PRIVACY POLICY

1. Controller

The controller under Art. 4(7) GDPR is Firestone Invest GmbH ("RoU876", "we"). Contact: privacy@rou876.com. Full postal address in the Imprint.

2. Data We Process

• Account data: email, display name, handle, password hash, profile bio, avatar, social links.
• User content: uploads (audio, lyrics, images), comments, votes, tips, credit transactions.
• Sponsorship / contact forms: name, company, email, phone, country, message.
• Technical data: IP address, browser/device info, timestamps, referrer, session logs.
• Cookies & similar: see Section 8 and our Cookie Policy.

3. Purposes & Legal Bases

• Providing the platform, account and content features — Art. 6(1)(b) GDPR (contract).
• Security, fraud prevention, abuse detection — Art. 6(1)(f) (legitimate interest).
• Sponsorship & partnership communication you initiate — Art. 6(1)(b)/(f).
• Analytics and non-essential cookies — Art. 6(1)(a) (consent, revocable at any time).
• Legal obligations (tax, accounting) — Art. 6(1)(c).

4. Processors & Recipients

We use vetted processors under Art. 28 GDPR, including:

• Cloud hosting & database (EU region where available)
• Email delivery
• Payment processing (for sponsorships / credit purchases)
• AI generation services for remix workflows

We do not sell personal data.

5. International Transfers

Where processors operate outside the EU/EEA, transfers are secured via EU Standard Contractual Clauses and, where applicable, supplementary measures.

6. Retention

Account and content data are stored as long as your account exists. On deletion, personal identifiers are removed within 30 days; anonymised aggregate data may be retained. Tax records are kept for statutory periods (up to 10 years).

7. Your Rights (Art. 15–22 GDPR)

Access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority. Requests: privacy@rou876.com.

8. Cookies

We use strictly necessary cookies (session, auth, security) without consent, and set analytics or functional cookies only after you consent via the banner. Manage or withdraw consent at any time in the cookie preferences.

9. Automated Decisions

No automated decisions with legal or similarly significant effect are made about you. AI-assisted remix generation and moderation may occur but a human remains accountable.

10. Changes

We may update this policy. Material changes will be announced on the platform.