Privacy Policy

The short version

• We collect what running the service needs, and not much else.
• We do not sell your data, and we do not run advertising or tracking.
• The only cookies we set are the ones that keep you signed in.
• Card details go straight to Stripe. We never see them.
• We never contact a service for you, so nothing about you leaves here in a complaint.
• Ask us and we will close your account. Some records we have to keep, and this page says which.

The rest of this page is the detail behind those lines. If anything here is unclear, write to support@artistsentry.com and ask.

Who we are

ArtistSentry is operated by Kinjari, Inc., 1111B S Governors Ave STE 48459, Dover, DE 19904, United States. We are the controller of the personal data described here, which means we decide what is collected and why.

What we collect

When you make an account

• Your name and email address.
• Your password, stored only as a hash that cannot be turned back into the password.
• If you turn them on, two-factor secrets, recovery codes, and any passkeys you register.
• The name of your team, and who is in it.

When you use the service

• Your IP address, browser and device details, and the times you signed in. This is how sessions and security work.
• The artists and profile links you ask us to watch, and the distributors you tell us you already use.
• The releases we find, and your answers about them.
• Any API keys your team creates, stored as a hash, with what they were last used for.

When you pay

• Stripe handles the payment. Your card number never reaches us.
• We keep the Stripe customer and subscription identifiers, the card brand, the last four digits, and the state of your subscription, so the app can tell you what you are on and what you owe.

When you raise a case

We keep the evidence we gathered about the release, who we told you to contact, and what you tell us you did: that you got in touch, any reference they gave you, and how it ended.

We do not hold anything you wrote to them, and we never see their reply, because the conversation is between you and them.

When you get in touch

• Emails you send us, and our replies. These sit in our helpdesk, named below.
• If you fill in the distributor enquiry form, your name, company, email, how many artists you have, and anything you write in the notes. That is sent to us as an email.

Why we hold it, and what allows us to

Under UK and EU data protection law we have to have a lawful basis for each use. Ours are these.

Running the service

Watching profiles, telling you what turned up, gathering the evidence and the contact details you need to put it right, keeping your account working. We need this to give you what you have paid for, so the basis is performance of our contract with you.

Taking payment

Subscriptions, invoices, failed payments. Also performance of our contract.

Keeping accounts secure

Sign-in records, IP addresses, rate limits, spotting abuse. Our legitimate interest in keeping the service safe for everybody using it.

Keeping a record of cases

Which releases you questioned, who you contacted and how it ended. Our legitimate interest, and yours, in being able to show what was done and when.

Support and improving the product

Answering questions, finding out what broke. Our legitimate interest in running the service well.

Books and records

Invoices and tax records. A legal obligation.

We send you email about your account and about what we find. That is part of the service, not marketing. We do not run a marketing list, and we do not sell or rent your details to anybody.

Who we send it to

We use other companies to run parts of the service. They act on our instructions and may only use the data to do the job we have given them.

Laravel Cloud

Running the application itself. United States

Amazon Web Services

The database everything is stored in. United States

Mailcoach (Spatie BV)

Sending the email we send you: what turned up, and account notices. Belgium

Help Scout

Our helpdesk. It holds the emails you send us and our replies. United States

Stripe, Inc.

Payments and subscriptions. Card details go to Stripe and are never held by us. United States

Spotify, Apple Music, Deezer, TIDAL, YouTube

Reading the catalogue on an artist page you asked us to watch. United States and EU

Musicfetch

Looking up who delivered a release, where the services do not publish it. United States

When we look up an artist on a streaming service, we send that service the identifier for the profile you asked us to watch. We read what they publish. We do not send them your account details.

Nobody else. We do not contact services or distributors on your behalf, so nothing about you is passed to them by us. When you write to them yourself, what you tell them is between you and them.

We will also hand over data where the law requires it, and if the business is ever sold or merged, in which case we would tell you first.

Where your data is

We are a United States company and our providers are largely in the United States and the European Union. If you are in the UK or the EU, that means your data is transferred out of it. Where it is, we rely on the standard contractual clauses approved for that purpose, together with the UK addendum, so the protection travels with the data.

Cookies

We set the cookies that make signing in work, and nothing else:

• A session cookie, so the site knows it is still you between pages.
• A CSRF token cookie, which stops another site submitting forms as you.
• If you tick "remember me", a cookie that keeps you signed in.

There is no analytics, no advertising, no third-party tracking and no cookie banner, because there is nothing to consent to. Marketing pages ship no scripts at all.

How long we keep it

Your account

While the account is open, and for a minimum of 6 years after it closes, for accounting and auditing purposes. After that it is deleted.

Case records

6 years from the date the case was raised, whatever happens to the account. A complaint you made can come back long after you have stopped paying us, and the record is what answers it.

Invoices and payment records

As long as tax and accounting law requires us to keep them.

Sign-in and security records

Up to 12 months.

Your rights

If you are in the UK or the EU, you have the right to:

• ask what we hold about you, and get a copy;
• have anything wrong corrected;
• have your data deleted, other than the records we are required to keep, described under How long we keep it;
• ask us to restrict what we do with it, or object to it, where our basis is legitimate interest;
• get the data you gave us in a portable form;
• complain to a regulator.

Ask at support@artistsentry.com and we will answer within one month. It is free. In the UK the regulator is the Information Commissioner's Office at ico.org.uk; in the EU it is the authority where you live. We would rather you came to us first.

Closing your account

There is no delete button in the app. That is deliberate: an account holds monitoring, a live subscription and the record of cases you have raised, and one click is the wrong way to end all of that.

Email support@artistsentry.com from the address on the account. We will cancel the subscription, stop the monitoring, and close the account.

We cannot then erase everything on the spot. Accounting and auditing rules require us to keep records of what you bought and paid for a minimum of 6 years, and a case you raised against a service can still be asked about long after the subscription that produced it has gone. Those records are kept for that purpose alone and are deleted when the period ends. Anything not held for that reason goes when the account closes.

How we look after it

• Everything travels over an encrypted connection.
• Passwords are hashed, never stored as text. So are API keys.
• Two-factor authentication and passkeys are available on every account.
• Our staff can reach account data only where support or abuse handling needs it.

No system is perfect. If we ever have a breach that puts you at risk, we will tell you and the regulator as the law requires.

Children

The service is for people aged 18 and over. We do not knowingly collect data about children. If you think a child has given us data, tell us and we will remove it.

Changes to this policy

We will update this page when what we do changes. Where a change matters to you, we will email you before it takes effect. The date at the top always says when this version started.

Contact

support@artistsentry.com, or write to Kinjari, Inc., 1111B S Governors Ave STE 48459, Dover, DE 19904, United States.