1. Who is responsible
During the current Beta, Kinchord is operated by Srdjan Milivojevic in Serbia, who determines why and how Beta interest and onboarding information is processed. Questions or privacy requests can be sent to founders@kinchord.com. The responsible legal entity and registered business details will be confirmed in an updated notice before paid services begin.
2. What we collect
When you create or access a listener account, we collect your verified email address, the authentication identifier supplied by our identity provider, account status and security-session records. Listening access may also be connected to that account so the three-play allowance and later membership rights work across devices. When you submit the interest form, we collect the path you selected (artist or listener), your name, email address, city and country, music scene and selected subgenres. Direct artist and label applications include the artist or trading name, applicant or legal entity name, country, representative role, musical categories, optional artist and store links, and preliminary recording-rights authority. Label applicants also provide a business contact, company details where supplied, catalog estimates, operating territories and intended music delivery method, including an optional distributor name. We keep saved drafts, submission and review status, requests for information, internal review history, and the document version, time and context of application terms acceptance. These declarations do not establish a music license or authorize publication.
3. Why we use it
We use this information only to receive and review applications and Beta interest, assess declared identity and authority, administer approved account access, understand the initial artist and listener cohort, prevent duplicate or abusive submissions, contact people about controlled access and onboarding, and improve the Beta experience. Submitting the form does not subscribe you to a general marketing newsletter.
4. Permission and withdrawal
The form asks for your affirmative agreement before submission. You may withdraw that permission or ask us to stop contacting you at any time by emailing us. Withdrawal does not affect processing already performed before your request.
5. Retention
We plan to delete or anonymize Beta interest submissions within 12 months of submission unless you enter controlled onboarding, ask us to delete the information sooner, or limited retention is necessary for security or legal obligations. Listener sign-in sessions expire after 30 days and can be ended earlier by signing out; account records remain while the account is active or as required for security, rights and legal obligations. Participants will receive any additional notice required for features that process new categories of information.
6. Service providers and transfers
Website hosting, database infrastructure, authentication and email providers may process limited information on our behalf to operate the Beta and respond to you. Supabase provides email identity verification, and Resend delivers the one-time sign-in code. We do not sell application data or use it for third-party advertising. Some providers may process information outside Serbia or your country; before paid services begin we will publish the relevant provider categories and transfer safeguards in more detail.
7. Cookies and analytics
Kinchord uses limited first-party analytics to understand visits, sign-in and membership-page openings, Artist and Label application openings, and which outreach link or referring website brought visitors to Kinchord. The current reporting period begins on October 12, 2026; earlier invitation and Artist Tour activity remains in a separate historical view within the existing retention period. Aggregate successful sign-ins, completed listening and application submission or approval counts use existing account, playback and application records. We record the page path, date and time, an optional referral code, limited funnel events, the referring domain, broad device category and country. A temporary random session identifier and any referral code are kept in session storage for the current browser tab so page views and the anonymous path through the invitation and tour can be counted together; closing the tab clears that session. We also record whether the session included a pointer, keyboard or scroll interaction to help distinguish an opened page from an engaged session, but this does not prove a visitor is human. Visitors are not assigned analytics cookies, and the system does not use local storage for analytics, store raw IP addresses, install advertising pixels or create advertising profiles. A verified listener receives a separate secure, first-party authentication cookie so the account remains signed in; its raw token is not stored in Kinchord's database. The Kinchord owner may set a first-party preference cookie on the owner's own browser solely to exclude future internal visits from analytics. Analytics events are retained for up to 90 days and then deleted. Counts remain approximate because opening a new tab or returning after closing a tab begins a new analytics session.
8. Your choices and rights
You may ask whether we hold your information and request access, correction or deletion, or object to or restrict certain processing where applicable. You may also raise a concern with the relevant data-protection authority. Contact founders@kinchord.com and we will verify and respond to the request.
9. Security and age
We use access controls and service-level safeguards intended to protect submissions, but no online system can promise absolute security. Beta participation is intended for people aged 18 or older, and we do not knowingly seek information from children.
10. Updates
This notice covers the current public website, verified listener accounts, first-party funnel analytics and Beta interest/onboarding forms. It will be expanded before music uploads, detailed listening analytics, payments or subscriptions become active.