Privacy Policy

NAYMLIS ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our platform at app.naymlis.com and naymlis.com (the "Service").

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password, artist/stage name, pronouns, birthday
• Payment Information: Billing details processed through Stripe (we do not store full card numbers)
• Content: Music files, artwork, metadata, and other content you upload
• Communications: Messages you send to us via email or support channels
• Tax Information: W-9 or similar tax documentation (if applicable for royalty payments)

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, actions taken within the platform
• Device Information: Browser type, operating system, device type, screen resolution
• Log Data: IP address, access times, referring URLs
• Cookies and Similar Technologies: See Section 8 below

1.3 Information from Third-Party Services

When you connect third-party accounts, we may receive:

• Spotify: Artist profile data, streaming analytics, listener demographics
• Apple Music: Artist profile data and streaming metrics

We may also receive performance data, revenue data, and other reporting information from digital service providers in connection with music distribution and royalty reporting. We only access data you authorize through these integrations. These third-party services have their own privacy policies, and we are not responsible for their privacy practices.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process payments and manage subscriptions
• Distribute your music to streaming platforms and digital stores
• Display streaming analytics and performance insights
• Send account-related communications (billing, security, updates)
• Provide customer support
• Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations
• Process and display royalty data and reporting related to distributed content

We do not sell your personal information to third parties. We process your personal information only as necessary to provide the Service, comply with legal obligations, and support our legitimate business interests.

3. Data Role

In most cases, NAYMLIS acts as a data controller for personal information you provide directly to us. For certain data processed on your behalf (such as content or data submitted for distribution), we may act as a data processor.

4. How We Share Your Information

We share your information only in these circumstances:

4.1 Service Providers

We work with trusted third-party service providers to operate the platform, including providers for payment processing, hosting, file storage, and analytics. These providers access only the data necessary to perform their functions and are bound by confidentiality obligations.

4.2 Distribution Partners

When you use our distribution features, we share your music, metadata, ownership information, and related data with streaming platforms and digital stores to enable distribution, monetization, and reporting.

4.3 Legal Requirements

We may disclose information if required by law, legal process, or government request, or to protect the rights, safety, or property of NAYMLIS, our users, or the public.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Retention

• Account Data: Retained as long as your account is active. After account deletion, we delete or anonymize your data within 90 days, except as required by law or for legitimate business purposes (e.g., fraud prevention, financial records).
• Content: Music and artwork are deleted upon request or account closure, subject to distribution obligations (content already distributed may remain on third-party platforms per their policies).
• Payment Records: Retained for 7 years as required by financial regulations.
• Usage Logs: Retained for up to 24 months, then aggregated or deleted.

6. Your Rights

6.1 All Users

You have the right to:

• Access your personal data through your account settings
• Update your personal information at any time
• Delete your account by contacting support@naymlis.com
• Export your data upon request
• Withdraw consent for optional data processing

6.2 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know: Request details about the personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information, so this right does not apply
• Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, email support@naymlis.com with the subject "CCPA Request."

6.3 European Residents (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation:

• Right to Access, Rectify, or Erase your personal data
• Right to Restrict or Object to certain processing
• Right to Data Portability
• Right to Lodge a Complaint with your local data protection authority

Our legal bases for processing include contract performance (providing the Service), legitimate interests (improving the Service and preventing fraud), and consent (for optional integrations and analytics).

To exercise these rights, email support@naymlis.com with the subject "GDPR Request."

7. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS/SSL) and at rest
• Secure payment processing through Stripe (PCI DSS compliant)
• Access controls and authentication requirements
• Regular security reviews

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. We are not responsible for the security practices of third-party services or platforms integrated with the Service.

8. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for the Service to function (authentication, sessions)
• Analytics Cookies: Help us understand how the Service is used (may include those provided by third-party services)

We do not use cookies for advertising or cross-site tracking. You can control cookies through your browser settings, but disabling essential cookies may affect functionality. The Service does not respond to "Do Not Track" signals from browsers.

9. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

10. International Data Transfers

Your information may be processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your information to these locations. We take appropriate safeguards to ensure your data is protected in accordance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last Updated" date at the top reflects the most recent revision.

12. Contact Us

For privacy-related questions or to exercise your rights:

Email: support@naymlis.com

Website: naymlis.com

For urgent privacy concerns, please include "URGENT" in your email subject line.