This policy explains how [PLACEHOLDER: legal entity name], trading as Steeze Records, uses personal data when we operate Artist OS. Artist OS is the service that helps an independent artist manage releases and their career through a dedicated AI manager.
Our contact email is accounts@steezerecords.com. Our company number and registered address are [PLACEHOLDER: company number] and [PLACEHOLDER: registered address].
What we collect
We collect only the data needed to provide the service, keep it secure and meet our legal obligations. The sources are:
- Your account and studio: contact details, account settings, artist profile details, approval records and the messages you send by SMS, WhatsApp or the web studio.
- Your content: audio masters, artwork, video clips and release metadata that you provide or authorise us to handle.
- Google and YouTube: the connected channel and video analytics we need to understand performance, plus approved video upload access. We use YouTube API Services.
- Gmail: each artist agent may have a visible Gmail mailbox. We read message headers and snippets and send only emails you have approved.
- TikTok: basic profile information, including open ID and display information, and statistics for your own videos, including views, likes, comments and shares.
- Instagram professional accounts: profile information and post insights.
- Too Lost: catalogue, releases, streaming analytics, earnings and royalty data.
- Security and service records: records that help us protect accounts, diagnose problems and show what an approved action did.
Why we use it
We use your data to run the service you ask us to run, including preparing releases, providing analytics, managing connected accounts, maintaining the manager conversation and recording your approvals.
Our main lawful basis is performance of a contract with you, or steps you ask us to take before entering one. We may also use data for our legitimate interests in securing and improving the reliability of the service, provided those interests do not override your rights. Where a connection or message needs consent, we rely on that consent. We may keep or disclose data where the law requires it.
AI and approvals
AI helps your dedicated manager organise work, explain information and prepare proposed actions. Nothing binding is sent, posted, submitted or spent without your approval of that exact action.
We use third-party AI model providers: [LIST OF PROCESSORS]. Data from Google Workspace APIs, including Gmail, is not used to develop, improve or train generalised AI or machine-learning models.
Google, YouTube and TikTok
Steeze Records' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect YouTube, you also agree to the YouTube Terms of Service. Google explains its handling of personal data in the Google Privacy Policy. You can revoke Steeze Records' Google access at myaccount.google.com/permissions.
When you connect TikTok, we use the profile and video-statistics data described above to run the service for you. You can remove access through TikTok's app settings. Look for the connected-app or permissions controls. TikTok may change the name or location of that control.
Who we share data with
We share data only when necessary to provide the service. This can include connected platforms you choose, hosting and storage providers, AI providers, communications providers and professional advisers. Our processors may handle data only on our instructions and for the service they provide to us.
We do not sell your personal data or use your content to train generalised AI models.
International transfers
Some providers may process data outside the UK. When that happens, we will use a lawful transfer mechanism and appropriate safeguards required by UK data-protection law. [PLACEHOLDER: document the transfer safeguards once each processor is selected]
Retention and security
We keep data for only as long as needed for the service, legal obligations, accounting, resolving disputes and security. [PLACEHOLDER: retention periods by data type]
Provider tokens are stored encrypted. Each artist's data is isolated from other artists' data. We use access controls and operational records to protect the service. No security measure can guarantee absolute security.
Your UK GDPR rights
You may ask to access, correct, erase, restrict or move your personal data. You may object to processing based on legitimate interests and withdraw consent where we rely on it. To make a request, email accounts@steezerecords.com.
You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the chance to resolve a concern first.
Children
Artist OS is not intended for anyone under [PLACEHOLDER: minimum age]. We will update this policy once that decision is made.
Cookies and changes
This public website does not set cookies of its own, does not use analytics or advertising trackers and does not load third-party scripts. Our hosting and security providers may set strictly necessary cookies to protect the site from abuse.
The artist studio stores one strictly necessary cookie on your device to keep you signed in. It holds an opaque session reference, cannot be read by scripts on the page, is sent only to the studio and expires after 12 hours. The studio uses no analytics or advertising cookies.
We will update this policy when the service or legal requirements change. The date at the top shows when it was last updated.
Contact
Questions about privacy can be sent to accounts@steezerecords.com.