Privacy Policy

MuziQ ("Platform", "MuziQ", "we", "us", or "our") is operated by Music Equity Group LLC, a Delaware limited liability company, 7901 4th St N, Suite 32413, St. Petersburg, FL 33702, USA. Music Equity Group LLC is the data controller responsible for the personal data described in this Privacy Policy ("Policy").

This Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and the rights you have over it. It covers our website, web app, native apps, and APIs. It should be read together with our Terms of Service.

We act as a data controller for personal data we collect from our Users (artists and creators). Where we process campaign metrics and creator content solely to provide reporting to an artist on a campaign that artist funded, we do so to deliver the service the artist has purchased.

This Policy also applies to limited public data we collect about artists and creators who have not signed up for MuziQ (see Sections 2.7 and 3).

2.1 Account information

Name, email address, password hash (or Google OAuth identifier), profile picture, handle, role (artist or creator), country, and language preference. Creators may also provide social media handles, payout details, and tax identification information.

2.2 Campaign and content data

Artists upload music files, brief text, album artwork, budget settings, music links, and TikTok sound IDs. Creators submit post URLs, descriptions, and screenshots if requested. We store derived data such as approval status, verification results, payout calculations, wallet balances and credits, and dispute history.

2.3 Checkout, launch, and transaction records

When you pay for or launch a campaign, we keep campaign and transaction records associated with your account, including payment and campaign timestamps and status. IP addresses may also be collected for security and fraud prevention as described in Section 2.6. We also keep records of campaign delivery, including which creators joined, which submissions were verified, and the metrics that justified each payout. We use these records to operate your campaign, to resolve billing questions, and as evidence in payment disputes and chargebacks.

2.4 TikTok data (only if you connect TikTok)

When you authorize TikTok via OAuth 2.0, we receive and store only the fields needed to operate MuziQ:

• open_id, union_id: stable identifiers used to link your TikTok identity to your MuziQ account and to scope metric queries.
• display_name, username, profile deep link, avatar_url: shown on your MuziQ profile so artists can verify you.
• follower_count, following_count, likes_count, video_count: refreshed at sign-in and once per day so artists can vet reach before inviting you to paid collabs.
• For posts you submit to a campaign: video_id, create_time, view_count, like_count, comment_count, share_count, read periodically for submitted campaign posts, including for up to 20 days after campaign completion via TikTok's Display API (video.list), scoped to your open_id and the campaign's TikTok sound or post ID.
• For the optional auto-repost feature: the publish status (success or failure) and TikTok publish_id returned when an artist's promo video is posted directly to your profile via the Content Posting API (video.publish, Direct Post). You opt in per campaign before any post is made.
• An encrypted OAuth refresh token so we can refresh access without prompting you each time. We do not store long-lived access tokens in plaintext.

We do not read your TikTok DMs, drafts, friends list, private videos, or account settings. We may continue tracking submitted posts for up to 20 days after campaign completion without accruing additional earnings. Public video metadata may also be used for account verification and fraud prevention. We do not sell TikTok data. TikTok data is used only to operate the Platform, calculate payouts, prevent fraud, and provide campaign analytics to the artist who funded the relevant campaign.

2.5 Payment and payout information

Artist card and bank payments are processed by Stripe, campaign funds are banked through Mercury, and creator withdrawals use the supported payout methods shown in the Platform, currently Wise, Payoneer, and crypto (Bitcoin or USDT on Ethereum/ERC20). We do not store full card numbers, full bank account numbers, or CVCs.

We may store provider customer or account identifiers, payout destinations, payout history, wallet balances and credits, fee calculations, refund and credit history, chargeback and dispute records, the last 4 digits and brand of payment instruments shown in your dashboard, Mercury transaction and reconciliation data, and tax-form metadata where required by law. Payout providers may collect identity documents directly from you to meet their own verification obligations; that collection is governed by the provider's privacy policy.

2.6 Usage and device data

IP address, browser and user-agent, device type, operating system, approximate location (city-level, derived from IP), pages visited, time spent on each screen, taps and clicks, referring URL, timestamps, error logs, and feature interactions. We collect this for security, debugging, fraud prevention, and product analytics.

2.7 Public artist and music data

We receive public artist and music data from music-data providers, including Soundcharts, such as streams, social followers, monthly listeners, playlist placements, chart activity, and related public performance signals. We also use music-link and metadata services to identify a song or sound from a link supplied to MuziQ. Some of this data may relate to artists or creators who do not have a MuziQ account. We use it for matching, campaign reporting, artist intelligence, sound identification, and internal analysis.

2.8 Communications

When you contact support, open a dispute, report content, or appeal an enforcement action, we keep the messages and any attachments you send, along with our responses.

