Privacy Policy

We collect information you provide directly when you create an account, build your artist profile, or interact with [ARCHIVE] features.

Account Information: Email address, display name, profile photo, bio, location, genre, and social links you choose to add.

Music & Creative Data: Spotify artist links, audio previews, digital products you upload, posts you publish, your Discover profile (age, gender, continent, Discord roles), and anything you submit to Co-Producer — including source audio/MIDI/project files you upload and the stems, FLPs, or other output generated for you.

Connected Account Data: When you connect Spotify, we store your Spotify user ID, display name, and an access/refresh token used to verify follows and power playlist features. When you connect Discord, we receive your Discord username, email, avatar, and server roles, and connecting automatically adds you to the [ARCHIVE] Discord server so role-based unlocks can apply. When you sign in with Google or Apple, we receive the basic profile information those providers share for authentication.

Spotify Catalog Data: If your profile includes a Spotify artist link, we automatically fetch and display public catalog information (albums, singles, top tracks, cover art, release dates) from Spotify's public API, refreshed about once a day. This is public data Spotify makes available about any artist; we don't access your personal Spotify account through this feature. Catalog data is attributed to Spotify.

Newsletter Signups: If you sign up for an artist's or label's email list on [ARCHIVE], we store your email address (and your country, if you provide it) and link it to that artist or label so they can send you updates. [ARCHIVE] doesn't send marketing on the artist's behalf beyond what they send through their own list. To be removed from a list, email contact@personaloutcome.me and we will delete the signup record.

Platform Analytics & Network History: We keep a daily point-in-time snapshot of platform activity — per-profile metrics (followers, posts, likes, matches, marketplace sales, revenue) and platform-wide totals — to track growth and power our own internal analytics. These snapshots are retained as a historical record and are not deleted on the same schedule as other account data; see Data Retention below.

Co-Producer Generations: When you use Co-Producer, we store the rendered audio file along with the prompt, genre, mood, key, BPM, and duration you specified, tied to your account. Generations are private to you by default — only you (and ARCHIVE staff, for support or moderation) can see or play them — unless you choose to mark one public. You can delete any generation yourself at any time from Co-Producer.

Your Uploads (FLPs & Samples): You can upload your own FLP project files and audio samples for Co-Producer to use — for example, in place of a library sound, or (once available) for our team to finish. Uploads are stored in our file storage, tied to your account, and visible only to you and ARCHIVE staff — we do not claim ownership of anything you upload, and you can delete an upload yourself at any time. We do not use your uploads, or anything Co-Producer generates for you, to train or improve [ARCHIVE]'s models or production rules — they are used only to provide the feature you asked for.

"Finish My Project" (coming soon): This feature is not available yet. When it launches, choosing it will send a copy of your uploaded FLP to our production team for manual editing — which may at times mean a team member's own computer, not only cloud storage — before the finished file is returned to your account. We will delete that working copy once your job is complete, and this section will be reviewed again before the feature ships to confirm the details match what's actually built.

Suggestions: Anything you submit on the Suggestions page (ideas, bug reports, questions) is stored with your name and email unless you post anonymously, in which case we still record your email internally but don't display it. Suggestions are visible to other members on a public board — they are not private feedback to [ARCHIVE] staff only — and a copy of every submission also goes to our internal admin dashboard for review. Our team updates each suggestion's status (new, under review, planned, done) as we work through it.

Usage Data: Pages visited, features used, swipes, likes, messages, and time spent on the platform.

Device & Technical Data: IP address, browser type, device identifiers, and operating system — collected automatically when you access [ARCHIVE].

Payment Information: Payments are processed securely by Stripe. We do not store your full card details, but we do store Stripe customer and subscription IDs and billing metadata (plan, billing cycle, amount charged) to manage and support your subscription.

We use the information we collect to operate and improve [ARCHIVE].

Platform Operations: Account management, feature delivery, collaboration matching, label dashboards, and the digital shop.

Personalization: Tailoring your Discover feed, match suggestions, and content recommendations based on your profile and activity.

Communications: Notifications about matches, messages, and platform updates. You can opt out of non-essential communications at any time.

Analytics: To understand how users engage with [ARCHIVE] and drive product improvements. Data is aggregated where possible.

Safety & Enforcement: To enforce these Terms, prevent fraud, and comply with applicable laws.

We do not sell your personal information to third parties.

Under the EU/UK GDPR we process your personal data only where we have a lawful basis:

Consent: Where you opt in — for example, enabling optional analytics cookies, subscribing to an artist's or label's email list, or connecting Spotify/Discord/Instagram integrations. You can withdraw consent at any time via your settings or our Contact page.

Contract: To provide the account, profiles, collaboration matching, shop, and label services you signed up for.

