Privacy Policy — POLIREUM

This Privacy Policy explains how Polireum, LLC, doing business as POLIREUM, collects, uses, shares, and protects personal information. The policy applies to POLIREUM websites, applications, community features, creator tools, AI services, Live Collabs, storefronts, and related services. 1. Information We Collect Account information: name, display name, username, email, password credentials through our authentication provider, age confirmation, and account preferences. Creator profile information: artist name, producer name, label name, biography, profile photo, banner image, location, genres, skills, social links, collaboration preferences, and public profile information. Content: tracks, audio, lyrics, artwork, videos, images, AI prompts, AI outputs, posts, comments, remixes, samples, stems, files, and live-room information. Communications: direct messages, collaboration requests, support correspondence, reports, comments, live-room text chat, and shared notes and lyrics. POLIREUM does not represent private communications as publicly accessible unless a user intentionally publishes them. 2. AI Information When you use AI features, we may collect and process prompts, lyrics, reference audio, reference images, generation settings, generated outputs, provider information, model information, job status, and usage and credit information. Content necessary to perform a generation may be transmitted to the applicable AI service provider. Provider-specific processing may be governed by the provider's terms and privacy practices. 3. Live Collaboration Information When using Live Collabs, we may process room membership, participant identity, microphone state, connection information, room role, chat, shared files, session metadata, and audio necessary for live communication. Live audio may be transmitted through third-party realtime infrastructure such as LiveKit. If session recording becomes available, POLIREUM will provide appropriate notice and controls. 4. Marketplace and Transaction Information When buying or selling, we may collect buyer email, seller information, product information, transaction amount, order history, refunds, disputes, payout status, seller verification status, and tax-related status. Payment processors may directly collect payment card information, banking information, tax identification, and identity-verification information. 5. Device and Usage Information We may collect IP address, device type, operating system, browser, app version, language, referring page, pages viewed, features used, crash information, authentication events, security events, approximate location derived from IP, and cookie or device identifiers. 6. Information From Other Sources We may receive information from authentication providers, payment providers, AI providers, live-audio providers, distribution providers, fraud-prevention providers, other users, public sources, and connected third-party accounts. 7. How We Use Information POLIREUM may use information to provide the Service, authenticate users, maintain accounts, host music, generate AI content, process payments, facilitate sales, deliver purchased products, provide collaboration rooms, deliver messages, recommend content, operate discovery, process remix requests, provide analytics, manage credits, prevent fraud, enforce rights, moderate content, investigate abuse, handle copyright claims, provide customer support, improve POLIREUM, comply with law, and protect users and the Service. 8. Public Information Information you intentionally make public may be visible to anyone, including people without POLIREUM accounts. This may include artist name, profile image, biography, public posts, public tracks, public products, public comments, followers, public collaborations, storefront, and public releases. Search engines may index public information where indexing is enabled. Do not post information publicly that you want to remain private. 9. How We Share Information We may share information with companies that help operate POLIREUM, including providers for cloud hosting, database services, authentication, storage, payments, AI generation, live audio, email, analytics, security, fraud prevention, and distribution. We may also disclose information at your direction; to other users as part of public features; to collaborators; to buyers or sellers where necessary for a transaction; to comply with law; to respond to legal process; to enforce agreements; to prevent fraud or harm; and in connection with a merger, acquisition, financing, or sale of assets. 10. Selling or Sharing Personal Information POLIREUM does not sell personal information for money and does not share personal information for cross-context behavioral advertising. If POLIREUM later introduces advertising technology that constitutes "selling" or "sharing" under applicable privacy laws, this Policy and the platform will be updated and appropriate opt-out mechanisms implemented. 11. Cookies and Similar Technologies POLIREUM may use essential cookies, authentication cookies, preference cookies, analytics technologies, and security technologies. Where legally required, nonessential cookies will be subject to appropriate consent choices. 12. Data Retention We retain information for as long as reasonably necessary to provide accounts, complete transactions, maintain purchase entitlements, resolve disputes, prevent fraud, maintain financial records, enforce agreements, meet legal obligations, maintain security, and process copyright complaints. Deleted information may remain temporarily in backups. Financial, fraud, transaction, moderation, and legal records may be retained longer where necessary. 13. Security POLIREUM uses administrative, technical, and organizational safeguards designed to protect information. No online system is completely secure. Users are responsible for protecting account credentials. 14. Your Privacy Choices Depending on your location, you may have rights to request access, correction, deletion, portability, information about processing, withdrawal of consent, opt-out of certain sharing, opt-out of targeted advertising, restriction of certain processing, and appeal of a denied privacy request. Submit requests to privacy@polireum.com. POLIREUM may need to verify your identity. Authorized agents may submit requests where required by law. 15. California Privacy Rights If POLIREUM becomes subject to the CCPA/CPRA, California residents may have rights including the right to know, delete, correct, and access; the right to opt out of qualifying sale or sharing; the right to limit certain uses of sensitive personal information; and the right against unlawful discrimination for exercising privacy rights. 16. Children POLIREUM is intended for adults aged 18 and older. We do not knowingly permit persons under 18 to create accounts. If we learn that an ineligible minor has provided personal information, we may delete the account and related information subject to legal retention requirements. 