Privacy Policy

ColabLoop Ltd, 8700 Perry Highway, Pittsburgh, PA 15237 is the controller of the personal data described here. For anything in this policy, contact support@colabloop.com.

• Account details. Your email address, display name and profile image, handled by our authentication provider when you sign up.
• Verification details. The BeatStars username you submit and any note you add, so a person can check the profile is yours.
• Publishing details you choose to add. IPI number, PRO affiliation, Instagram and YouTube handles. These are optional, and they are never shown publicly — they are shared only with a producer you are actively collaborating with, at the point described below.
• Audio you upload. Your loops and collaboration stems, plus what we derive from them: a waveform, a shortened preview, duration.
• Activity on the service. Loops you publish, inquiries and collaboration requests, messages in a Collaboration Room, downloads, split confirmations, and your upload-quota history.
• Technical data. Standard server request logs, including IP address, kept by our host for security and debugging.

We do not collect payment card details. Those go directly to Paddle, our Merchant of Record — we never see or store your card number.

• To provide the service you signed up for — hosting your loops, running search, delivering messages, tracking upload quota. Basis: performance of a contract.
• To verify that you are a real producer before allowing uploads and requests, which is what keeps the workspace usable. Basis: legitimate interests.
• To screen uploads against a commercial-recordings database. Basis: legitimate interests, and compliance with copyright obligations.
• To share contact and publishing details between two collaborating producers at first full download. Basis: performance of a contract — it is the core function you are asking for.
• To take payment for upload quota. Basis: performance of a contract, and legal obligation for tax and invoicing records.
• To keep the service secure and investigate abuse. Basis: legitimate interests.

Your display name, profile image, BeatStars username, response rate and your published loops (with their previews) are public. Your email address, IPI number, PRO affiliation and social handles are not — the database enforces this, not just the interface.

The one deliberate exception: when a collaborator first downloads the full-quality file of a loop, each producer's contact and publishing details are shared with the other, inside that room only. That exchange is the point of the feature and it is described in the Terms.

We use a small number of providers. Each receives only what it needs, and none of them are permitted to use your data for their own purposes.

We do not sell your personal data, and we do not share it with advertisers.

Our providers operate internationally, so your data may be processed outside your country, including in the United States. Where that involves personal data from the UK or EEA, transfers rely on the safeguards those providers have in place, such as Standard Contractual Clauses.

We use essential cookies only — the ones our authentication provider needs to keep you signed in and to protect against cross-site request forgery. We run no analytics, no advertising pixels and no third-party trackers, which is why you are not being asked to dismiss a cookie banner.

• Account and profile data: while your account is open, then deleted on request.
• Uploaded audio and previews: until you delete the loop or your account.
• Collaboration messages and stems: kept while the collaboration exists, because both producers rely on that history.
• Quota and payment records: kept as long as tax and accounting law requires, typically six years, even after an account closes.
• Server logs: a short rolling window held by our host.

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to us using it. You can also ask for it in a portable format, and you can complain to your local data-protection authority.

Ask by emailing support@colabloop.com. We will respond within one month. There is currently no self-service delete button in the app — we handle deletion requests by hand, and we would rather say so than imply a button exists.

One limit worth stating plainly: messages you have already sent to another producer, and a split confirmation you have already made, form part of that producer's record of the collaboration. We may keep those even after you delete your account.

If you live in California, Colorado, Connecticut, Virginia or another state with a comprehensive privacy law, you have the right to know what personal information we collect and why, to request a copy of it, to correct it, to ask us to delete it, and not to be discriminated against for exercising any of those rights.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in California's CCPA/CPRA. We have never done so. Because of that there is nothing for you to opt out of, and we do not offer financial incentives in exchange for your data.

Exercise any of these rights by emailing support@colabloop.com. We may need to confirm your identity before acting, which for an account holder normally just means writing from the address on the account. You can authorise an agent to act for you.

ColabLoop is not for anyone under 18, and we do not knowingly collect their data.

If we change this policy we will update the date at the top, and tell you directly if the change is significant.