Privacy Policy

General

This Privacy Policy describes how Monophonic.io, LLC ("MNPHNC," "we," "us," or "our") collects, uses, and shares information about you when you use our website and services.

1. Information We Collect

1.1 Information You Provide

• Account information (name, email address, password)
• Profile information (artist/band name, biography, photos)
• Website content (text, images, music files)
• Payment information (processed by our payment providers)
• Communication with us (support requests, feedback)

1.2 Information Automatically Collected

• Log data (IP address, browser type, pages visited)
• Device information (device type, operating system)
• Usage information (features used, interactions with the service)
• Cookies and similar technologies

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service
• Process your transactions
• Send you service-related communications
• Improve and personalize the Service

We may also:

• Monitor and analyze usage patterns
• Prevent fraud and abuse
• Comply with legal obligations

3. Information Sharing and Disclosure

3.1 We May Share Information With:

• Service providers (hosting, email delivery, payment processing, analytics)
• Professional advisors (lawyers, accountants, auditors)
• Law enforcement or government agencies (when required by law)
• Third parties in connection with a business transaction (merger, acquisition, sale)

3.2 We Do Not Sell Your Personal Information. We are committed to protecting your privacy and will not sell your personal information to third parties.

4. Data Security

We implement reasonable security measures to protect your information. However, no method of transmission over the Internet is 100% secure.

5. Your Rights and Choices

You may:

• Access, update, or delete your account information
• Opt-out of marketing communications
• Request a copy of your data
• Object to certain processing of your data

6. Cookies and Tracking Technologies

We use cookies and similar technologies to keep you logged in, remember your preferences, analyze how you use our Service, and improve our Service. You can control cookies through your browser settings.

Separately, Monophonic operates its own privacy-friendly analytics on artists' published sites, measuring basic activity such as page views and link clicks. This first-party analytics does not set cookies, does not track visitors across other websites, and is not subject to the consent banner described below. It is distinct from the optional third-party tracking tools that an artist may choose to enable on their own site, which are described in Section 7.

7. Third-Party Analytics and Advertising Tools on Artist Sites

Monophonic lets artists (site owners) build and publish public websites (for example, bandname.monophonic.site or a connected custom domain). Artists can choose to add third-party analytics and marketing tools to their published sites through the management dashboard. Today this includes the Meta (Facebook) Pixel and Google Analytics; we may add other named providers in the future. These tools run only on an artist's published site, and only when that artist has enabled them. They do not run on monophonic.io itself.

7.1 What These Tools Do and Why

When an artist enables one or more Meta Pixel IDs, a Google Analytics measurement ID, or another supported provider, the corresponding tracking code loads on that artist's live public site and may:

• set third-party or provider cookies (for example, Meta's _fbp cookie or Google Analytics' _ga cookies);
• collect information about visitors and their activity, such as pages viewed, IP address, browser and device information, and page events; and
• send that information to the provider for website analytics, advertising measurement, and retargeting (showing ads to visitors on other services and websites).

7.2 Who Receives the Data

Where an artist has enabled the Meta Pixel, visitor and event data is shared with Meta Platforms, Inc., which processes it under its own terms. For more information, see Meta's Privacy Policy and its Cookies Policy. Where an artist has enabled Google Analytics, visitor and event data is shared with Google LLC, which processes it under its own terms. For more information, see Google's Privacy Policy and its description of how it uses cookies in advertising. If we add other providers in the future, we will name them here and link to their respective privacy terms.

7.3 Cookies Involved

• Provider cookies, for example Meta's _fbp and related cookies, set when the pixel loads, or Google Analytics' _ga and _ga_* cookies, set when Google Analytics loads.
• mnphnc_consent, a first-party cookie we set to remember an EEA/UK visitor's consent choice (a value of "granted" or "denied"). It lasts approximately 180 days and does not itself track you.

7.4 Consent and Legal Basis

• Visitors in the EEA and the UK: We display a cookie consent banner (visitors are identified by IP-based country detection). No tracking code (such as the Meta Pixel or Google Analytics) loads and no third-party tracking cookies are set unless the visitor clicks "Accept." If the visitor clicks "Reject," no tracking code loads and no tracking cookies are set. For these visitors, we rely on the visitor's consent as the legal basis for this processing.
• Visitors elsewhere: The tracking code loads without a banner, consistent with applicable local requirements. Visitors can still control cookies through their browser settings.

7.5 Withdrawing or Changing Consent

EEA/UK visitors can change or withdraw consent at any time using the persistent "Cookies" control available on the site, which also links to this Privacy Policy. Withdrawing consent stops future loading of these tracking tools and prevents new tracking cookies from being set; it does not delete cookies already stored, which you can remove through your browser settings.

7.6 Roles and Responsibilities

Artists (site owners) decide whether to enable these tools on their own sites and are responsible for their own use of visitor data, including providing any disclosures their visitors are legally owed. Monophonic provides the platform and the consent mechanism described above. Depending on the processing involved, Meta and Google may act as controllers, joint controllers, or processors with respect to data collected through their tools.

8. Contact Forms on Artist Sites

Artists can add a Contact Form section to their published sites so that visitors can send them a message. This section describes what happens to the information you submit through one of these forms.

8.1 What We Collect

When you submit a contact form on an artist's site, we collect:

• your name;
• your email address; and
• your message.

We do not store your IP address. To prevent spam, we store a keyed one-way hash (HMAC-SHA256) of your IP address, which we use only to limit how often messages can be sent. This hash is deleted 7 days after your message is received.

8.2 How Submissions Are Used and Delivered

• Submissions are stored in our database. The site's owner and its team members (editors) can read and delete them in the Monophonic management dashboard.
• If the site has email notifications turned on (the default), we may email a copy of your submission to the site owner's account email address, or to another address the site has chosen. Another address receives submissions only after its owner confirms it by clicking a link we email to it.
• Your email address is set as the "reply-to" address on that email, so the artist can reply to you directly.
• We do not use submissions for marketing, and we do not share them with anyone other than the site's team and the service providers described in Section 8.3.

8.3 Service Providers

We use service providers for database hosting, email delivery, background processing, and web hosting to store and deliver submissions. They process submissions only on our behalf.

8.4 Retention

Submissions are deleted automatically 24 months after they are received. They are deleted sooner if the site's team deletes them, or if the site or the site owner's account is deleted. Deleted data may remain in backups and service logs for a limited time before it is overwritten. Copies already emailed to the artist are in the artist's own mailbox, which is outside our control.

8.5 Roles and Responsibilities

The artist who owns the site decides whether to add a contact form and where submissions are sent, and is responsible for their own use of the messages they receive, including providing any disclosures their visitors are legally owed. Monophonic provides the platform that stores and delivers those messages. If you want to access, correct, or delete a message you sent, please contact the artist directly. If you cannot reach them, contact us at support@monophonic.io and we will help where we can.

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect information from children under 13.

10. International Data Transfers

We may transfer your information to countries other than your country of residence. When we do, we implement appropriate safeguards.

11. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Data collected by third-party tracking tools on artists' sites is retained by the relevant provider (for example, Meta) in accordance with that provider's own retention practices. Contact form submissions are retained as described in Section 8.4.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through the Service.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at support@monophonic.io.

14. California Privacy Rights

California residents may have additional rights regarding their personal information under the California Consumer Privacy Act (CCPA).

15. European Economic Area (EEA) and UK Users

If you are in the EEA or the UK, you have certain rights under the General Data Protection Regulation (GDPR) and the UK GDPR, including:

• Right to access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object