ViloBeat is a product of Peoplera Technologies Limited ("Peoplera," "we," "us," or "our"), a company registered in Nigeria. We built ViloBeat to give independent artists and record labels the tools they need to distribute music, grow their audience, and earn from their craft. This Privacy Policy explains, in plain language, what data we collect, why we collect it, how we protect it, and what choices you have over your information.

This policy applies to all users of ViloBeat's web dashboard (admin.vilobeat.com and vilobeat.com), the ViloBeat mobile application for Android and iOS, our public-facing Smart Link pages, Pre-Save landing pages, Artist Portal pages, and Curator submission forms.

1. Information We Collect

We collect different types of information depending on how you interact with ViloBeat. Here is a breakdown.

1.1 Account and Profile Information

When you sign up for ViloBeat, we collect your name, email address, and a hashed version of your password. We never store passwords in plain text. If you sign in through Google or Apple, we receive the email address and display name associated with that account but never your password for those services.

After registration, you may provide additional profile details including your artist or stage name, a biography, your phone number, genre preferences, social media links, and a profile picture. If you operate a record label on ViloBeat, we also collect profiles for each artist you manage under your label account, including their names, bios, genre, and social links.

1.2 Music and Catalog Data

When you upload music for distribution, we collect the audio files themselves along with all associated metadata: track titles, artist credits, featured artist names, genre and subgenre classifications, release dates, ISRC codes, UPC codes, songwriter and composer names, producer credits, cover art images, lyric data (including time-synced lyrics), label name, and copyright line (P-line and C-line) information.

For releases structured as EPs or albums, we also collect the release-level metadata including the release title, release type, primary genre, and any release-specific cover art.

1.3 Financial and Transaction Data

We track your ViloBeat Wallet balance, Studio Credit balance, and a full ledger of royalty earnings, credit purchases, withdrawal requests, and campaign spending. When you request a withdrawal, we collect your bank details (bank name, account number, account holder name, and routing information) to process the payout. Subscription payments are handled by our payment processors (Paystack and Stripe), and we store references to those transactions but do not store raw credit card or debit card numbers on our servers.

For label users, we additionally track expense records, external income entries, recoupment plans, and settlement histories associated with each managed artist profile.

1.4 Creative Tool Inputs

ViloBeat offers a suite of creative tools. When you use them, we process the inputs you provide:

Lyrics Generation: We process your mood, theme, genre, tempo, audience, and keyword preferences to generate original lyrics on your behalf.
Cover Art Generation: We process the text prompt you write, and in some cases a reference image you upload, to generate artwork.
Audio Mastering: We process the audio file you upload to produce a mastered version.
Stem Separation: We process the audio file you upload to isolate individual stems (vocals, drums, bass, and other instruments).
Voice Reference Cloning: We process the vocal sample you upload to create a voice reference for AI music generation.
Lyrics-to-Music Generation: We process the lyrics and vocal/style preferences you specify to produce an original recording.
Lyrics Refinement: We process existing lyrics you submit to suggest variations and improvements.

These inputs are sent to our processing infrastructure for the sole purpose of generating the output you requested. We do not use your creative inputs to train machine learning models, and we do not share them with third parties for their own commercial purposes.

1.5 Campaign and Fan Engagement Data

ViloBeat runs several campaign and promotion features that collect data about your audience:

Pre-Save Campaigns: When a fan enters their email address on your Pre-Save landing page, we store that email address along with a timestamp and the song it was associated with.
Pre-Save Email Blasts: When you send a blast to your pre-save list, we record the number of emails sent, opens, and click-throughs for your analytics dashboard.
Smart Link Visits: When anyone visits one of your Smart Links, we record the visit along with the platform they clicked (Spotify, Apple Music, etc.), their approximate geographic location (country and city, derived from IP address), the referring URL, their browser and device type, screen dimensions, and any UTM campaign parameters attached to the link.
Playlist Pitching: When we pitch your music to playlist curators, we record the pitch status, curator responses, and playlist placement data.

1.6 Curator and Waitlist Data

If you are a playlist curator and submit your information through our Curator onboarding forms, we collect your name, contact information, playlist details (name, platform, genre, follower count), and your submission preferences. If you join any of our feature waitlists, we collect your email address and the feature you expressed interest in.

1.7 Event and Ticketing Data

If you use ViloBeat's event management features to organize concerts, shows, or listening parties, we collect event details such as the title, description, venue, location, date, capacity, ticket tier pricing, and ticket sales data. Revenue figures and expense records associated with events are also stored.

