Privacy Policy

Information you give us

• Account info: your name, email, and password (stored hashed).
• Billing info: handled by our payment processor; we do not store full card numbers.
• Your inputs: taste profile, onboarding answers, verdicts, notes, and any artists you manually add.
• Team info if you are on a Team Subscription: emails and roles of the Members you invite.
• Organization billing info: when an Organization purchases team seats, we collect the Org's billing contact, payment method, and the seats they fund. We collect the email of each Member assigned to a seat. We do not require Members to share their personal payment information with the Org, or vice versa.
• Observer seat info: when an Owner invites an Observer, we collect that person's email, the Owner who invited them, and the workspace they were granted access to.
• Communications you send us.

Information we collect automatically

• How you use the Service: pages, runs, features, timestamps.
• Device and connection info: browser, OS, IP address, approximate city-level location, and basic fingerprint signals we use to detect credential sharing.
• Log files and audit trails used for security and abuse prevention.

• To provide, maintain, and personalize the Service.
• To process payments and bill your Subscription.
• To authenticate you, secure your account, and detect abuse — including credential sharing.
• To send transactional emails (billing, security, service-critical updates) and, with your option to opt out, occasional product news.
• To analyze aggregate usage and improve the Service.
• To comply with legal obligations and enforce our Terms.

The Service uses AI to produce Discovery Outputs.

We do not use your taste profile, your verdicts, or your notes to train AI models that we release or offer to third parties. We may use de-identified, aggregated insights internally to improve our methodology.

We share information only as follows:

• With service providers that help us run the Service (such as hosting, payment processing, email delivery, and AI infrastructure), under contracts that require them to handle data appropriately and to use it only for our purposes.
• Within your team if you are on a Team Subscription: account info, run activity, and shared pipeline entries are visible to other Members of that team.
• When a Member explicitly promotes a discovery from their personal workspace into a team workspace, the row, its score, and any notes they choose to include are visible to all seat-holders of that team. The Member's personal taste profile and private notes are never visible to the team. Organizations that fund team seats see seat-level utilization and run history within their team workspace, but they do not see the personal workspace of any Member, even when funding that Member's seat.
• To comply with law, court orders, or legitimate government requests; to enforce our Terms; or to protect rights, safety, or the integrity of the Service.
• In connection with a sale, merger, or financing of our business.

We do not sell your personal information. We do not share it for behavioral advertising. We do not engage in ad targeting based on your taste profile.

We use reasonable administrative and technical safeguards to protect your information, including encryption in transit and at rest, restricted internal access, and audit logging. No system is perfectly secure; if a breach affects your personal data, we will notify you and any applicable authorities to the extent required by law.

We keep your data while your account is active and for a reasonable period after termination (typically up to twelve months), then delete or anonymize it — except where law requires longer retention (for example, tax and accounting records). Aggregated, de-identified data may be kept indefinitely.

You can:

• request a copy of the personal information we hold about you;
• ask us to correct inaccurate information;
• ask us to delete your data, subject to legal exceptions;
• opt out of marketing emails at any time. Transactional emails (billing, security, service-critical) continue while your account is active.

To exercise these rights, email privacy@undertone.ai. We will verify your identity before responding.

California residents. California law gives you additional rights, including the right to know what information we hold about you, the right to correct it, the right to delete it (subject to exceptions), and the right to be free from discrimination for exercising these rights. We do not sell or share your personal information as those terms are defined under California law.

The Service provides broad descriptive information about recording artists using publicly available artist information and Undertone's own research. The Service does not collect or provide private contact information such as management or representative contact details.

Artists or their authorized representatives can email artist-privacy@undertone.aito ask what information we hold about them, request correction of inaccuracies, or be removed from our discovery data set going forward. A subscriber's private notes inside their own account are controlled by that subscriber, not by us.

We use cookies for two purposes: to keep you signed in and to measure aggregate usage of the Service. We do not use advertising cookies and we do not share information for behavioral advertising. You can block cookies in your browser; some Service functions may break if you do.

The Service is intended for music-industry professionals and is not directed to anyone under 18. We do not knowingly collect data from anyone under 18. If you believe we have, email privacy@undertone.ai and we will delete it.

We may update this Policy. Material changes will be communicated by email or in-product notice. Continued use of the Service after the change takes effect means you accept.

Contact:

• Privacy questions — privacy@undertone.ai
• Artist data requests — artist-privacy@undertone.ai
• General — hello@undertone.ai