17. International Users POLIREUM may process information in the United States and other countries where its service providers operate. Those countries may have privacy laws different from your country. Where legally required, POLIREUM will use appropriate mechanisms for international transfers. 18. Seller Privacy Marketplace sellers may be required to provide additional identity, contact, banking, and tax information. Some information may be collected directly by the payment provider rather than POLIREUM. Certain seller information may need to be disclosed to buyers or regulators where required by marketplace laws, including the federal INFORM Consumers Act. 19. Copyright and Legal Requests POLIREUM may preserve or disclose information where reasonably necessary to process DMCA notices, process counter-notices, respond to subpoenas, respond to court orders, investigate fraud, enforce rights, and protect users. 20. Business Transfers If POLIREUM is involved in a merger, acquisition, financing, restructuring, bankruptcy, or sale of assets, information may be transferred as part of that transaction subject to applicable law. 21. Changes to this Policy We may update this Privacy Policy. Material changes will be communicated where required. The effective date will appear at the top. 22. Voice Recordings and Voice Models If you use Verified Self-Voice, we process the singing samples you upload, your recorded consent, the private voice model built from those samples, and the vocals you convert with it. Voice data may be treated as biometric or otherwise sensitive personal data in some countries. We process it only with your explicit consent, only to build and run your private model, and never to train shared or public models. Samples and models may be processed by our voice processing provider on our instructions. You can delete your model and samples at any time from Studio, and we pass deletion requests to the provider. Withdrawing consent stops future processing. 23. Distribution Information When you distribute a release, we share the release audio, artwork, metadata, credits, identifiers, rights declarations, and AI disclosures with the delivery partners and digital stores needed to publish it, and we receive delivery and status information back. 24. UK and EU Data Protection (UK GDPR and GDPR) Controller: Polireum, LLC, doing business as POLIREUM, 115 E Main St, Ste A1B - 1052, Buford, GA 30518-5727, United States. EU representative (Article 27): [EU REPRESENTATIVE NAME AND ADDRESS], eu-contact@polireum.com. UK representative: [UK REPRESENTATIVE NAME AND ADDRESS], uk-contact@polireum.com. Data protection contact: privacy@polireum.com. Legal bases we rely on: • Contract — creating and running your account, hosting your content, processing orders, payouts, subscriptions, credits, collaboration and distribution. • Legitimate interests — securing the platform, preventing fraud and abuse, moderation, product analytics, and direct communications about the service, balanced against your rights. • Consent — AI voice models and voice samples, nonessential cookies and analytics where required, and optional marketing. You may withdraw consent at any time. • Legal obligation — tax, accounting, copyright, marketplace, and law-enforcement requirements. • Vital interests or public interest — only in rare safety situations. Your rights in the UK and EEA: access, rectification, erasure, restriction, portability, objection (including to processing based on legitimate interests and to direct marketing), and withdrawal of consent. Exercise them at privacy@polireum.com. We respond within one month, extendable by two months for complex requests. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Automated systems may flag content or transactions for review, and a person reviews enforcement decisions on appeal. You may complain to your supervisory authority: in the UK the Information Commissioner's Office (ico.org.uk), and in the EEA your national data protection authority. 25. International Data Transfers POLIREUM and its providers process data in the United States and other countries. Where we transfer personal data out of the UK, EEA, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions where they apply, and, where relevant, certification under the EU-US and UK-US Data Privacy Framework. You may request a copy of the relevant safeguards at privacy@polireum.com. 26. Cookies and Consent in the UK and EU In the UK and EEA, nonessential cookies and similar technologies are only used with your consent, as required by the ePrivacy Directive and the UK PECR. You can accept, reject, or change your choices at any time through our cookie controls. Essential cookies needed to sign in and keep the service secure are always used. 27. Retention Periods We keep account and profile data while your account exists and for up to 12 months afterwards; transaction, tax, and payout records for up to 7 years where law requires; moderation, fraud, and copyright records for up to 5 years; voice samples and models until you delete them or your account closes; and backups for up to 90 days. 28. Children in the UK and EU POLIREUM is for adults aged 18 and over. We do not knowingly process the personal data of children, and we do not offer age-verified child accounts. 29. Advertising and POLIREUM Marketing When you run a paid advertising campaign through POLIREUM Marketing we process campaign details you provide (campaign name, promoted release, markets, dates, budget and advertising artwork), payment records (amount, status and payment processor references — card numbers are handled by our payment processor, never by POLIREUM), and delivery reporting returned by the advertising partner (screen, location, times played, impressions, spend and verification records). We share with the advertising partner only what is needed to buy and run your campaign: the advertising artwork, targeting such as market and dates, campaign schedule and budget instructions. We do not share your listener data, fan lists, private tracks, messages, voice samples or voice models with advertising partners. POLIREUM's advertising features do not use facial recognition, emotion detection, speech analysis or other invasive audience sensing. Campaign reporting is based on geography, screen, venue type, time and aggregate delivery metrics. Legal bases in the UK and EU: performance of your contract for running and reporting on campaigns you purchase; legal obligation for payment, tax and record-keeping; and our legitimate interests in fraud prevention and service integrity. Retention: campaign, payment and delivery records are kept for up to 7 years for tax, accounting and dispute purposes. 30. Contact POLIREUM Privacy Polireum, LLC 115 E Main St Ste A1B - 1052 Buford, GA 30518-5727 United States privacy@polireum.com Legal inquiries: legal@polireum.com Copyright: copyright@polireum.com