1.8 Device and Technical Data

We collect standard technical information when you use ViloBeat, including your IP address, browser type, operating system, device model, screen resolution, and the pages you visit within our platform. On the mobile app, we may also collect your Expo push notification token if you opt in to push notifications.

1.9 Communications

Our platform includes a support chat system. Messages you send through the in-app chat are stored on our servers alongside your user ID, the timestamp, and any admin responses. We also retain records of system notifications, broadcast messages, and transactional emails sent to your registered email address.

2. How We Use Your Information

Everything we collect serves a specific operational purpose. Here is how we use each category.

To distribute your music: We package your audio files, metadata, and cover art and deliver them to Digital Service Providers (DSPs) including Spotify, Apple Music, Amazon Music, Tidal, Deezer, YouTube Music, and others. This is the core function of the platform.
To process your earnings: We ingest royalty reports from DSPs, calculate your earnings, credit them to your wallet, process withdrawal requests to your bank account, and generate financial statements and CSV exports for your records.
To run campaigns on your behalf: We use your song data and pre-save email lists to execute playlist pitching campaigns, pre-save notification blasts, and Smart Link analytics dashboards.
To generate creative assets: We send your creative inputs to our infrastructure to generate lyrics, cover art, mastered tracks, separated stems, and AI-composed music as you request them.
To manage label operations: For label accounts, we use artist profile data, expense records, and royalty data to calculate recoupment balances, generate settlement reports, and power the Artist Portal where managed artists can view their financial position.
To manage your events: We use event details and ticket tier data to display event pages, track ticket sales, and calculate event revenue.
To authenticate you and secure your account: We use your email and hashed password (or OAuth tokens from Google/Apple) to verify your identity. We also track your active mobile session to prevent unauthorized simultaneous access from multiple devices.
To send you important updates: We use your email address and push notification token to notify you about distribution status changes (approved, live, rejected), royalty deposits, subscription renewals, account security alerts, and new platform features.
To enforce our policies: We use violation records, fine payment history, and account suspension data to identify repeat offenders, protect rights holders, and maintain the integrity of our distribution catalog.
To improve the platform: We use aggregated, anonymized analytics data (page views, feature usage patterns, device breakdowns) to understand how artists use ViloBeat, identify performance bottlenecks, and prioritize new features.

3. Who We Share Your Data With

We do not sell your personal information to advertisers, data brokers, or any other third party. Period. We share your data only in the following circumstances, each of which is necessary to deliver the services you signed up for.

3.1 Digital Service Providers

To distribute your music, we must deliver your audio files, metadata, cover art, and artist profile information to DSPs. This is non-negotiable — without sharing this data, your music cannot appear on streaming platforms. Each DSP has its own privacy policy governing how it handles your data after delivery.

3.2 Payment Processors

Subscription payments, Studio Credit purchases, campaign payments, and event ticket transactions are processed through Paystack and Stripe. When you initiate a payment, your payment details are sent directly to these processors. We receive a transaction reference and confirmation but never handle or store your raw card numbers. For withdrawals, we transmit your bank details to our payment partner to execute the transfer.

3.3 Cloud Infrastructure

Your audio files, cover art, and other media assets are stored on Cloudflare R2 object storage. Our application runs on Cloudflare Workers, and our primary database is hosted on Neon (PostgreSQL). These infrastructure providers process your data on our behalf and are contractually bound to use it only for the purpose of hosting our services.

3.4 AI Processing Partners

When you use our creative tools, your inputs may be sent to external API providers including Leonardo AI (for image generation), Fal AI (for audio and advanced media processing), and Google Gemini (for text generation). We select partners who commit to not using customer inputs to train their public-facing models. Your creative inputs are processed in real time and are not retained by these providers beyond the duration of the processing request unless their own policies state otherwise.

3.5 Email Delivery

Transactional emails (password resets, distribution updates, pre-save blasts) are sent through Resend. We share the recipient email address and email content with Resend solely for the purpose of delivering those messages.

3.6 Legal and Compliance

We may disclose your information if required by law, legal process, or a government request. We may also share violation and infringement records with affected rights holders or DSPs when necessary to resolve copyright disputes or comply with takedown obligations.

