Privacy Policy

We collect information you provide directly when you create an account, build your artist profile, or interact with [ARCHIVE] features.

Account Information: Email address, display name, profile photo, bio, location, genre, and social links you choose to add.

Music & Creative Data: Spotify artist links, audio previews, digital products you upload, posts you publish, and your Discover profile (age, gender, continent, Discord roles).

Usage Data: Pages visited, features used, swipes, likes, messages, and time spent on the platform.

Device & Technical Data: IP address, browser type, device identifiers, and operating system — collected automatically when you access [ARCHIVE].

Payment Information: Payments are processed securely by Stripe. We do not store your full card details.

We use the information we collect to operate and improve [ARCHIVE].

Platform Operations: Account management, feature delivery, collaboration matching, label dashboards, and the digital shop.

Personalization: Tailoring your Discover feed, match suggestions, and content recommendations based on your profile and activity.

Communications: Notifications about matches, messages, and platform updates. You can opt out of non-essential communications at any time.

Analytics: To understand how users engage with [ARCHIVE] and drive product improvements. Data is aggregated where possible.

Safety & Enforcement: To enforce these Terms, prevent fraud, and comply with applicable laws.

We do not sell your personal information to third parties.

Under the EU/UK GDPR we process your personal data only where we have a lawful basis:

Consent: Where you opt in — for example, enabling optional analytics cookies or connecting Spotify/Discord/Instagram integrations. You can withdraw consent at any time via your settings or our Contact page.

Contract: To provide the account, profiles, collaboration matching, shop, and label services you signed up for.

Legal Obligation: To comply with tax, anti-fraud, and other legal requirements (e.g. retaining transaction records).

Legitimate Interests: For platform security, preventing abuse, and product improvement carried out in a way that respects your privacy and expects no objection.

Vital Interests: Rarely, to protect the safety of users or the public.

Where we rely on consent, you have the right to withdraw it at any time. Withdrawing consent does not affect processing already carried out.

[ARCHIVE] integrates with select services to power core features. Each has its own privacy policy.

Spotify: Used for artist verification, follower counts, and track previews. Connecting Spotify grants us access to your public profile.

Discord: Used for community features, role verification, and server membership. Connecting Discord grants us access to your username and membership status.

Stripe: Processes all payments for digital products and label subscriptions. Stripe is PCI-DSS compliant and operates independently from [ARCHIVE]'s data systems.

By using these integrations, you agree to the respective privacy policies of each provider.

We use cookies and browser local storage to operate the platform.

Essential Cookies: Required for authentication and core functionality. These cannot be disabled without breaking the experience.

Analytics: We collect anonymized usage data to measure performance and feature adoption.

Local Storage: Used to remember your preferences, fan-gate verification states, and session continuity.

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit platform functionality.

We implement industry-standard measures to protect your data.

All data is transmitted over HTTPS with TLS encryption. Passwords are hashed and never stored in plain text. Access to production data is restricted to authorized personnel.

No method of electronic transmission is 100% secure. Use a strong, unique password and notify us immediately if you suspect unauthorized access to your account.

[ARCHIVE] and its processors (including cloud hosting and Stripe) may store or process data outside the EU/UK. Where personal data leaves the EU/UK we rely on appropriate safeguards:

Adequacy: Transfers to countries recognised by the European Commission as providing adequate protection.

Standard Contractual Clauses: For transfers to providers in other countries, we use the EU/UK SCCs and assess supplemental measures where needed.

Provider Compliance: Our key processors (Stripe, cloud hosting) maintain their own GDPR-compatible compliance programs.

You may request a copy of the safeguards applied to a specific transfer by contacting us at contact@personaloutcome.me.

We retain your data for as long as your account is active or as needed to provide services.

Active Accounts: Profile, posts, and activity data are kept while your account is live.

Deleted Accounts: Personal data is removed within 30 days of deletion, except where required for legal, tax, or fraud prevention purposes.

Backups: Deleted data may persist in encrypted backups for up to 90 days before being purged.

Transaction Records: Payment and purchase records are retained for up to 7 years in compliance with financial regulations.

If you are in the EU, UK, or another jurisdiction with comparable data-protection law, you have the following rights over your personal data:

Access: Receive a copy of the data we hold about you.

Rectification: Correct inaccurate or incomplete information.

Erasure: Request deletion of your personal data, subject to legal requirements.

Restriction: Ask us to limit processing in certain circumstances.

Portability: Receive your data in a structured, machine-readable format and have it transferred to another controller where feasible.

Objection: Object to processing based on legitimate interests or for direct marketing.

Withdraw Consent: Withdraw consent for any processing that relied on it, including optional analytics cookies. Withdrawal does not affect processing already carried out.

Automated Decision-Making: The right not to be subject to solely automated decisions with legal or similarly significant effects.

To exercise any of these rights, use the Data Subject Request options on our Contact page, or email contact@personaloutcome.me. We verify identity before acting and respond within one month (extendable by two months for complex requests, in which case we will inform you of the extension).

[ARCHIVE] is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13.

If you believe a child has provided us with their information, contact us at contact@personaloutcome.me and we will delete it promptly.

Users between 13 and 18 should use [ARCHIVE] only with parental or guardian involvement.

We may update this Privacy Policy from time to time. Material changes will be posted on [ARCHIVE] or communicated via email at least 14 days before they take effect.

Continued use of [ARCHIVE] after changes become effective constitutes acceptance of the updated policy.

Questions or data requests? Contact us:

Email (Privacy & GDPR): contact@personaloutcome.me General Inquiries: contact@personaloutcome.me Website: archivecollective.net

For EU/UK data-protection enquiries we act as your contact point and respond within 5 business days. To submit a formal data subject request, use the Data Subject Request section on our Contact page.