasted text used during the Universal Import step.
• Artwork images: stored to display in your catalog and confirm screens.
• We do not store your master audio files. Audio verification happens locally on your device; audio file bytes are never uploaded to or retained on our servers.

3. How we use it

• To provide the core Service: extracting, validating, and organizing your catalog data.
• To generate export packs, migration reports, and Confidence Scores.
• To operate your account (authentication, billing).

4. Third parties who process your data on our behalf

• Anthropic (AI provider) — processes uploaded screenshots/documents during the import step only, to extract structured catalog data. Not used for any other ongoing processing of your catalog.
• Supabase — hosts our database and handles authentication.
• Cloudflare (R2) — stores artwork images only.
• [Payment processor — to be added once billing is implemented]

Our primary application infrastructure is hosted in the European Economic Area (EEA) wherever possible. Some supporting services and content delivery networks may process or temporarily cache data in other countries to provide reliable worldwide access.

5. Legal basis for processing

We process your data to perform our contract with you (providing the Service you’ve signed up for), and in some cases based on your consent, such as if you opt in to product updates.

6. Data retention

We retain your catalog data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us (see below).

7. Your rights (GDPR)

If you’re in the EU/EEA (or covered by similar regional laws), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Request a portable export of your data.
• Object to certain processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at wearegamechangers@outlook.com.

8. International data transfers

Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards, such as Standard Contractual Clauses (SCCs), or other lawful transfer mechanisms required by applicable data protection laws.

9. Cookies

We use a single functional cookie — the Supabase authentication session cookie — to keep you signed in. We do not use tracking, advertising, or analytics cookies.

10. Changes to this policy

We may update this policy from time to time. Material changes will be noted with an updated “Last updated” date.

11. Contact

Privacy questions or rights requests: wearegamechangers@outlook.com