1. Who is responsible
JAE Music is an independent, privately operated music-curation project based in the Netherlands. It is not presented as a registered company. In this policy, “JAE Music” means the private operator of the project and website.
This description does not remove any privacy or consumer rights that apply by law. For privacy questions or requests, email info@musicbyjae.com.
2. Data JAE Music may process
- Account and identity data: your email address and limited Google sign-in profile information supplied during authentication.
- Music and submission data: Spotify links, artist or track information, genre, playlist selections, campaign notes, review decisions and reports.
- Paid-outreach data: order and withdrawal references, selected package, price, payment provider and the payment reference recorded by the administrator.
- Communications: messages, support requests, feedback and transactional email delivery status.
- Technical and security data: session identifiers, browser or device information, server logs and one-way keyed hashes derived from IP addresses for abuse prevention. When enabled on the promotion form, Google reCAPTCHA also returns a verification result, action, hostname, risk score and limited provider error codes. The reCAPTCHA token and secret key are not logged or stored in the order record. The public paid-outreach and withdrawal records do not store the raw IP address.
- Optional usage data: page and interaction information collected through Google Analytics only after you select Accept analytics. The Google tag is not requested while no choice or a decline is stored.
JAE Music does not collect your card number, bank-login credentials or full bank-account credentials. Ko-fi or Bunq handles payment entry on its own service.
3. Why the data is used
- To create and secure accounts and provide the requested dashboard features.
- To review tracks, manage submissions and perform agreed playlist outreach.
- To assess a promotion request, verify a reported payment, deliver reports and handle withdrawal or refund requests.
- To send necessary service emails and answer questions.
- To prevent fraud, spam, duplicate requests and misuse, and to protect the service.
- To understand and improve website performance and usability.
- To meet legal, accounting, dispute-resolution or regulatory obligations where they apply.
Depending on the activity, the legal basis may be steps requested before a contract, performance of a contract, compliance with a legal obligation, a legitimate interest such as security and service administration, or consent where the law requires it. You may withdraw consent for future processing, but that does not make earlier processing unlawful.
4. Service providers and other recipients
Only data reasonably needed for a task is shared. The services currently relevant may include:
- Google for sign-in, reCAPTCHA abuse protection on the promotion form and, only after your separate choice, website analytics;
- Spotify for music links, metadata and playlist operations;
- Supabase/PostgreSQL for database hosting and Render for website hosting;
- Resend for transactional email delivery;
- Reoon for email-validation checks during account registration;
- Ko-fi and Bunq when you choose their external payment services; and
- Cloudinary where a campaign report is delivered through a hosted file link.
Independent playlist curators receive the track and campaign context needed to assess a pitch. They make their own decisions. JAE Music does not sell your personal data.
Some providers may process data outside the European Economic Area. Their own terms, privacy notices and legally recognised transfer safeguards may apply.
5. Retention
Data is kept only for as long as reasonably needed for the purpose for which it was collected, including service administration, campaign evidence, support, fraud prevention, disputes and mandatory record-keeping. Different records therefore have different retention periods.
You can ask for the current retention position for your records. JAE Music will delete or anonymise data when it is no longer needed, unless continued storage is required or permitted by law or needed to establish, exercise or defend legal claims.
6. Your privacy rights
Depending on the circumstances, you may have the right to access, correct, erase or restrict personal data, object to processing, receive portable data, withdraw consent and complain to a supervisory authority.
You can change or withdraw your analytics choice at any time from this privacy policy. Declining after an earlier acceptance removes readable analytics cookies and reloads the page without the Google tag; the choice also applies to later page views in this browser.
Email info@musicbyjae.com and describe your request. JAE Music may request proportionate information to verify that the data belongs to you, but will not ask for more identification than reasonably necessary.
If you believe a request was not handled properly, you may contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the competent authority where you live.
7. Security, children and changes
JAE Music uses access controls, private database policies, encrypted connections, server-side validation and limited-data practices. No internet service can promise absolute security. Please do not send passwords, bank-login details or unnecessary sensitive information.
The paid playlist-promotion service is intended for people aged 18 or older. Contact JAE Music if you believe a child supplied personal data without appropriate permission.
This policy may change when the service, providers or legal requirements change. The date at the top shows the current version. Material changes will be communicated where required.