Privacy Policy
1 Who We Are
Ooki Music is operated by SPLURJJ, LLC, a company doing business as Ooki Music. When this policy refers to "Ooki," "we," "us," or "our," it means SPLURJJ, LLC and its services, including the website at play.ookimusic.com, the Ooki mobile applications, the Ooki API, and any related platform features.
This Privacy Policy describes how we collect, use, store, and protect personal information when you access or use any part of the Ooki platform. By using Ooki, you agree to the practices described in this policy.
2 Data We Collect
We collect information in three ways: information you give us directly, information generated automatically by your use of the platform, and information from third parties.
| Category | Examples | Source |
|---|---|---|
| Account data | Name, email, password hash, profile photo, role (listener/artist) | You, on signup |
| Artist profile data | Bio, genre tags, social links, ISRC codes, bank/payout details | You, in dashboard |
| Usage data | Tracks played, play count, skip count, session length, page views | Automatic |
| Device & technical data | IP address, browser type, OS, device ID, referrer URL | Automatic |
| Payment data | Transaction amounts, plan type, billing frequency (card details held by Stripe) | Payment processor |
| Communications | Support emails, feedback submissions, contact form messages | You |
| Third-party auth | OAuth tokens, Google/Apple sign-in profile data | Identity provider |
We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data.
3 How We Use Your Data
We use the data we collect for the following purposes:
- Platform operation — creating and maintaining your account, processing audio uploads, streaming tracks, managing subscriptions, and processing payments.
- Personalization — recommending tracks, artists, and Sonic Capsules based on your listening history and preferences.
- Analytics & improvement — understanding how users interact with the platform to fix bugs, improve features, and make product decisions.
- Artist royalties — calculating and distributing streaming revenue to artists based on play counts and subscription tier data.
- Communication — sending transactional emails (receipts, account alerts), product updates, and, with your consent, marketing newsletters.
- Security & fraud prevention — detecting and preventing unauthorized access, abuse, and fraudulent transactions.
- Legal compliance — fulfilling obligations under applicable law, responding to legal process, and enforcing our Terms of Service.
4 Data Sharing
We do not sell your personal data. We share data only in the following circumstances:
- Service providers — we use trusted third-party vendors (Supabase for database/auth, AWS for hosting/storage, Stripe for payments, Cloudflare for CDN/security, SendGrid for email) who process data on our behalf under strict data processing agreements.
- Artist analytics — if you are a listener, aggregated and anonymized play data may be shared with the artists whose music you stream, as part of their analytics dashboard. This data does not include your name or contact information.
- Public profile data — artist profile information (name, bio, genre, avatar) is publicly accessible on the platform. Listeners may optionally make their display name public.
- Legal requirements — we may disclose data to law enforcement or government bodies if required by applicable law, court order, or to protect the rights and safety of users and the public.
- Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will provide notice before your data is transferred and becomes subject to a different privacy policy.
5 Cookies & Tracking
We use cookies and similar technologies to operate the platform and understand usage. For full details, see our Cookie Policy. In summary:
- Strictly necessary cookies — session tokens, auth state, theme preference. Cannot be disabled.
- Functional cookies — remember your player volume, recently played queue, and UI preferences.
- Analytics cookies — Cloudflare Web Analytics collects anonymized page view and performance data. No cross-site tracking.
We do not use third-party advertising cookies or behavioral ad targeting.
6 Data Retention
We retain your personal data for as long as your account is active or as needed to provide you services. If you delete your account:
- Account data and profile information are deleted within 30 days.
- Audio files you uploaded are removed from active storage within 30 days and from backups within 90 days.
- Anonymized usage and analytics data may be retained indefinitely.
- Financial transaction records are retained for 7 years as required by applicable tax law.
- Support communications are retained for 2 years after your last interaction.
7 Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Deletion — request deletion of your account and personal data.
- Portability — request your data in a machine-readable format.
- Objection — object to processing of your data for certain purposes, including marketing.
- Restriction — request that we restrict processing of your data in certain circumstances.
- Withdraw consent — where processing is based on consent, withdraw that consent at any time.
To exercise any of these rights, contact us at privacy@ookimusic.com. We will respond within 30 days. Users in the EU/EEA and California have additional rights under GDPR and CCPA respectively.
8 Children's Privacy
Ooki Music is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information promptly. If you believe a child has provided us with personal information, contact us at privacy@ookimusic.com.
9 Security
We implement industry-standard security measures to protect your personal data, including:
- TLS/HTTPS encryption for all data in transit
- AES-256 encryption for sensitive data at rest
- Row-level security policies in our database
- OAuth 2.0 and JWT for authentication
- Cloudflare DDoS protection and WAF
- Regular security audits and penetration testing
No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data using commercially reasonable means.
10 Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:
- Company: SPLURJJ, LLC (DBA Ooki Music)
- Email: privacy@ookimusic.com
- General: hello@ookimusic.com
- Website: play.ookimusic.com
We will make reasonable efforts to respond to all privacy-related inquiries within 30 days of receipt.