Privacy Policy

Who we are

TribuTunes is operated by TribuTunes LLC, a California limited liability company, based in California, United States. For anything about your data, write to contact@tributunes.com.

What we collect

• Your account. Your email address, and records of when you sign in. We don't use passwords: we email you a link and a code.
• Your work. Your artist profile, bio, artist brain entries, songs, lyrics, stories, notes, song details, credits and splits, and the images you upload. This is your material; we keep it so the studio can remember it for you.
• People you add. Names, roles and email addresses of collaborators you credit or invite. We use their email only to send the invitation you asked us to send.
• Connected channels, only if you connect them. Your account ID and handle, public counts (such as followers or subscribers), comments and messages on your content, and the access tokens that let us read them. Tokens are encrypted and never sent to your browser.
• Technical data. Essential cookies that keep you signed in, and server logs (IP address, browser, time of request) used for security and fixing problems.

We do not use advertising trackers, we do not sell or rent personal data, and we do not run third-party analytics.

How we use it

• To run the studio: store your work, show it to you and to the collaborators you choose, and keep it safe.
• To do what you ask. When you press an action such as Build campaign, Suggest a reply or Create cover, we send only the material that action needs (for example a song's lyrics and story) to the provider that performs it, and show you the result.
• To connect your channels: show your real numbers, comments and messages, and send a reply only when you press send.
• To email you sign-in links, invitations you request, and important notices about the service.
• To keep TribuTunes secure and working.

Nothing is posted, sent or published on your behalf without your explicit action. Suggestions are marked as suggestions and never become facts about you until you accept them.

Intelligence features

Some features draft text or images for you. They run on demand, never in the background, and only read what the action needs. We do not use your work to train models, and we only use providers who commit not to train their models on data sent through their API.

Every request is logged in your workspace (which feature, which provider, when) so there is a record of what was generated and from what.

Google and YouTube data

If you connect YouTube, TribuTunes uses YouTube API Services to read your channel's public statistics and the comments on your videos, and to post replies you write and send. By connecting, you also agree to the YouTube Terms of Service, and Google's use of data is described in the Google Privacy Policy.

TribuTunes' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use this data only to provide the features you see, we don't use it for advertising, we don't sell it, and people don't read it except with your permission, for security, or where the law requires.

You can disconnect YouTube at any time in Connections, and you can revoke TribuTunes' access from your Google Account permissions page. When you disconnect, we delete the stored tokens, and we delete the YouTube data we copied within 30 days.

Instagram and Facebook data

If you connect Instagram or a Facebook Page, TribuTunes reads your account's counts and insights, the comments and messages on your content, and sends the replies you write and send. We use this data only to show it to you and act on your instructions.

You can disconnect at any time in Connections, or remove TribuTunes from your Meta account settings (Apps and websites). See the data deletion instructions below.

Who helps us run TribuTunes

We share data only with service providers that process it for us under contract, and only as much as each needs:

• Supabase — database, sign-in and file storage.
• Vercel — hosting of the application.
• Intelligence providers (text and images) — only when you use a feature that needs them, and only the material that feature reads.
• The platforms you connect (such as Google/YouTube or Meta) — to read your channel data and send the replies you choose to send.

We may also disclose information if the law requires it. If TribuTunes is ever transferred to a new owner, this policy will continue to apply to your data and we will tell you beforehand.

Where your data is processed

Our providers may process data in countries other than yours, including the United States and the European Union. When they do, we rely on the safeguards the law provides for these transfers, such as standard contractual clauses.

How long we keep it

We keep your work for as long as your account is open, because remembering it is the point of TribuTunes. When you delete something, it is removed from the live service right away, and from backups when they are replaced. When you delete your account, we delete your data within 30 days, except where the law requires us to keep a record.

Your rights and choices

Wherever you live, you can ask us to show you the data we hold about you, correct it, export it, delete it, or stop a particular use of it. Many rights are also built into the product: you can edit or delete your work, disconnect channels, and remove collaborators at any time.

To make a request, write to privacy@tributunes.com. We answer within 30 days. If you are in the European Union, the United Kingdom or Brazil, you also have rights under the GDPR, UK GDPR or LGPD, including the right to complain to your data protection authority (in Brazil, the ANPD).

If you live in California, the California Consumer Privacy Act gives you the right to know what personal information we collect and how we use it, to delete it, to correct it, and not to be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioral advertising.

Data deletion instructions

• Remove a connected channel: open Connections in TribuTunes and choose Disconnect. The stored tokens are deleted immediately and the channel's copied data within 30 days.
• Remove through the platform: in Google, open your Account permissions and remove TribuTunes; in Instagram or Facebook, open Settings → Apps and websites and remove TribuTunes.
• Delete everything: email privacy@tributunes.com from the address you sign in with and ask us to delete your account. We confirm when it's done, within 30 days.

Security

Data travels encrypted. Access tokens are encrypted at rest. Every table is protected by row-level security, so one artist can never read another's songs, lyrics, stories, splits, messages or tokens, and collaborators see only the songs they were given. Uploaded files are kept in private storage. No system is perfectly secure; if a breach affects you, we will tell you promptly.

Children

TribuTunes is not directed to children under 16 and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.

Changes to this policy

If we change this policy in a way that matters, we will tell you in the app or by email before the change applies. The date at the top always shows the latest version.