DropVantage Privacy Policy

DropVantage™ (the “Service”) is operated by Michael Alan Cotton II (“DropVantage,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit dropvantage.com, create an account, build a music-release campaign, upload or link assets, connect supported third-party services, contact support, or otherwise use the Service.

This Policy is written for the controlled public beta. Features and providers may change as the Service develops. We will update this Policy before materially changing how personal information is used.

1. Information we collect

A. Account and identity information

We may collect your artist or display name, email address, account identifiers, authentication status, account preferences, and related profile details. Passwords are handled by our authentication provider and are not intended to be readable by DropVantage personnel.

B. Release, campaign, and creative information

When you create a release workspace, we may collect information such as:

• artist name, song title, genre, and release date;
• song meaning, listener emotion, strongest hook, and preferred fifteen-second section;
• target audience, similar artists, regional focus, listener vibe, campaign goals, and planned budget level;
• available assets, content ideas, notes, readiness data, campaign plans, and progress;
• links to Spotify, Apple Music, YouTube, Tidal, Audiomack, SoundCloud, smart links, pre-save pages, download gates, and other destinations.

C. Uploaded and connected content

You may provide audio, cover art, images, video, metadata, and other creative assets. Private master audio is intended to remain private unless you deliberately choose a public-safe asset or public page. Public pages and approved public assets may be visible to anyone and may be cached or indexed by third parties.

We do not currently use private master audio to train public or third-party generative-AI models. We will not introduce that use without updating this Policy and obtaining any consent required by law.

D. Connected-service information

When you choose to connect a supported service, we may receive identifiers, profile details, release data, page or account names, permissions, connection status, and read-only analytics or insights authorized by you. Current Meta and Spotify connections are read-only. DropVantage does not currently activate advertising campaigns, change budgets, or spend money through those integrations.

Disconnecting an integration stops future access by DropVantage, but it does not delete information already held by the third-party provider. You may also need to revoke access in that provider’s settings.

E. Billing and transaction information

If paid plans are offered, our payment processor may collect payment-card and billing information. DropVantage generally receives transaction status, plan, amount, dates, and limited billing identifiers rather than complete card numbers.

F. Technical, usage, and security information

We may collect IP address, browser and device type, operating system, referring pages, pages viewed, timestamps, session identifiers, authentication events, request identifiers, error reports, diagnostic information, and security logs. We use this information to operate, secure, troubleshoot, and improve the Service.

G. Communications and support information

We collect information you provide when contacting support, reporting a problem, submitting a privacy request, responding to a survey, or communicating with us. Do not send passwords, API keys, access tokens, full payment-card details, or unnecessary sensitive information.

H. Fan information processed for creators

If a creator uses a DropVantage feature to collect fan contact information, DropVantage may process that information to provide the feature. The creator is responsible for giving lawful notice, obtaining any required consent, honoring unsubscribe and privacy requests, and using fan information only for permitted purposes. DropVantage may suspend collection features that are used unlawfully or deceptively.

2. Sources of information

We collect information:

• directly from you;
• automatically from your browser, device, and use of the Service;
• from services you choose to connect;
• from payment, hosting, authentication, email, security, and analytics providers;
• from public sources when needed to validate links or public release information;
• from other users or authorized representatives who contact us about an account or rights request.

3. How we use information

We use personal information to:

• create and secure accounts;
• authenticate users and send confirmation, password-reset, and security emails;
• save release workspaces, drafts, campaign plans, links, assets, and progress;
• generate release-planning recommendations, readiness checks, and content direction;
• provide read-only connected-service features;
• operate public fan or release pages that you choose to publish;
• process subscriptions and prevent payment fraud;
• provide support and respond to requests;
• monitor performance, investigate errors, and protect against abuse;
• enforce our Terms of Service and protect users, rights holders, and the public;
• comply with legal obligations and resolve disputes;
• evaluate and improve the Service using aggregated or de-identified information where practical.

4. How we disclose information

We may disclose information to the following categories of recipients:

Service providers

Providers that support authentication, database, storage, hosting, transactional email, payments, error monitoring, security, customer support, and infrastructure. Depending on which features are active, these may include Supabase, Vercel, Resend, Stripe, and Sentry.

Connected platforms

Meta, Spotify, or another service you direct us to connect with. Their handling of information is governed by their own policies.