• Operating the marketplace: creating accounts, matching artists with creators, running campaigns, verifying submissions, and calculating payouts.
• Authentication and security: verifying your identity, protecting against unauthorized access, managing OAuth sessions, and detecting fraud and abuse.
• Payments, payouts, and billing disputes: charging artists, holding campaign funds and creator balances separately from operating funds, paying creators, issuing wallet credits and pre-launch refunds under the Terms, responding to chargebacks and payment disputes, and tax reporting.
• TikTok integration: showing verified TikTok profile information on MuziQ, the optional auto-repost of artist-supplied videos to your TikTok profile, and periodic metric sync for campaigns you joined.
• Moderation and enforcement: screening content against our Acceptable Use Policy, handling reports and takedown notices, applying our strike policy, and reviewing appeals.
• Communications: transactional emails (sign-up, password reset, campaign approval, launch confirmation, receipts, payout notifications, dispute updates, policy changes), service announcements, and, only with your opt-in, marketing emails.
• Analytics and product improvement: understanding feature usage in aggregate.
• Ava profiles: generating internal profiles of artists and creators from public social and music data, using Google's Gemini models through the Lovable AI service. Ava profiles support internal research, matching, and administration. They are visible only to authorized MuziQ administrators, are not published, and are not used to make decisions that have legal or similarly significant effects on you. You may object to being profiled at any time (see Section 8).
• Legal compliance: tax, anti-money-laundering, sanctions screening, unclaimed-property obligations, responding to lawful requests, and enforcing our Terms.

Legal bases (UK, EU, and EEA users):

• Performance of contract: operating your account, campaigns, payments, and payouts.
• Legal obligation: tax, accounting, anti-money-laundering, and sanctions requirements.
• Legitimate interests: fraud prevention, securing the Platform, defending payment disputes and legal claims, Ava profiles, use of public music data, and product improvement. We have balanced these interests against your rights, and you can object at any time.
• Consent: marketing emails and optional analytics cookies. You can withdraw consent at any time.

Automated decision-making: KPI-based payouts are calculated automatically from TikTok metrics, and submissions may be automatically flagged for fraud review. You can request human review of any automated decision by emailing support@muziq.co.

We do not sell your personal data and we do not use it for cross-context behavioral advertising. We share data only as follows:

• Service providers (sub-processors):
  • Stripe (artist payments and fraud screening)
  • Mercury (banking and campaign-fund reconciliation)
  • Wise and Payoneer (creator payouts)
  • TikTok (Login Kit, Display API, and Content Posting API)
  • Lovable Cloud (database, authentication, and storage)
  • Cloudflare (hosting, edge delivery, and security)
  • Resend or similar providers (transactional email)
  • Google (OAuth sign-in, and Gemini AI models used through the Lovable AI service)
  • Lovable (AI service used to generate Ava profiles)
  • Firebase (mobile push notifications)
  • Soundcharts and other music-link and metadata providers (public music and artist data)
  • Product-analytics providers

Each is contractually bound to process data only to provide its services to us.

• Between Users: campaign-relevant data (submission URLs, verified public metrics, payout amounts, your TikTok handle, follower count, and avatar) is shared between the artist and creators on that campaign so the artist can vet, approve, and report on the work they funded.
• Payment disputes: if you dispute a charge or file a chargeback, we share relevant records with Stripe and your card issuer, including payment and campaign records, available security information, campaign delivery data, and related communications.
• Rightsholders and complainants: when we process a copyright or trademark notice, we may share the notice with the User whose content is affected, and may share a counter-notice with the original complainant, as required by law.
• Legal and safety: we may disclose data in response to a subpoena, court order, or other lawful request, to report child sexual abuse material to NCMEC and law enforcement, or where we reasonably believe disclosure is necessary to protect rights, property, or safety.
• Unclaimed property: dormant wallet balances may be reported to state authorities as required by unclaimed-property laws, after we notify you by email.
• Corporate transactions: if MuziQ is involved in a merger, acquisition, financing, or asset sale, your data may be transferred under equivalent privacy protections. You will be notified of any change in controller.

We are based in the United States and use sub-processors in the US, EU/EEA, UK, and other countries where our payment and payout providers operate. Creator payout information may be transferred to the country where the selected payout provider processes the withdrawal.

Where personal data is transferred out of the EEA, UK, Switzerland, Canada, or other regions with similar protections, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, or another lawful transfer mechanism. We apply additional safeguards such as encryption, access controls, and pseudonymization where feasible.

