Privacy Policy
How Music OS handles the data of its users and of the business contacts shown in results
1. Data controller
The controller is Semantic Sounds (P. IVA IT06922960825), which runs Music OS by Semantic.
For privacy questions or to exercise your rights, use the "Remove my data" form in the site footer or the contact page https://www.semanticsounds.com/contact/.
2. Data of registered users
Account: email, password (stored only in encrypted form), plan (Free or PRO) and sign-up date.
Newsletter: only if you tick the optional box at sign-up (legal basis: consent, Art. 6.1.a GDPR). We keep your choice with its date and time. You can withdraw it at any time with the unsubscribe link in our emails or by writing to us.
Usage: the searches you run (section, genre, country, city, filters and date), to apply plan limits, reuse results and improve the service.
Payments: handled on Systeme.io, which processes payment data as an independent controller. Music OS never receives or stores card numbers.
Influencers: if you reach Music OS from a partner influencer's link (an address with ?sa=CODE), we save that code on your account when you sign up and pass it to Systeme.io when you buy the PRO plan, so the influencer receives their commission (legal basis: legitimate interest in running the affiliate program). The code is not stored on your device.
Legal basis: performance of the contract (Art. 6.1.b GDPR). We keep the data while the account is active and delete it on request, except what invoices legally require.
3. Data of the business contacts shown in results
Music OS shows contacts of music organizations and professionals (labels, venues, festivals, promoters, media, playlist curators, DJs, singers and their agencies) so that artists can pitch their music.
Data: organization name, type, city and country, official website, published work emails, links for sending demos or proposals and, when a public source states them, a contact person's name and role and a link to their public professional profile.
Source: public pages found with Google searches, mainly the organizations' official websites and industry directories (e.g. Beatport, Resident Advisor, SubmitHub, Groover) and, for playlists, the public description curators write on their own Spotify playlist (read through Spotify's official API). Every item is shown with a link to the page it comes from.
What we don't do: buy lists, read social networks, derive or guess email addresses from names or domains, or process sensitive data.
Legal basis: legitimate interest (Art. 6.1.f GDPR) in enabling business contacts between artists and industry professionals, using data that people published in order to be contacted for work.
Objection and removal: anyone listed in the results can ask for removal with the "Remove my data" form. We remove the data within 30 days and block it, so future searches never save it again.
Retention: while the data stays published and current; it is re-checked against its sources and deleted on request.
4. Providers processing data on our behalf
• Vercel (website hosting; servers in the Frankfurt region).
• Neon (database; servers in Frankfurt).
• Google, Gemini API (Google searches to find new contacts: it receives the search filters, not users' data).
• Resend (service emails, such as password recovery).
• Systeme.io (payments and PRO subscription management).
• Google Analytics 4 (visit statistics, only if you accept in the cookie banner: details in the Cookie Policy).
Some providers are based in the United States: transfers rely on GDPR safeguards (EU-US Data Privacy Framework or standard contractual clauses). We never sell or share data for advertising.
5. Your rights
You can ask for access, rectification, erasure, restriction and portability of your data and object to processing (Arts. 15-22 GDPR), with the "Remove my data" form or the contact page. We reply within 30 days.
You can also lodge a complaint with your data protection authority (in Italy: www.garanteprivacy.it).
6. Cookies and browser storage
We use only a technical cookie to keep you signed in, and browser storage (localStorage) for language, preferences and contacts saved in the Campaign Tracker. Only if you accept it in the banner, we also use Google Analytics for visit statistics. No advertising or profiling cookies: details are in the Cookie Policy.