What we do with what you give us

This policy describes how MyMaestro AI Inc., a Delaware corporation (“MyMaestro,” “we,” “us,” and “our”), collects, uses, and shares your personal information in connection with the Rooms platform: the artist websites labels operate using our platform, the fan app, checkout we provide, our own websites including rms.fm, and our related services (together, the “Services”).

MyMaestro operates other products under their own privacy policies. This policy governs the Services, and where it conflicts with another MyMaestro privacy policy, this policy applies to the Services.

Rooms, Services

The platform, sites, applications, and related services described above, operated by MyMaestro.

room

An individual artist’s website, run on our platform by that artist’s label, usually on the artist’s own domain and in the artist’s branding.

Label

The record label, or artist team, that operates one or more rooms. A label is an organization separate from MyMaestro.

Fan

A person who holds a fan account.

Fan account

Your single account with Rooms. It works across every room on the platform and in the fan app, and it holds your sign-in, saved details, linked streaming accounts, notification choices, and everything you own.

Fan app

The signed-in surface where you manage your account, your notification choices, and everything you own, across every artist and label you have engaged with.

Labels operate rooms for their artists. Fans visit them, follow artists, and buy from them. Four consequences follow.

A room may not look like ours, but this policy covers it. Rooms usually live on an artist’s own domain and carry the artist’s branding. Where a room is run on our platform, the account you create there, the checkout we provide, and the data practices described here apply, and the room links to this policy.

When you buy something, the label is the seller. The label sets the price and is your counterparty. For digital purchases, we provide the checkout and payment goes directly to the label’s own payment account; we never hold your money and take no percentage of any sale. Physical goods are sold through the label’s own online store, under that store’s terms and privacy policy.

When you follow an artist, sign up for a release, or buy, you direct us to provide that artist’s label with your information. That includes your name, your contact details, what you buy, and how you engage with that label’s artists. The label owns that record of its relationship with you. We show you what a label will receive at the point you sign up, and signing up is the act by which you direct us to provide it.

One label never sees another label’s record of you. Each label receives your activity with its own artists only. If you engage with artists on two different labels, each label holds its own record and neither can see the other’s. This separation is built into how the platform stores data, not just promised.

Following an artist and being on a label’s email or SMS list are two different things. Following does not put you on any mailing list. Hearing from a label by email or text is a separate choice, made per label, and you can withdraw it at any time without losing anything you own or your standing with an artist.

Your information sits with two organizations with different roles, and each answers for its own. This determines who you go to when you want something done.

MyMaestro is responsible for the platform and your fan account. Your sign-in and credentials, your saved payment details, your linked streaming accounts, your notification choices, delivery of digital purchases, the fan app, platform security, and our own communications with you. These stay with us and are not provided to any label. What a label receives is the record of your relationship with that label: never your password, never your saved card, never your streaming account connection, and never your activity with any other label.

Each label is responsible for its own relationship with you. The label decides what to put in its rooms, what to sell, what to send to the fans who opted in to hear from its artists, and how to use the fan information it holds, including in its own systems outside the platform. The label owns its record of you and can export it.

Every label agrees, when it joins the platform, to terms that require it to use fan information lawfully, prohibit it from selling, renting, or transferring that information, require it to honor your opt-outs and to act on deletion requests we forward to it, require it to keep the information secure, and require it to impose equivalent restrictions on anyone acting on its behalf.

Where to go. For anything about your fan account, your digital purchases, or your access, contact us. For anything about a particular label, meaning what it holds, how it is using it, or its messages to you, you can contact us and we will forward your request to the label, whose agreement with us requires it to respond, or you can contact the label directly. For a physical order, contact the label or its store.

Activity before you have an account. If you click a release link or sign up to be notified before creating an account, we hold that activity provisionally and connect it to your account when you create one or sign in, using identifiers such as your email address, phone number, an order reference, or your session.

A label joining the platform may bring the fan records it already holds, for example a mailing list from its email tool, purchase and order history from its store, or data exported from a link or campaign platform. If you are in those records, we receive that information from the label rather than from you, and we hold it as part of that label’s fan records.

The label remains responsible for those records. Labels must confirm to us that they already have a relationship with the people in the records they bring, that they collected the information lawfully, and that they hold any consents needed to keep contacting them. Where a label imports a mailing list, your existing opt-outs carry over, and every message sent through the platform includes a way to unsubscribe.

This section states the same collection described above in the categories used by California law.

We do not build profiles of you across labels, and no label’s campaigns are targeted using another label’s fan records. Retention periods for each of the above are set out under Retention.

