Privacy Policy

Account Information:

• Email address (required)
• Display name
• Password (encrypted)
• Profile customization preferences including avatar and biography

Usage Information:

• Listening history and play counts
• Rotations you create
• Search queries and browsing behavior
• Device information and IP address

Cookies We Use:

• Session cookies for authentication
• Analytics cookies to understand usage patterns
• Preference cookies to remember your settings

Core Platform Services:

• Provide and maintain our streaming service
• Process your subscription and calculate artist payouts
• Enable personalized recommendations

Analytics and Improvement:

• Analyze usage patterns to improve our service
• Develop new features based on user behavior
• Optimize platform performance and reliability

Artist Transparency:

• Calculate fair payment distribution to artists
• Provide artists with aggregated listening data
• Share individual user payout breakdown (anonymized where appropriate)

With Artists and Labels:

We share aggregated listening data with artists and labels to calculate payouts. Individual user data is anonymized unless required for payment transparency under our fair payment model.

Service Providers:

• Payment processing (subscriptions and purchases)
• Cloud hosting, database, and file storage
• Content delivery for audio and images
• Website analytics (only where you have given consent)
• Error and performance monitoring
• Transactional email delivery

Legal Requirements:

We may disclose your information if required by law, court order, or to protect our rights, property, or safety.

Account Management:

• Access and update your profile information
• Download your listening data and history
• Delete your account and associated data

Cookie Settings:

• Manage cookie preferences through your browser
• Opt out of non-essential cookies

Privacy Center:

• Control who can see your listening activity
• Adjust recommendation settings
• Manage marketing communications preferences

Your Rights:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure: request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: request that we limit how we use your data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: withdraw consent at any time where processing is based on consent

Lawful Basis for Processing:

• Contract performance: to provide our streaming service and process your subscription
• Legitimate interests: to improve our platform, prevent fraud, and ensure security
• Consent: for optional features such as personalized recommendations and marketing communications
• Legal obligation: to comply with applicable laws and regulations

Your Rights:

• Right to know: request details about the categories and specific pieces of personal information we have collected about you
• Right to delete: request deletion of your personal information, subject to certain exceptions
• Right to correct: request correction of inaccurate personal information
• Right to opt out: opt out of the sale or sharing of your personal information
• Right to non-discrimination: we will not discriminate against you for exercising any of these rights

Do Not Sell or Share My Personal Information:

catalog.fm does not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising. If our practices change in the future, we will update this policy and provide you with an opt-out mechanism.

Categories of Information Collected:

• Identifiers (e.g., email address, display name, IP address)
• Internet or other electronic network activity (e.g., listening history, browsing behavior)
• Commercial information (e.g., subscription details, payment history)
• Inferences drawn from the above (e.g., music preferences, recommendations)

On Our Systems:

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. When you request account deletion there is a 14-day window in which you can cancel, after which we anonymize your personal data on our own systems within 30 days. Aggregated and anonymized data may be retained for analytics and reporting purposes.

With Service Providers:

We also ask the service providers listed above to erase the personal data they hold about you. Their timelines are governed by their own legal and regulatory obligations and can be longer than ours. Payment records, for example, cannot be redacted until 90 days after a transaction, and error-monitoring data expires on a fixed retention schedule rather than on request.

Legal Retention:

We retain information we are required by law to keep, including tax and payment records, and information connected to an unresolved dispute, chargeback, or legal hold.