Privacy Policy

1. Who we are

Tutify is operated by ICONOCLASHTIC RECORDS ("we", "us", "our"). ICONOCLASHTIC RECORDS is the data controller responsible for personal data processed through the Tutify non-downloadable streaming service. We respect user privacy and use information only as needed to provide, maintain, and improve the service. If you have any questions about this policy, contact us through our support channel.

2. Information we collect

• Account details — name, email, username, and contact information.
• Payment and billing information — processed through a third-party payment processor (Paddle).
• Artist verification information — for users onboarding as verified artists.
• Streaming and usage activity — streams played, credits spent, playlists created, and platform interactions.
• Device, browser, and log data — IP address, browser type, device identifiers, and diagnostic logs.
• Support messages and service communications — messages you send us when requesting help.

3. How we use information

• Verify artists and users.
• Process purchases, credits, and refunds.
• Provide streaming, playlisting, and account features.
• Track credit usage and revenue reporting.
• Prevent fraud, abuse, and unauthorized access.
• Comply with legal, tax, accounting, and payment processor requirements.
• Send service notices and account updates.

4. Payment processor compliance

Payments are handled in accordance with the rules, security standards, and compliance requirements of our payment processor, Paddle, which acts as the Merchant of Record for all our orders. We may share necessary information with the processor, banks, fraud prevention services, and other service providers needed to complete transactions, prevent abuse, or process refunds. We do not store more payment data than is reasonably necessary for operations and compliance, and we do not store your full payment card details.

5. Data sharing

• Payment processors (Paddle) and their banking partners.
• Hosting, database, storage, and analytics providers.
• Fraud prevention and identity verification services.
• Legal, tax, and regulatory authorities when required.
• Partners involved in service delivery, royalty accounting, or artist verification.
• Professional advisers such as legal and accounting advisers.

We do not sell personal information unless a separate disclosure specifically says otherwise and the law permits it.

6. Data retention

We keep information only as long as needed for service delivery, legal compliance, accounting, dispute resolution, and fraud prevention. Removed accounts or deleted content may still leave limited records in backups, logs, or accounting systems for lawful business purposes. When data is no longer needed, we delete or anonymise it.

7. Security

We use reasonable administrative, technical, and organisational safeguards — including encryption, access controls, and private storage with short-lived signed links — designed to protect user data and uploaded music. No online system is completely secure, so users are responsible for protecting their login credentials and notifying us of suspicious account activity.

8. User rights

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. Requests may require verification before processing. Some information cannot be deleted if it is needed for legal, payment, or accounting purposes. You may also have the right to lodge a complaint with your local data protection authority.

9. International transfers

Where personal data is transferred outside your country or region, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions to protect your information.

10. Cookies

We use essential cookies required to sign you in and keep the service working, and may use analytics cookies to understand how the platform is used. You can manage non-essential cookies through your browser settings.

11. Children's privacy

The service is not intended for children under 13, and users should not register if they do not meet the minimum age required by law in their jurisdiction. If we learn that we have collected information from a child in violation of applicable law, we may delete that information.

12. Pending reviews

Any refund, payout, or account credit that is under review, pending verification, pending processor settlement, or pending legal compliance is not guaranteed until the review is completed and approved.

13. Updates

This Privacy Policy may be updated from time to time. Material changes will be reflected by updating the date at the top of this page. Continued use of the service after an update means the revised policy applies.