DeepGrooves privacy policy

1. Who we are and what this covers

DeepGrooves Music Technologies LLC (“DeepGrooves,” “we,” or “our”) is the operator of the DeepGrooves collector service. This policy applies to the DeepGrooves Android phone application, supported Android Auto experience, web collector application, and their connected account and Listening Booth services.

It does not govern separate products such as DeepGrooves Store or future Artist and Marketplace services, or the corporate website, which have their own applicable notices. When you follow a link to an independent website or service, its policies also apply.

2. Information we collect and process

Depending on the features you use, we process the following categories:

• Account and identity: email address, authentication identifiers, account settings, preferences, accepted terms, and account or subscription status.
• Music collection: albums, artists, release and pressing identifiers, formats, ownership, wishlists, favorites, notes, ratings, condition, tags, folders, runouts, physical Vault locations, import records, and information you choose to record.
• Listening and digital media: track titles and other audio metadata, audio files you select to upload, cloud-storage usage, playback authorization, queues, saved playlists, listening and playback events, and related preferences.
• AI interactions: prompts you submit to DeeJay and limited collection or listening context used to produce requested recommendations and answers.
• Payments and entitlements: membership plan, purchase and token balances, billing status, transaction references, and information received from our payment processors. Payment-card information is handled by the applicable checkout provider; DeepGrooves does not need complete card numbers to manage access.
• Support and diagnostics: messages and attachments you send to support, error details, usage events, app version, device or operating-system characteristics, IP-derived security information, and performance or access logs.

Some information is provided by you; other information is created while the service operates or comes from authentication, payment, or catalog integrations. You can use collection features without publishing your collection to other users.

3. Why we use information

We use the information described above to authenticate users, maintain and synchronize collections across devices, provide searches and metadata matching, manage subscriptions and optional token purchases, operate uploaded-audio playback, remember user choices, deliver requested AI features, respond to support requests, detect abuse, troubleshoot failures, and meet applicable legal obligations.

Playback history and collection context may also help produce the statistics, discovery results, and listening suggestions you request. We do not sell your collection or use your account information to build third-party advertising audiences.

4. Listening Booth and uploaded audio

If you choose to use Listening Booth, DeepGrooves processes the audio files and associated metadata you import so that they can be stored, matched to collection entries, organized, and played back on your authorized devices. Audio storage and delivery involve cloud infrastructure, including Cloudflare R2. Upload and playback activity, storage usage, and technical failures may be recorded to operate and troubleshoot the feature.

You are responsible for uploading only audio you have the right to store and use. Your uploaded audio is not automatically published for other users. Files can remain in your account storage until removed, the account is deleted, or a lawful retention obligation applies. Deleting an account also requires coordinated removal of associated cloud audio and metadata.

5. DeeJay and AI-assisted features

When you actively use DeeJay or another AI-assisted feature, the request and limited relevant collection or listening information may be sent to an AI processor such as OpenAI. That information can include artist and album names, recent plays, selected tags, genre or mood preferences, and context needed to answer the question. We use it to return the feature you requested, not to sell your collection information.

Do not put passwords, payment-card details, or sensitive personal information into AI prompts. Not every recommendation uses a live AI request: some results are generated from local rules or previously computed information.

6. Service providers and third parties

We use service providers that process information on our behalf or as needed to complete a requested action. These include Supabase for authentication and application data; Cloudflare R2 for uploaded-audio storage; hosting and communications providers such as Netlify and email-delivery services; payment providers such as Square; and AI processors such as OpenAI for requested AI features. Their involvement depends on the feature and platform.

Catalog and artwork information may come from Discogs, MusicBrainz, and other music-data providers. Searches and external links may involve those providers under their own policies. We may also disclose limited information when required by law, to respond to fraud or abuse, or in a lawful business transfer with appropriate protections. We do not sell personal information.

7. Sharing and public links

Your collection is private by default. If you create an optional sharing link, people who receive the link may view the specific collection information you selected, subject to the sharing controls in the service. Check what a shared view includes before sending it, and disable a link when you no longer want it accessible. Public links do not grant access to your private uploaded audio files.

8. Security and device access

We use encrypted connections, authentication, access controls, and restricted service credentials to help protect account information and uploaded media. Access to data is limited according to the service functionality and authorized account permissions. No online service can guarantee absolute security.

Android may request access to files or media that you choose to import, or to device capabilities needed for an action you initiate. Playback also integrates with Android media controls and Android Auto when available. Device settings let you manage applicable permissions; refusing an optional permission may prevent its associated feature from working.

9. Retention and account deletion

We generally keep account, collection, subscription, and uploaded-media information while your account is active and as needed to provide requested services. When you request account deletion and your request is verified, associated user data is removed as part of account closure, including collection records and owned uploaded audio, except information that must be retained for a legitimate legal, security, fraud-prevention, accounting, or regulatory purpose. Necessary retained records are kept only for the applicable purpose and retention period.

You can request deletion without reinstalling DeepGrooves through our public account-deletion page. Where available, you may also request deletion through your signed-in account settings. We may need to verify your identity before processing a request. Removing the application from your device does not itself delete your account; canceling a subscription and deleting an account are separate actions.

10. Your choices and rights

You can review or update many collection entries and preferences in the service, revoke sharing links, remove uploaded audio, and stop using optional features. Depending on your location and applicable law, you may also request access, correction, export, restriction, or deletion of your personal data, or object to certain uses. Contact us with the details of your request; we may ask for reasonable identity verification and will respond as applicable law requires.

11. Children and international use

DeepGrooves is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided such information, contact us for review.

DeepGrooves is operated from the United States. Data may be processed in the United States and other countries where our service providers operate. Applicable privacy rights and requirements vary by location.

12. Policy updates

We may revise this policy as the product, integrations, or legal requirements change. We will update the date on this page and provide additional notice when required for material changes.