Privacy Policy

BopOps is operated by:

Alan Mendelevic, trading as BopOps
Individual activity certificate No. 756015
Tuskulenu 54-35, 09208 Vilnius, Lithuania
Email: info@bopops.com

We are the controller of the personal data described in this policy, which means we decide why and how it is processed. You can contact us about anything in this policy at info@bopops.com.

• Your audio stays on your device. Audio, Attachment files and Backgrounds you upload are kept in your browser on the computer where you added them, not on our servers. If we offer cloud sync, your files will only be stored with us if you turn it on.
• We don't sell your data, and we don't use your music, Lyrics or other content to train AI models.
• What you publish is public. A Landing page you Publish, and the Cover Art and Avatar on it, can be seen by anyone and found by search engines.
• Our own usage measurement is anonymous. We count how Studio and its public pages are used without cookies and without identifying you.
• You're in control. You can see, correct, export and delete your data. See Your rights.

3.1 Your Account

When you sign up, we collect:

• your email address
• your password, which we store only in a scrambled (hashed) form that we can't read
• the artist name you enter, which becomes your first Artist

If you sign in with Google, we receive your name, email address and Google account identifier from Google. We don't receive your Google password or access to anything else in your Google account.

3.2 What you create in Studio

Studio stores what you add and make so you can use it on any device:

• Artists: names, Avatars, Bios, Genres, Moods and colors, including Collaborator Artists you create to credit other people
• Songs, Versions, Revisions and Releases: titles, Credits, writers and publishing splits, ISRCs, tempo and key, Descriptions, Genres, Moods, Notes, Release times and tracklists
• Lyrics, including their timing
• Outputs and their settings, such as Visualizers, Lyric videos and Landing pages
• Cover Art and Avatars
• Links to stores and other websites
• Details about the files you add, such as their names and sizes, and what Studio detected in your audio, such as tempo, beat grid and waveform

Notes are private working text. We never show them to anyone else.

3.3 Files kept on your device

Audio, Attachment files and Backgrounds you upload are kept in your browser's storage on your own device, not on our servers. We don't receive them, except as described for AI features in section 3.5.

Cloud sync. If we offer cloud sync and you turn it on, the files you choose to sync will be uploaded to and stored with our hosting provider, so you can use them on your other devices. Cloud sync will always be your choice. We will only access synced files to provide the service to you, to help you when you ask us for support, to keep Studio secure, or where the law requires it.

3.4 Analytics imports

When you import a report from a Source, such as a DistroKid earnings report, we store its contents with your Account so we can show you Analytics. Reports can include stores, countries, numbers of streams and downloads, and earnings, and may name other artists or people you work with and their shares.

You may only import reports you are entitled to use. We process the data in them only to show you your own figures.

3.5 AI features

When you use Co-Writer or AI Backgrounds, we send the details needed for the request to our AI provider:

• Co-Writer: the Song's title, Description, Genres and Moods, and the Lyrics written so far
• AI Backgrounds: the details you choose to draw on, which can include the Artist's name, Moods, Bio and Avatar, the Song's name, Cover Art, Moods, Description and Lyrics, the Theme's description and palette, and any instructions you write

For each AI Background request (a "Generation"), we keep a record of what it was made from, the instructions you wrote, the text description our system wrote for the image model, the AI Credits it cost and when it ran. This lets you see what a Background was made from, and lets us answer billing questions and keep AI Credits accurate.

We don't use your content to train AI models, and our AI provider's terms don't allow it to train on what we send. Our AI provider may keep requests for a limited time, usually up to 30 days, to detect abuse, and then deletes them.

3.6 Purchases

Pro Subscriptions and Credit packs are sold by our reseller, FastSpring, which handles the payment and your payment details. We never receive your full card details. FastSpring sends us what we need to give you what you bought: your name, email address, country, what you bought, and the status of your Subscription and payments.

3.7 Connected services

If we let you connect another service to Studio, such as a distributor or a streaming service's artist dashboard, we will only receive the data you allow when you connect it, such as your catalog, streams and earnings. We use it only to provide Studio's features to you. You can disconnect a service at any time; data already brought in stays in your Account until you delete it.

3.8 Discovery

If we offer Discovery, you can choose, separately for each of your Artists, to let record labels, A&R, managers and other music-industry users ("Industry users") find that Artist. Discovery is always off until you turn it on.

When it's on, Industry users can see:

• the Artist's name, Avatar, Bio, Genres and Moods
• the Artist's Released Songs and Releases, with their details and Links
• summary streaming trends from Analytics

We will never show your earnings, Notes, unreleased work, audio or email address through Discovery unless you make a separate, specific choice to share them. Industry users can contact you through Studio, without seeing your email address.

You can turn Discovery off at any time. This stops Industry users from finding the Artist from then on, but we can't take back what they have already seen or noted.

3.9 Landing page visitors

When someone visits a published Landing page, we count Visits and Clicks for the Artist who published it, along with the visitor's country.

• The country comes from the visitor's IP address, worked out by our hosting provider at the time of the visit.
• To count unique visitors per day, we combine the IP address and browser details with a random value that changes every day, and scramble (hash) the result. The daily random value is deleted when the next one is made, so a visitor can't be recognized from one day to the next.
• We don't store visitors' IP addresses, and counting Visits and Clicks doesn't use cookies or browser storage.
• Landing pages don't set cookies or use browser storage today. If we introduce ads on Landing pages, see Ads.
• Visits from bots and link previews, and an Account's own views of its own page, aren't counted.

A Landing page can include a YouTube video. The video only loads from YouTube when a visitor clicks to play it, and from then on YouTube's own privacy policy applies.