Public audiences

Information and assets you intentionally publish to a public DropVantage page may be available to anyone.

Professional advisers and business transactions

Lawyers, accountants, insurers, auditors, financing sources, or parties involved in a merger, acquisition, restructuring, financing, bankruptcy, or sale of assets, subject to appropriate safeguards.

Legal, safety, and enforcement disclosures

Government authorities or other parties when reasonably necessary to comply with law, protect rights or safety, investigate fraud or abuse, enforce agreements, or respond to valid legal process.

We do not sell personal information. We do not currently share personal information for cross-context behavioral advertising. If that practice changes, we will update this Policy and provide legally required choices before the change takes effect.

5. Cookies, local storage, and browser signals

DropVantage uses cookies, local storage, and similar technologies for authentication, security, preferences, draft continuity, and core operation. We may also use limited performance or error-monitoring technologies.

Some browsers offer “Do Not Track” signals. Because there is no universally accepted standard for responding to every Do Not Track signal, the Service may not respond to those signals. Where legally required, we honor recognized opt-out preference signals that apply to sale or sharing. DropVantage does not currently sell or share personal information for cross-context behavioral advertising.

6. Data retention

We retain information for the shortest period reasonably necessary for the purposes described in this Policy, considering:

• whether your account is active;
• whether the information is needed to provide a requested feature;
• security, fraud-prevention, and audit needs;
• legal, tax, accounting, contractual, and dispute-resolution obligations;
• the sensitivity of the information;
• whether deletion is technically feasible in active systems and routine backup cycles.

When an account is deleted, we remove or de-identify account and workspace information from active systems subject to legitimate exceptions. Limited information may remain in backups until the backup is overwritten, and certain billing, security, legal, or dispute records may be retained as required or permitted by law.

7. Your choices and rights

Depending on your location and applicable law, you may have rights to:

• know or access personal information we maintain about you;
• receive a portable copy of certain information;
• correct inaccurate information;
• delete personal information;
• withdraw consent where processing is based on consent;
• object to or restrict certain processing;
• opt out of sale or sharing for targeted advertising;
• limit certain uses of sensitive personal information;
• appeal a denied privacy request where applicable;
• receive equal service and price when exercising privacy rights.

You may update certain information in your account. During public beta, access, correction, export, and deletion requests may be submitted to support@dropvantage.com from the email associated with your account. Use a clear subject such as “Privacy Request,” “Data Export,” or “Delete My Account.” We may ask you to sign in, reauthenticate, or provide information reasonably necessary to verify the request. Never send your password.

For California requests that are subject to the CCPA, we aim to confirm receipt within 10 business days and respond within 45 calendar days. Where reasonably necessary and permitted, we may extend the response period and will provide notice. Authorized agents may submit requests where allowed, but we may verify the agent’s authority and the consumer’s identity.

8. Account deletion and exports

Account deletion and data-export procedures are described at:

• /account-deletion
• /data-export

Deleting your DropVantage account does not automatically delete data held independently by Meta, Spotify, Stripe, or other third parties. Disconnect or contact those services separately where needed.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, private storage defaults, encrypted connections, row-level authorization controls, logging, and restricted service credentials. No system is completely secure, and we cannot guarantee that information will never be accessed, lost, altered, or disclosed without authorization.

You are responsible for protecting your password, device, connected accounts, and recovery email. Contact us promptly if you believe your account or content has been compromised.

10. Children and age eligibility

The public beta is intended for adults who are at least 18 years old or the age of legal majority where they live. The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact support@dropvantage.com if you believe a child provided personal information without appropriate authorization.

11. International users

The Service is operated from the United States. If you use DropVantage from another country, information may be processed in the United States and other locations where our providers operate. Where applicable law requires additional rights or safeguards, contact us to exercise those rights.

12. Third-party services and links

The Service may link to or connect with third-party platforms. We are not responsible for their privacy, security, content, availability, or practices. Review their terms and privacy policies before connecting or providing information.

13. Changes to this Policy

We may update this Policy to reflect product, legal, security, or operational changes. We will post the updated version with a new effective date and provide additional notice when required. Material changes will not be applied retroactively where prohibited by law.

14. Contact us

Operator: Michael Alan Cotton II Product: DropVantage™ Email: support@dropvantage.com Mailing address: 5387 Bancroft Avenue, Oakland, California 94601, United States

Use “Privacy Request” in the subject line for privacy matters.