In addition to the purposes described above, we use information in the following ways:

• —To provide the Services, including operating rooms, completing digital purchases, and maintaining your access to what you have bought.
• —To provide each label with its fan records as described in this policy.
• —To deliver, on behalf of labels, the email and text messages you signed up for, and to enforce your opt-outs when you withdraw.
• —To send you our own service communications and, with the choices described below, our own promotional communications.
• —To measure and improve the Services, conduct analytics using information we collect directly, and develop new features.
• —To detect and prevent fraud and abuse, and to secure accounts.
• —To respond to support requests and other inquiries.
• —For internal administrative purposes and to manage our relationships.
• —To comply with law, including tax and reporting obligations.

We do not use your personal information to train generative AI models, and we do not use any artist’s or label’s content to do so either.

With the labels whose artists you engage with

When you follow an artist, sign up for a release, enter a presale, or buy, that artist’s label receives:

• —Your identity and contact information: name, email address, phone number where you provided it for that label’s messages, and location where provided.
• —Your purchase history with that label’s artists: what you bought, when, and the amount paid, including orders from the label’s own store.
• —Your engagement with that label’s artists: signups, waitlist entries, presale entries, poll responses, content opened, and messages opened and clicked.
• —Your standing with that label’s artists.

A label does not receive your password, your saved payment details, your streaming account connection, or your activity with any other label’s artists.

The label decides what it does with this within the limits of its agreement with us, and it answers for those decisions directly. See Who Is Responsible for What above.

Sales and chart reporting

Labels generally report direct sales for sales-chart eligibility. Where a release is reported, we send the reporting body the transaction data it requires, which may include purchase details and information used to verify that a purchase is genuine. This covers digital purchases made through the Services and physical orders recorded from the label’s store. A release that is being reported is marked as such before you complete a purchase.

Reported data cannot be recalled. The reporting body holds it as its own controller, under a license that does not expire. If you later ask us to delete your information, we can delete our records and require the label to act on your request, but neither we nor the label can withdraw data already reported.

If you do not want a purchase reported, do not buy a release marked as reported.

Service providers

We share information with service providers who help us operate the Services: payment processing, hosting and infrastructure, email and text message delivery, customer support, and analytics performed on our behalf. They act on our instructions and may not use it for their own purposes.

Affiliates and corporate transactions

We may share information with our affiliates, meaning a parent, sister, or joint venture organization, or another organization under common control. If another organization acquires, or plans to acquire, our company, operations, or assets, we will also share information with that organization, including at the negotiation stage.

With your consent

We may ask whether you would like us to share your information with a third party not described elsewhere in this policy. We share it only if you agree.

Legal and safety disclosures

We may disclose information in response to subpoenas, warrants, or court orders, in connection with legal process, or to comply with applicable law. We may also share information to establish or exercise our rights, to defend against a legal claim, to investigate or prevent suspected illegal activity, fraud, or threats to the safety of any person or property, or a violation of our policies.

What we do not do

We do not sell personal information, and we do not disclose it to third parties for their own advertising. The Services do not carry third-party advertising cookies or trackers. We never charge you, the fan, for anything: no account fee, no subscription, no charge for holding what you bought.

The information a label receives when you engage with its artists is provided at your direction. You initiate it by following, signing up, or buying; we show you what the label will receive; the label may use it only within the limits of its agreement with us; and you can stop future sharing by unfollowing or by asking us to delete your information.

We use cookies and similar technologies that we operate ourselves, including on the rooms run on our platform. A cookie is a small piece of information that a website or application stores on your device.

We do not deploy third-party advertising cookies or pixels on the Services.

Your controls. Where consent is required for functional or analytics cookies, we ask for it before setting them, including on rooms, and you can withdraw it at any time in the same place. Most browsers also allow you to block or delete cookies. Blocking strictly necessary cookies will prevent parts of the Services from working.

Opt-out preference signals. Where we are required to honor an opt-out preference signal such as Global Privacy Control, we do. We do not respond to “Do Not Track” browser signals.

We encrypt personal information in transit and at rest. Access to fan information within MyMaestro is limited to the people who need it for the purposes described in this policy. Each label’s fan records are isolated so that a label can reach only its own records. We require comparable measures of our service providers by contract, and we review our security controls as the Services grow.

No method of transmission over the Internet, and no method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee its security. Where we are required by law to notify you of a breach of your personal information, we may do so electronically, in writing, or by telephone, where the law permits.

We keep personal information for as long as we need it for the purposes described in this policy, or for as long as the law requires, whichever is longer. The table below states each period and what sets it.

Backups. Backups are held on a rolling cycle and overwritten in turn. Information you have asked us to delete is removed from our live systems on the schedule above, and disappears from backups as that cycle completes. We do not restore deleted information from a backup except to recover from a failure, and where we do, we re-apply your deletion.