3.10 Usage of Studio and our website

We count, anonymously and in aggregate, how Studio, its public pages and our website are used, such as which pages are visited and when an export finishes. We use Plausible Analytics, which doesn't use cookies and doesn't identify you, your Account or your Artists.

3.11 Communications and support

When you email us, we keep your messages and our replies so we can help you and keep a record. We send you emails about your Account, such as sign-up confirmations, password resets, receipts and important changes to Studio or these terms.

3.12 Technical data

Like any website, our servers receive technical information when you use Studio, such as your IP address, browser type and the time of your request. Our hosting providers use it to deliver the service and protect it from abuse, and keep it only briefly in security logs.

Under the EU General Data Protection Regulation (GDPR), we need a legal basis for each use of your data.

Where we rely on legitimate interests, we have weighed them against your rights. You can object at any time; see Your rights.

Some things you make in Studio are designed to be public:

• Published Landing pages, with everything you chose to show on them, such as the Artist's name, Bio and Avatar, the Cover Art, Description, tracklist, Release time, Links and video
• Cover Art and Avatars used on a published Landing page

Anyone with the address can see a published Landing page, search engines can index it, and social networks show a preview of it when it's shared. Unpublishing a Landing page takes it away from visitors, but we can't remove copies that search engines, social networks or other people have already made.

We don't sell your personal data. We don't share it for other companies' advertising, except as described in Ads.

We use these service providers to run Studio. They process data on our behalf, under contracts that require them to protect it and use it only to provide their service to us:

These companies receive data as independent controllers, under their own privacy policies:

• FastSpring, which sells Pro Subscriptions and Credit packs to you as our reseller and handles payments, invoices and tax
• Google, if you sign in with Google
• YouTube, when a visitor plays a video on a Landing page
• services you connect to Studio
• Industry users, for the information you choose to show through Discovery

We may also share data:

• if the law requires it, or to respond to a valid request from a court or public authority
• to protect the rights, safety and property of our users, the public or BopOps, or to investigate fraud or abuse
• with a buyer or successor if BopOps or Studio is sold, merged or transferred. We will tell you before your data becomes subject to a different privacy policy.

Studio doesn't show ads today. In future, Accounts on the free Hobbyist Plan may see ads inside the Studio app, and Landing pages published by Hobbyist Accounts may show ads to their visitors. Pro and Label Accounts won't see ads, and we won't show ads on their published Landing pages.

If we introduce ads:

• we will update this policy first, naming the ad partners we work with
• ads that are personalized to you or to a Landing page visitor, or that use cookies or similar technology for advertising, will only be shown with that person's consent where the law requires it, and consent can be withdrawn at any time
• we will never use your audio, Lyrics, Notes or Analytics to choose ads

Your Studio data is stored in the European Union (Ireland). Some of our providers are based in, or reach our data from, countries outside the European Economic Area, including the United States. When data is transferred there, we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses, together with any additional safeguards that are needed. You can ask us for more information about these safeguards.

When your Account is deleted, we delete its data from our systems within 30 days, and from our backups within 90 days, except for what we must keep by law. Anonymous, aggregated figures that can't identify you may be kept.

Files kept on your device are stored in your browser. Deleting a Song removes its audio from that device, and clearing your browser's data for Studio removes all files Studio kept there. Please keep your own copies of your files.

Studio uses only the cookies and browser storage it needs to work:

Because these are needed for the service you asked for, they don't require consent. We don't use advertising or tracking cookies today. Landing pages set no cookies today.

Some third parties set their own cookies when you use them through Studio: FastSpring when you open checkout, Google when you sign in with Google, and YouTube when a video is played. Their own policies apply.

If we introduce cookies that need your consent, such as for ads, we will ask for it first.

You have the right to:

• access the personal data we hold about you and get a copy of it
• correct data that is wrong or incomplete
• delete your data
• restrict how we use your data in some cases
• receive your data in a portable format and have it sent to another company
• object to our use of your data based on legitimate interests, and to direct marketing at any time
• withdraw consent at any time, where we rely on it, without affecting what we did before

Much of your data can be seen and changed in Studio itself. For anything else, including deleting your Account, email us at info@bopops.com from the email address on your Account. We will reply within one month. We may need to confirm your identity first.

Complaints. If you're unhappy with how we handle your data, please contact us first. You also have the right to complain to a data protection authority, in particular in the EU country where you live or work. Our lead authority is the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, 10312 Vilnius, Lithuania, vdai.lrv.lt.

For users in the United States

Depending on your state, you may have the right to know what personal data we collect, to access, correct and delete it, and to opt out of its sale, of "sharing" for cross-context behavioral advertising, and of targeted advertising. We don't sell personal data and don't share it for cross-context behavioral advertising. If that changes, for example when we introduce ads, we will update this policy first and give you a way to opt out. To use your rights, email us at info@bopops.com. We won't treat you differently for using them.

Studio is not meant for children. You must be at least 13 years old to use it, or older if the law where you live sets a higher age for using online services without a parent's consent. If you are under 18, you need your parent or guardian's permission to make purchases. If we learn that we hold data about a child below the required age without the necessary consent, we will delete it. If you think this has happened, contact us at info@bopops.com.

We protect your data with appropriate technical and organizational measures. Data is encrypted in transit and at rest with our providers, passwords are stored only in hashed form, and access to Account data is limited to what's needed to run and support Studio. No service can be perfectly secure. If a data breach is likely to put your rights at high risk, we will tell you without undue delay.

We may update this policy as Studio changes or the law requires. If we make significant changes, we will tell you by email or in Studio before they take effect. The effective date at the top always shows when the policy last changed.

Alan Mendelevic, trading as BopOps
Tuskulenu 54-35, 09208 Vilnius, Lithuania
info@bopops.com