dropme.musicdropme.music

Privacy Policy (GDPR / EU)

Last updated: December 18, 2024

This Privacy Policy explains how dropme.music ("we", "us", "our") collects, uses, and protects personal data in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for processing your personal data is: dropme.music Email: support@dropme.music

2. Personal Data We Collect

We collect only data that is necessary to operate our platform: • Account Data: Email address (used for account creation, login, and communication) • Payment Data: Stripe account ID for payment processing and payouts (We do not store credit card or banking details. These are handled directly by Stripe.) • User Content: Uploaded music files and related metadata (e.g. titles, descriptions) • Technical & Analytics Data: Basic, anonymized usage data (e.g. page visits, platform interactions) for performance and improvement purposes

3. Legal Basis for Processing (GDPR Art. 6)

We process personal data based on the following legal grounds: • Performance of a contract (Art. 6(1)(b)) – to provide account access, sell music, and deliver services • Legal obligations (Art. 6(1)(c)) – for accounting and tax-related requirements • Legitimate interests (Art. 6(1)(f)) – to ensure platform security, prevent abuse, and improve functionality • Consent (Art. 6(1)(a)), where applicable – e.g. for optional communications

4. How We Use Your Data

Your personal data is used exclusively to: • Operate and maintain the platform • Manage user accounts and authentication • Process payments and payouts • Deliver purchased music and services • Improve platform performance, usability, and security We do not sell or share your data for advertising purposes.

5. Data Sharing & Third Parties

We share data only when strictly necessary: • Stripe – payment processing and payouts All third-party providers process data under GDPR-compliant data processing agreements.

6. Data Storage & Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

7. Data Retention

We retain personal data only for as long as necessary: • While your account is active • As required by legal or accounting obligations You may request deletion of your account and associated data at any time, unless legal retention obligations apply.

8. Your Rights Under GDPR

As a user located in the EU, you have the right to: • Access your personal data (Art. 15) • Rectify inaccurate data (Art. 16) • Request deletion ("right to be forgotten") (Art. 17) • Restrict processing (Art. 18) • Data portability (Art. 20) • Object to processing (Art. 21) • Withdraw consent at any time To exercise your rights, contact us at support@dropme.music.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.