Privacy Policy

ThrumFeed Music (“we”, “us”) is operated by Westside Counseling LTD. For privacy questions or to exercise your rights, contact TODO@thrumfeed.com.

• Account information you provide when you sign up: email address and display name.
• Content that creator-role users upload: audio files, artwork, ebook files and covers, and related metadata.
• A Gravatar hash derived from your email address, so we can display an avatar if you have one.
• Session cookies used to keep you signed in (see the Cookie Notice).
• Basic request logs (IP, user agent, timestamp) kept by our hosting platform for security and abuse prevention.

• To operate your account, display the catalog, and stream audio.
• To let creators manage the artists, releases, and tracks they are authorized for.
• To prevent abuse and secure the service.
• To respond to your requests.

• Contract: operating your account and delivering the service.
• Legitimate interests: security, abuse prevention, and improving the service.
• Consent: for any future non-essential cookies or analytics; we do not run any today.
• Legal obligation: where required to respond to lawful requests.

We rely on the following providers to run ThrumFeed Music. They process data on our behalf under their own terms.

• Lovable Cloud: application hosting, database, authentication, file storage, and edge functions.
• Gravatar: optional avatar images loaded from a hash of your email.
• Spotify Web API: public artist and release metadata only; no personal data is sent.
• Firecrawl: used when a creator initiates a Suno playlist import to fetch publicly available page contents.
• ElevenReader: out-links only; no data is shared with them from ThrumFeed Music.

• Account data is kept while your account is active.
• Uploaded content is kept until the responsible creator deletes it, or until we remove it under our Terms.
• Request logs rotate on our hosting platform’s schedule.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to our processing of your personal data, and to withdraw consent at any time.

To exercise a right, email TODO@thrumfeed.com. We aim to respond within 30 days.

EU / UK residents may lodge a complaint with their local data protection authority. California residents may exercise CCPA/CPRA rights, including the right to know and delete; we do not sell personal information.

ThrumFeed Music is not directed to children under 13 (US) or under 16 (EU/UK). If you believe a child has provided us data, contact us and we will delete it.

Your data may be processed in countries other than your own by our subprocessors. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

We use industry-standard controls provided by our hosting platform, including encrypted connections and access controls tied to your account. No online service can guarantee absolute security.

We may update this policy from time to time. The effective date at the top will change when we do.