Privacy Policy

Metadata Style Guidelines ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our metadata compliance platform ("the Service").

This policy applies to all users of the Service. By using the Service, you consent to the practices described in this policy.

We collect the following categories of information:

• Account information: Your name, email address, organization, and role when you register or are invited to the platform.
• Metadata files: Audio, CSV, DDEX, JSON, and other metadata files you submit for validation and certification.
• Usage data: Information about how you interact with the Service, including validation runs, features used, timestamps, and log data.
• Technical data: IP address, browser type, device information, and operating system, collected automatically when you access the Service.

We use your information to:

• Provide, operate, and maintain the Service, including processing and validating your metadata.
• Authenticate your identity and manage your account and access permissions.
• Generate compliance reports, certifications, and export packages.
• Monitor for abuse, fraud, and security threats.
• Analyze usage patterns to improve the Service and develop new features.
• Communicate with you about updates, security alerts, and support matters.
• Comply with legal obligations and enforce our Terms of Service.

Your metadata and account data are processed on our infrastructure to perform validation and generate compliance outputs. Validation results and certification records may be retained to provide you with historical reports and audit trails.

We retain your data for as long as your account is active or as necessary to provide the Service. After account termination, we may retain certain data for a limited period to comply with legal obligations, resolve disputes, and enforce our agreements, after which it is deleted or anonymized.

We do not sell your data. We may share your information in the following circumstances:

• Service providers: Third-party vendors who assist us in hosting, analytics, and infrastructure, under contractual obligations to protect your data.
• Legal compliance: When required by law, court order, or government authority, or to protect our rights and safety.
• Business transfers: In connection with a merger, acquisition, or asset sale, subject to confidentiality obligations.
• With your consent: When you explicitly authorize us to share specific information.

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit, access controls, and regular security assessments. However, no system is completely secure, and we cannot guarantee absolute protection against unauthorized access.

In the event of a data breach, we will notify affected users and relevant authorities in accordance with applicable law.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to legal retention requirements.
• Object to or restrict certain processing of your data.
• Request a portable copy of your data in a structured, machine-readable format.
• Withdraw consent for processing that relies on your consent.

To exercise any of these rights, contact us through the support channels available on our website. We will respond to your request within the timeframe required by applicable law.

The Service uses essential cookies and similar technologies to maintain your session, authenticate your identity, and remember preferences. We may also use analytics tools to understand how the Service is used.

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

Your data may be processed and stored in countries other than your own, including countries with different data protection laws. We take appropriate measures to ensure your data is protected in accordance with this Privacy Policy and applicable law when transferred internationally.

The Service is not directed to individuals under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. For material changes, we may also provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us through the support channels available on our website.