4. Fan Data and Your Responsibilities

When fans interact with your Smart Links or Pre-Save pages, we collect their data on your behalf. You can view captured fan emails and engagement metrics in your campaign dashboard. By accessing this data, you agree to the following:

You will not use fan email addresses collected through ViloBeat for purposes unrelated to your music career (e.g., reselling email lists to third parties).
You will comply with applicable anti-spam and data protection laws, including CAN-SPAM (United States), GDPR (European Union), NDPR (Nigeria), and POPIA (South Africa), depending on where your fans are located.
You will honor unsubscribe requests promptly and in good faith.
You acknowledge that ViloBeat is a data processor acting on your behalf with respect to fan data, and you are the data controller responsible for determining how that data is used.

5. Data Retention

We retain your account data, music catalog, financial records, and associated metadata for as long as your account is active. If you delete your account, we will remove your personal profile information within 30 days. However, certain data may be retained longer:

Financial records: Transaction histories, royalty ledgers, withdrawal receipts, and settlement records are retained for a minimum of seven (7) years for accounting and tax compliance purposes.
Distributed music: After account deletion, we will initiate takedown requests to DSPs. However, we cannot guarantee the timing of removal from all platforms, as each DSP operates on its own schedule.
Enforcement records: Violation records, fine payment histories, and suspension logs are retained indefinitely to prevent abuse and protect the rights of other artists on the platform.
Anonymized analytics: Aggregated, non-identifiable usage statistics are retained indefinitely for platform improvement purposes.

6. Data Security

We take the security of your data seriously and implement multiple layers of protection:

Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS (HTTPS). This applies to the web dashboard, the mobile app, and all API communications.
Encrypted storage: Audio files and cover art are stored in encrypted cloud storage buckets. Database connections use SSL encryption.
Password security: Passwords are hashed using industry-standard one-way hashing algorithms. We never store or log passwords in plain text. Password reset flows use time-limited one-time codes sent to your verified email address.
Session management: Authentication tokens are issued using JSON Web Tokens (JWT) with expiration periods. On mobile devices, tokens are stored in the operating system's secure keychain (iOS Keychain or Android Keystore) when available.
Single-device enforcement: To prevent unauthorized access, we enforce a single active mobile session per account. Logging in on a new device automatically invalidates the session on the previous one.

That said, no system is completely immune to security threats. While we work hard to protect your data, we cannot guarantee absolute security against all possible attack vectors.

7. Your Rights

Depending on where you live, you may have certain rights regarding your personal data. These commonly include:

Access: You can request a copy of the personal data we hold about you.
Correction: You can update or correct inaccurate information through your profile settings or by contacting us.
Deletion: You can request the deletion of your account and associated personal data, subject to the retention periods described in Section 5.
Data portability: You can export your royalty statements and financial data as CSV files directly from the platform.
Opt-out of marketing: You can unsubscribe from promotional emails at any time. Note that transactional communications (distribution updates, security alerts) cannot be opted out of while your account is active.
Withdraw consent: Where we rely on your consent to process data (for example, push notifications), you can withdraw that consent at any time through your device settings.

To exercise any of these rights, contact us at support@vilobeat.com. We will respond within 30 days.

8. Cookies and Local Storage

Our web platform uses cookies and browser local storage for essential functions only: maintaining your login session, remembering your preferences, and enabling the smooth operation of the admin dashboard. We do not use third-party advertising cookies or behavioral tracking pixels. Our web analytics system collects page views and usage patterns using first-party data stored in our own database, not through third-party analytics services.

9. Children's Privacy

ViloBeat is not intended for children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@vilobeat.com, and we will delete that information promptly. Users between the ages of 13 and 18 should have parental or guardian consent before creating an account.

10. International Data Transfers

ViloBeat operates globally. Your data may be processed and stored in data centers located in the United States, Europe, and other jurisdictions where our infrastructure providers maintain facilities. By using ViloBeat, you consent to the transfer of your data to these locations. We ensure that all transfers comply with applicable data protection standards and that our infrastructure partners maintain appropriate safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect new features, changes in applicable law, or improvements to our data practices. When we make material changes, we will notify you through an in-app notification, email to your registered address, or a prominent notice on our website. Your continued use of ViloBeat after the effective date of any updated policy constitutes your acceptance of the changes.

12. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or how we handle your data, reach out to us:

Email: support@vilobeat.com
Company: Peoplera Technologies Limited
Platform: vilobeat.com

We read every message and aim to respond within two business days.