Privacy

Effective date: 2026-08-27 Contact: privacy@revolutionunlocked.com

1. Scope

This policy explains what personal data we collect, why, and your rights. It covers revolutionunlocked.com and related services.

Today, the Platform operates as a submission-only intake for prospective founding creators. We currently collect only your name, email, artist/project information, and the audio/media files and metadata you submit through /upload, plus basic technical data (IP address, browser) needed to operate the site securely. The account, streaming, payment, and SIREN data categories described below apply once those features are activated.

2. Data we collect

• Account data: name, email, password (hashed), account tier, role (listener/creator).
• Creator data: artist profile, bio, social/streaming profile links, uploaded content and metadata, rights attestations.
• Founding-creator submissions: name, email, artist/project information, links, and the audio/artwork files and metadata you submit through the founding-creator intake, held privately for manual review — not published or streamed.
• Usage & streaming activity: plays, listens, engagement, device/browser info, IP address, session data. (Per-artist activity is surfaced to the relevant creator; see Transparency below.)
• Payment data: processed by Stripe; we do not store full card numbers.
• AI (SIREN) interactions: prompts and context you provide to SIREN.
• Cookies: the Platform currently uses only strictly necessary technical cookies required for basic security and functionality (for example, cookies our content delivery network sets to detect and prevent automated abuse). These cookies do not require consent under applicable law and cannot be disabled without breaking core functionality. We do not currently use analytics, marketing, or preference cookies. If that changes, we will update this policy and, where required, implement a consent mechanism before those cookies are set.

3. How we use data

Provide and operate the Platform; evaluate founding-creator submissions; process subscriptions and payouts; power discovery, quality analysis, and SIREN responses; publish aggregate fairness metrics; secure the Platform; comply with law. We do not use unselected founding-creator submissions to train AI or machine-learning models — see the Acceptable Use & Community Guidelines.

4. Legal bases (GDPR/UK GDPR where applicable)

Contract performance (accounts, payments), legitimate interests (security, product improvement, fairness metrics, evaluating submissions), consent (marketing, non-essential cookies), and legal obligation.

5. Transparency & disclosure

We publish aggregate, non-identifying platform fairness metrics (e.g., discovery distribution). Each creator can see day-to-day activity on their own content (plays, listens, engagement). We do not publicly disclose data that identifies individual listeners.

6. AI / LLM processing

Where an AI feature is available, SIREN may use a third-party provider to generate an advisory response. We send only the context needed for that request, subject to the applicable configuration and agreements. The current provider and processing status are maintained in the versioned Subprocessor Policy; we do not state that a provider, DPA, retention setting or no-training configuration applies unless it is current and verified.

7. Sharing

We share personal data only with the processors and service providers then listed in the versioned Subprocessor Policy, for the purposes described there. We do not sell personal data.

8. Retention

We retain data only for the period needed for the purpose collected, our documented retention schedule, legal obligations, dispute/security needs and the Creator Agreement where applicable. Specific periods and deletion handling are maintained in the internal retention register and provided where required by law.

9. Your rights

You have the right to access, correct, delete, and port your data, to object to processing, and to withdraw consent, subject to jurisdiction. There is no charge for these requests, and we respond within one month of a verified request, or sooner where required by law. You will not receive discriminatory treatment for exercising any of these rights. Contact privacy@revolutionunlocked.com.

Because the Platform does not currently require an account for the founding-creator intake, we verify access, correction, and deletion requests by matching the email address you used at submission to our intake records. We may be unable to verify a request made from a different email address.

Specific mechanisms: manage email preferences via the unsubscribe link in any marketing email (we will still send transactional/account emails); manage push notifications in your device settings; review and edit your profile directly in account settings; request a copy of your data or delete your account by emailing privacy@revolutionunlocked.com. We may be unable to fully delete an account with an unresolved trust, safety, or legal hold, in which case we will explain why.

Do not sell. We do not sell personal information as defined by the CCPA/CPRA or similar US state laws, and we do not exchange personal information for any financial incentive.

10. Third-party links

The Platform may link to third-party websites (for example, an artist's social or streaming profiles). We do not control and are not responsible for the privacy practices of those sites.

11. Security

Encryption in transit, access controls, and infrastructure hardening. We limit the personal data we collect in the first place. Our infrastructure and payment providers maintain their own security programs — see Hetzner's security practices, Cloudflare's security practices, and Stripe's security practices — and are listed with current status in the Subprocessor Policy. No system is perfectly secure.

12. Children

Not directed to children under 18 (or local age of majority).

13. Changes

We will notify material changes.