Privacy Policy

1. Who we are

git-royal (“git-royal,” “we,” “us”) provides smart links, landing pages, conversion tracking, and related tools for musicians. This policy applies to our website at git-royal.com, the pages we host on artist subdomains, and our dashboard.

2. Information we collect

Information you give us

• Account data — your email address, display name, and handle. Authentication and passwords are managed by our infrastructure provider (Supabase); we do not store your password.
• Content — release details, artwork, audio previews, links, and other material you upload to build your pages.
• Payment data — subscriptions are processed by Stripe. We receive limited billing details (such as your plan and a customer identifier) but never see or store your full card number.
• Waitlist data — if you join a waitlist, the email and any preferences you provide.

Information we collect automatically

• Usage and device data — pages viewed, actions taken, approximate location, browser and device type, and log data, collected through privacy-focused analytics.
• Cookies and similar technologies — used to keep you signed in and to understand how our site is used. See “Cookies” below.

3. Data we process on behalf of artists

When someone visits a page an artist publishes with git-royal, we record engagement events (such as page views, preview plays, and click-throughs) so the artist can measure performance. For artists on a paid plan who connect their own Meta pixel, we also send these events — which may include the visitor's IP address, user agent, and event details — to that artist's Meta pixel and dataset through Meta's Conversions API (server-side), and the Meta pixel may load in the visitor's browser.

For this fan and visitor data, git-royal acts as a data processor on behalf of the artist, who is the controller. The artist is responsible for having a lawful basis and any required consent, and for maintaining their own privacy notice. See our Terms of Service.

4. Cookies and tracking technologies

We use essential cookies for authentication and lightweight analytics to improve the product. Artist pages on paid plans may load the artist's Meta pixel. Where consent is required (for example, in the EU/UK), tracking technologies that are not strictly necessary should load only after consent is given.

5. How we use information

• To provide, maintain, and improve the service;
• To process payments and manage subscriptions;
• To communicate with you about your account, updates, and support;
• To measure and secure our service and prevent abuse;
• To comply with legal obligations.

6. How we share information

We do not sell your personal information. We share it only with:

• Service providers that run our platform — including Supabase (database, auth, storage), Stripe (payments), Vercel (hosting and analytics), and Meta (advertising and conversion measurement);
• The relevant artist, for engagement data generated on their pages;
• Authorities, where required by law; and
• A successor entity in connection with a merger, acquisition, or sale of assets.

7. Advertising and Meta

Artist pages may share data with Meta for advertising measurement and audience building via the artist's pixel. Meta's handling of that data is governed by Meta's own policies. You can learn more in the Meta Privacy Policy.

8. Data retention

We keep personal information for as long as your account is active or as needed to provide the service, then for a reasonable period to meet legal, accounting, or security obligations, after which it is deleted or anonymized.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To make a request, email us at the address below. For data collected on an artist's page, we may direct your request to that artist as the controller.

10. International transfers

We and our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

11. Children

git-royal is not directed to children and is not intended for anyone under 16 (or the minimum age required in your country). We do not knowingly collect data from children.

12. Security

We use technical and organizational measures to protect personal data, but no method of transmission or storage is completely secure.

13. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date, and where appropriate we will notify you.

14. Contact

Questions or requests? Email support@git-royal.com.