Privacy Policy

1. Who is responsible for your data

TempoDigital AB (“TempoDigital”, “we”) is the data controller for the information described here. We are registered in Sweden, with offices at Kaveldunsvägen 21, 806 36 Gävle, and Jošanička 125A, Vogošća, Sarajevo.

This policy covers tempodigital.org, the distribution platform at platform.tempodigital.org, and the services we provide through them.

For any privacy question, email info@tempodigital.org.

2. What we collect

When you apply — your name, email, the channel links you give us, your self-reported subscriber count, niche and monthly views, your message, the market and language of the page, and your IP address (kept only to detect abuse of a public form).

When you hold an account — your name, email, country, artist or label name, login credentials (stored hashed), and role.

Your catalogue — recordings, artwork, metadata, contributors and credits, release schedules, and the identifiers we issue such as UPC and ISRC codes.

Financial information — royalty earnings, wallet balance, statements, payout requests and method details, and tax documentation (W-8 / W-9). Card details go directly to Stripe; we never see or store your full card number.

Performance data — streams, views, revenue and audience figures reported to us by stores, societies and YouTube for your content.

Support correspondence — the emails and messages you send us.

3. YouTube API Services

Our applications use YouTube API Services. Two different things happen, and it is worth separating them.

Public lookup, no permission needed. For a channel link you send us, we read information YouTube already publishes: title, description, country, creation date, subscriber and view counts, and statistics about recent uploads. This needs no access to your account.

Connected access, only with your consent. If you choose to connect your YouTube account, we request read-only permission to see your channel status (including whether it is in good standing), your YouTube Analytics, and your estimated revenue. We use it solely to assess your application.

We cannot upload, edit, delete or publish anything on your channel. We do not request those permissions.

By using these features you also agree to the YouTube Terms of Service. Google’s own handling of your information is described in the Google Privacy Policy.

You can revoke our access at any time, without contacting us, at myaccount.google.com/permissions. Revoking stops further access immediately. Email info@tempodigital.org if you also want the data we already retrieved deleted, and we will remove it.

Data obtained through the YouTube API is stored only as long as needed for the purpose it was collected for, and is refreshed rather than accumulated.

4. Why we use it, and our legal basis

• To provide the service — deliver your releases, collect and pay royalties, run your account. Basis: performance of our contract with you.
• To assess applications — including public channel data. Basis: steps taken at your request before entering a contract, and our legitimate interest in evaluating partnerships.
• To read your connected YouTube data — basis: your consent, which you can withdraw at any time.
• To take payment and pay you out — basis: contract, and legal obligation for tax records.
• To prevent fraud and artificial streaming — basis: our legitimate interest, and our obligations to the stores we deliver to.
• To keep accounting records — basis: legal obligation.

5. Who we share it with

We share only what each recipient needs:

• Digital service providers — Spotify, Apple Music, YouTube, TikTok, Amazon and others: your recordings, artwork and metadata, so they can make your music available
• Collection societies and licensees — for publishing registration and royalty collection
• Google / YouTube — for Content ID, analytics and the connect flow
• Stripe — payment processing
• Payoneer, PayPal, Wise and banks — to pay you
• Microsoft Azure — hosting and database, in Canada
• Mailgun — email delivery, on EU infrastructure
• Professional advisers and authorities — where we are legally required

We do not sell your personal data, and we do not share it with advertisers.

6. International transfers

We operate internationally, so your data may be processed outside your country — including in the EEA, the United Kingdom, Canada and the United States. Where data leaves the EEA we rely on adequacy decisions or Standard Contractual Clauses with the recipient.

7. How long we keep it

• Applications — while assessed, then as a record of the decision
• Unclaimed YouTube authorisations — discarded within 24 hours if never completed into an application
• Account and catalogue data — while your account is open, and afterwards where a store or society still reports revenue against your releases
• Financial and tax records — for the period Swedish law requires, currently seven years
• Support correspondence — up to three years

8. Security

Data is encrypted in transit. Access tokens and other sensitive credentials are encrypted at rest, passwords are stored hashed, and access to production data is limited to staff who need it. No system is perfectly secure, but if a breach affects your data we will notify you and the relevant authority as the law requires.

9. Your rights

Under the GDPR and similar laws you may:

• Ask for a copy of the data we hold about you
• Have inaccurate data corrected
• Ask for deletion, where we have no overriding legal or contractual reason to keep it
• Ask us to restrict processing, or object to processing based on legitimate interest
• Receive your data in a portable format
• Withdraw consent, including YouTube access, at any time

Email info@tempodigital.org and we will respond within 30 days, free of charge. You may also complain to your local data protection authority — in Sweden, Integritetsskyddsmyndigheten (IMY).

10. Cookies

This website sets no advertising or tracking cookies. The application form keeps your answers in your browser only until you submit. The platform uses cookies and local storage strictly to keep you signed in.

11. Children

Our services are not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us personal information, contact info@tempodigital.org and we will delete it.

12. Changes

We may update this policy. The date at the top always shows the current version, and we will notify you of material changes by email or in your account before they take effect.

13. Contact

TempoDigital AB, Kaveldunsvägen 21, 806 36 Gävle, Sweden. Email info@tempodigital.org.