Legal Obligation: To comply with tax, anti-fraud, and other legal requirements (e.g. retaining transaction records).

Legitimate Interests: For platform security, preventing abuse, and product improvement carried out in a way that respects your privacy and expects no objection.

Vital Interests: Rarely, to protect the safety of users or the public.

Where we rely on consent, you have the right to withdraw it at any time. Withdrawing consent does not affect processing already carried out.

[ARCHIVE] integrates with select services to power core features. Each has its own privacy policy.

Spotify: Used for artist verification, follower counts, and track previews. Connecting Spotify grants us access to your public profile. Separately, the public catalog shown on artist profiles (see Spotify Catalog Data above) is fetched from Spotify's public API without access to anyone's personal account.

Discord: Used for community features, role verification, and server membership. Connecting Discord grants us access to your username and membership status.

Stripe: Processes all payments for digital products and label subscriptions. Stripe is PCI-DSS compliant and operates independently from [ARCHIVE]'s data systems.

Google / Apple: Used only to offer "Sign in with Google" and "Sign in with Apple" as an alternative to creating a password. We do not currently connect Google Drive or Google Calendar — those options are shown in Settings as upcoming features and do not transmit any data until they go live.

By using these integrations, you agree to the respective privacy policies of each provider.

We use cookies and browser local storage to operate the platform.

Essential Cookies: Required for authentication and core functionality. These cannot be disabled without breaking the experience.

Analytics: We collect anonymized usage data to measure performance and feature adoption.

Local Storage: Used to remember your preferences, fan-gate verification states, and session continuity.

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit platform functionality.

We implement industry-standard measures to protect your data.

All data is transmitted over HTTPS with TLS encryption. Passwords are hashed and never stored in plain text. Access to production data is restricted to authorized personnel.

No method of electronic transmission is 100% secure. Use a strong, unique password and notify us immediately if you suspect unauthorized access to your account.

[ARCHIVE] and its processors (including cloud hosting and Stripe) may store or process data outside the EU/UK. Where personal data leaves the EU/UK we rely on appropriate safeguards:

Adequacy: Transfers to countries recognised by the European Commission as providing adequate protection.

Standard Contractual Clauses: For transfers to providers in other countries, we use the EU/UK SCCs and assess supplemental measures where needed.

Provider Compliance: Our key processors (Stripe, cloud hosting) maintain their own GDPR-compatible compliance programs.

You may request a copy of the safeguards applied to a specific transfer by contacting us at contact@personaloutcome.me.

We retain your data for as long as your account is active or as needed to provide services.

Active Accounts: Profile, posts, and activity data are kept while your account is live.

Deleted Accounts: Personal data is removed within 30 days of deletion, except where required for legal, tax, or fraud prevention purposes.

Platform Analytics & Network History: Our daily network snapshots are historical records of platform activity and are retained as part of our platform history even after account deletion. On request, we will remove the direct identifiers (such as your email) from your historical snapshot rows.

Backups: Deleted data may persist in encrypted backups for up to 90 days before being purged.

Transaction Records: Payment and purchase records are retained for up to 7 years in compliance with financial regulations.

If you are in the EU, UK, or another jurisdiction with comparable data-protection law, you have the following rights over your personal data:

Access: Receive a copy of the data we hold about you.

Rectification: Correct inaccurate or incomplete information.

Erasure: Request deletion of your personal data, subject to legal requirements.

Restriction: Ask us to limit processing in certain circumstances.

Portability: Receive your data in a structured, machine-readable format and have it transferred to another controller where feasible.

Objection: Object to processing based on legitimate interests or for direct marketing.

Withdraw Consent: Withdraw consent for any processing that relied on it, including optional analytics cookies. Withdrawal does not affect processing already carried out.

Automated Decision-Making: The right not to be subject to solely automated decisions with legal or similarly significant effects.

To exercise any of these rights, use the Data Subject Request options on our Contact page, or email contact@personaloutcome.me. We verify identity before acting and respond within one month (extendable by two months for complex requests, in which case we will inform you of the extension).

[ARCHIVE] is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13.

If you believe a child has provided us with their information, contact us at contact@personaloutcome.me and we will delete it promptly.

Users between 13 and 18 should use [ARCHIVE] only with parental or guardian involvement.

We may update this Privacy Policy from time to time. Material changes will be posted on [ARCHIVE] or communicated via email at least 14 days before they take effect.

Continued use of [ARCHIVE] after changes become effective constitutes acceptance of the updated policy.

Questions or data requests? Contact us:

Email (Privacy & GDPR): contact@personaloutcome.me General Inquiries: contact@personaloutcome.me Website: archivecollective.net

For EU/UK data-protection enquiries we act as your contact point and respond within 5 business days. To submit a formal data subject request, use the Data Subject Request section on our Contact page.