• Account data: while your account is active and for 12 months after closure, unless a longer period is required below.
• Campaign records, payout history, wallet and credit history, and checkout and launch records: at least 7 years, for tax, accounting, audit, and dispute purposes.
• Chargeback and dispute records: 7 years after the dispute is resolved.
• TikTok-derived profile fields (handle, avatar, counts): purged within 30 days after you disconnect TikTok or delete your MuziQ account.
• Per-post TikTok metrics that justified a payout: retained with the related payout record for 7 years to evidence the transaction, then deleted or anonymized.
• OAuth refresh tokens: deleted within 7 days of disconnection or revocation.
• Moderation, enforcement, and strike records: for as long as needed to apply the strike policy and prevent circumvention, and at least 12 months; records of permanent bans are kept for as long as the ban applies.
• Ava profiles: reviewed at least annually and deleted when no longer needed.
• Support and dispute communications: 3 years after the last message, or longer if linked to a payment record.
• Server and security logs: typically 12 months.
• Backups: rolled off on our standard backup cycle (up to 35 days after deletion in primary stores).

We use industry-standard safeguards including TLS in transit, encryption at rest for sensitive fields, hashed passwords, role-based access controls, audit logging, least-privilege service accounts, and regular review of access. No system is perfectly secure. If we discover a breach affecting your personal data, we will notify you and the appropriate authorities within the timelines required by applicable law (for example, 72 hours under the GDPR).

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data, subject to legal retention requirements (such as tax and payment records).
• Port your data in a structured, machine-readable format.
• Restrict or object to certain processing, including direct marketing, Ava profiles, and processing based on legitimate interests.
• Withdraw consent at any time where processing is based on consent.
• Request human review of automated decisions.
• Complain to your local data protection authority (for example, the UK ICO, your EU supervisory authority, or the Office of the Privacy Commissioner of Canada).

California residents (CCPA/CPRA): you have the right to know, delete, and correct your personal information, to limit use of sensitive personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined. You can designate an authorized agent, and we will not discriminate against you for exercising your rights.

Other US states: residents of Delaware, Colorado, Connecticut, Virginia, Texas, Oregon, and other states with consumer privacy laws have similar rights to access, correct, delete, and port their data and to opt out of targeted advertising, sale, and profiling. If we decline your request, you may appeal by replying to our decision; we will respond to appeals within the time required by your state's law.

Global Privacy Control: we honor browser-based Global Privacy Control signals as an opt-out of sale and sharing where required by law.

Artists and creators without a MuziQ account: if we hold public data about you (Sections 2.7 and 3), you can ask us what we hold, object to its use, or request deletion by emailing support@muziq.co.

To exercise any of these rights, email support@muziq.co from the address linked to your account. We will respond within 30 days, or sooner where required by law. We may need to verify your identity before fulfilling a request. Deleting your account does not erase records we must keep for legal, tax, or dispute purposes, and does not reverse transactions already completed.

We send marketing emails only if you opt in. Every marketing email includes an unsubscribe link, and you can also opt out by emailing support@muziq.co. Opting out of marketing does not stop transactional emails about your account, campaigns, payments, payouts, or changes to our policies.

We use cookies and local storage for sign-in, session management, security, preferences, and first-party product analytics. We do not use third-party advertising cookies. You can manage cookies and local storage in your browser; disabling strictly-necessary storage may prevent sign-in. For questions or objections about product analytics, contact support@muziq.co.

The Platform is not intended for anyone under 18. We do not knowingly collect personal data from children. If we learn we have collected data from a child under 18, we will delete it promptly and close the account. Contact support@muziq.co if you believe a child has provided us data.

The Platform integrates with third parties whose privacy practices are governed by their own policies, including:

• TikTok Privacy Policy
• Google Privacy Policy
• Stripe Privacy Policy
• Lovable Privacy Policy
• Cloudflare Privacy Policy

Mercury, Wise, Payoneer, Soundcharts, Lovable, and our other providers each publish their own privacy policies on their websites.

You can disconnect TikTok at any time from your MuziQ profile settings. Disconnection revokes our OAuth grant, stops future API calls (including auto-reposts and daily metric sync), and triggers the retention rules in Section 6.

You can request full account deletion from your profile settings or by emailing support@muziq.co. Before deleting, we recommend withdrawing any eligible creator earnings and using any artist wallet credits, because wallet credits cannot be redeemed for cash (see Section 7.5 of the Terms). We will delete your personal data subject to the retention items in Section 6 and confirm in writing when done.

We may update this Policy from time to time. Material changes will be notified by email or by a prominent notice on the Platform at least 14 days before they take effect, or immediately where required by law. The "Last updated" date at the top of this page shows when the Policy was last revised.

Privacy questions or requests: support@muziq.co
Data Protection Officer / EU & UK representative: support@muziq.co (we will route as needed)
Postal: Music Equity Group LLC, 7901 4th St N, Suite 32413, St. Petersburg, FL 33702, USA