This policy explains how [PLACEHOLDER: legal entity name], trading as Steeze Records, uses personal data when we operate Artist OS. Artist OS is the service that helps an independent artist manage releases and their career through a dedicated AI manager.
Our contact email is accounts@steezerecords.com. Our company number and registered address are [PLACEHOLDER: company number] and [PLACEHOLDER: registered address].
What we collect
We collect only the data needed to provide the service, keep it secure and meet our legal obligations. The sources are:
- Your account and studio: contact details, account settings, artist profile details, approval records and the messages you send by SMS, WhatsApp or the web studio.
- Your content: audio masters, artwork, video clips and release metadata that you provide or authorise us to handle.
- Google and YouTube: the connected channel and video analytics we need to understand performance, plus approved video upload access. We use YouTube API Services.
- Gmail: each artist agent may have a visible Gmail mailbox. We read message headers and snippets and send only emails you have approved.
- TikTok: basic profile information, including open ID and display information, and statistics for your own videos, including views, likes, comments and shares.
- Instagram professional accounts: profile information and post insights.
- Too Lost: catalogue, releases, streaming analytics, earnings and royalty data.
- Security and service records: records that help us protect accounts, diagnose problems and show what an approved action did.
Why we use it
We use your data to run the service you ask us to run, including preparing releases, providing analytics, managing connected accounts, maintaining the manager conversation and recording your approvals.
Our main lawful basis is performance of a contract with you, or steps you ask us to take before entering one. We may also use data for our legitimate interests in securing and improving the reliability of the service, provided those interests do not override your rights. Where a connection or message needs consent, we rely on that consent. We may keep or disclose data where the law requires it.
AI and approvals
AI helps your dedicated manager organise work, explain information and prepare proposed actions. Nothing binding is sent, posted, submitted or spent without your approval of that exact action.
Our AI model provider is Anthropic. It processes the conversation and the information needed to prepare a proposed action, under API terms that do not use that data to train its models. Data from Google Workspace APIs, including Gmail, is not used to develop, improve or train generalised AI or machine-learning models.
Google, YouTube and TikTok
Steeze Records' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect YouTube, you also agree to the YouTube Terms of Service. Google explains its handling of personal data in the Google Privacy Policy. You can revoke Steeze Records' Google access at myaccount.google.com/permissions.
When you connect TikTok, we use the profile and video-statistics data described above to run the service for you. You can remove access through TikTok's app settings. Look for the connected-app or permissions controls. TikTok may change the name or location of that control.
Who we share data with
We share data only when necessary to provide the service. This includes the connected platforms you choose and these service providers:
- Anthropic: AI models for the manager conversation and proposed actions.
- Amazon Web Services: hosting, database and file storage for Artist OS.
- Twilio: SMS messages.
- Meta (WhatsApp): WhatsApp messages, if you choose that channel.
- Vercel and Cloudflare: hosting and security for this website.
- Zoho: email sent to and from our steezerecords.com addresses.
We may also share data with professional advisers, such as lawyers and accountants. Our processors may handle data only on our instructions and for the service they provide to us.
We do not sell your personal data or use your content to train generalised AI models.
International transfers
Some of our providers, including Anthropic, Twilio, Vercel and Cloudflare, may process data in the United States. Where a provider is certified under the UK Extension to the EU-US Data Privacy Framework, we rely on the UK-US data bridge. Otherwise we use the International Data Transfer Addendum to the EU standard contractual clauses, approved under UK data-protection law.
Retention and security
We keep data for only as long as needed for the service, legal obligations, accounting, resolving disputes and security:
- Messages and content: until you delete them or close your account. When you delete a message, its words are removed. Media you delete is erased, unless it is part of a release already delivered to stores, which needs a takedown first.
- Connected-platform access: until you disconnect the platform, when we delete the stored tokens.
- Account, profile and analytics: while your account is open, and deleted within 90 days of closing it.
- Approvals and security records: six years after your account closes, as evidence of what you authorised. They are never used for anything else.
- Financial records: six years, as UK tax law requires.
- Backups: deleted data can remain in our backups for up to 35 days before they expire.
Provider tokens are stored encrypted. Each artist's data is isolated from other artists' data. We use access controls and operational records to protect the service. No security measure can guarantee absolute security.
Your UK GDPR rights
You may ask to access, correct, erase, restrict or move your personal data. You may object to processing based on legitimate interests and withdraw consent where we rely on it. To make a request, email accounts@steezerecords.com.
You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the chance to resolve a concern first.
Children
Artist OS is only for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it.
Cookies and changes
This public website does not set cookies of its own, does not use analytics or advertising trackers and does not load third-party scripts. Our hosting and security providers may set strictly necessary cookies to protect the site from abuse.
The artist studio stores one strictly necessary cookie on your device to keep you signed in. It holds an opaque session reference, cannot be read by scripts on the page, is sent only to the studio and expires after 12 hours. The studio uses no analytics or advertising cookies.
We will update this policy when the service or legal requirements change. The date at the top shows when it was last updated.
Contact
Questions about privacy can be sent to accounts@steezerecords.com.