A legal hold, meaning litigation, an investigation, or a regulatory request, overrides every period above for the records it covers, for as long as it lasts.

Data sent to a sales-chart reporting body is not covered by this schedule and is not ours to delete. See Sales and chart reporting. A file you have downloaded is on your own device and is outside our control. Records held by a label in its own systems, or by a label’s store, are governed by the label’s and the store’s own policies.

Access to your personal information. You may request access to your personal information using the contact details below. Where required by law, we will grant you reasonable access to the personal information we hold about you.

Correcting your personal information. You can update and correct your personal information in your account settings. If you change your email address, the change carries through to the labels whose artists you engage with, so that they hold current details. If the Services do not allow you to update or correct particular information, contact us using the details below.

Deletion of your personal information. You may request that we delete your personal information using the contact details below. When we act on a deletion request, we notify the labels whose artists you have engaged with, and their agreement with us requires them to erase your information from their own systems and to confirm that they have done so. Three limits apply: we must keep certain records that the law requires us to keep, on the schedule set out under Retention; a label may retain records where its own legal obligations require it, and it is responsible for that decision; and data already sent to a sales-chart reporting body cannot be recalled by anyone.

Notifications. You control notifications per artist and per label in the fan app, and through your device’s system-level settings.

Linked streaming accounts. You can disconnect a linked streaming account at any time in your account settings. Disconnecting stops further use of the connection. Pre-saves already made at your request remain.

Messages from artists and labels. Following an artist does not add you to that label’s email or SMS list. You choose that separately, per label, and you can withdraw it at any time, in your settings, through the unsubscribe link in any email, or by replying STOP to any text message. Withdrawing does not affect what you own or your standing with an artist.

Messages from us. You can opt out of our own promotional emails using the link in any such message. Service and transactional messages, meaning receipts, security notices, and messages about your purchases, are sent regardless.

Objection to certain processing. You may object to our use of your personal information using the contact details below.

Withdrawing consent. Where processing is based on your consent, you may withdraw it using the contact details below. If you withdraw consent, we may no longer be able to provide you some or all of the Services. In some cases we may limit or deny a request where the law permits or requires us to do so, or where we are unable to verify your identity.

If you live in a state with a comprehensive privacy law, you may have some or all of the following rights, subject to that law’s conditions and exceptions:

• —To know whether we process your personal information, and to access it.
• —To correct inaccuracies in your personal information.
• —To delete your personal information.
• —To obtain a copy of your personal information in a portable format.
• —To opt out of the sale of personal information, the sharing or processing of personal information for targeted advertising, and certain profiling. As stated above, we do not sell personal information and we do not disclose it for third-party advertising.
• —To limit our use of sensitive personal information. The only sensitive personal information we collect is your account log-in in combination with your password. We use it to authenticate you and secure your account, we do not disclose it, and we do not use it to infer characteristics about you.
• —Not to be discriminated against for exercising these rights.

To exercise any of these rights, contact us using the details below. We may take reasonable steps to verify your identity before acting on a request. Where the law provides for it, you may authorize an agent to submit a request on your behalf, and you may appeal a decision we make on your request by contacting us at the same address.

Because each label holds its own record of its relationship with you, a request made to us reaches our records and, through the label’s agreement with us, theirs. You may also make the request to a label directly.

California residents may also request details of the categories of personal information, if any, that we share with third parties or affiliates for their own direct marketing.

The Services are not directed to children under 16, and you may not create an account or make a purchase if you are under 16. We do not knowingly collect personal information from anyone under 16. If we learn that we have, we will delete the information and close the account.

If you believe a child under 16 has provided us with personal information, contact us using the details below so that we can take appropriate action.

We offer the Services in the United States. We operate the Services from the United States and process personal information there. If you use the Services from outside the United States, your information will be processed in the United States, where data protection law may differ from the law of your country.

We do not control the privacy practices of websites or applications that we do not operate. That includes a label’s own online store, where physical purchases happen; the ticketing providers that sell tickets; the streaming services you may link; and the sites and services artists and labels run outside their rooms. Their own privacy policies govern what they do with your information, and we suggest you read them.

We may update this policy. When we do, we will change the effective date at the top and post the updated policy on the Services. Where a change is material, we will notify you before it takes effect, by email or in the Services, and you may close your account if you do not wish to continue. Where a change would involve using personal information we already hold for a purpose materially different from the one it was collected for, we will ask for your consent before doing so. Previous versions of this policy are available on request.

For questions, comments, or complaints about our privacy practices, or to exercise any right described in this policy:

MyMaestro AI Inc., Attn: Privacy, United States. help@rms.fm. The street address is not set in the source document and is not invented here.

We respond within the period the applicable law requires and, where no period is set, within 45 days of receiving your request.