Privacy Policy

1. Information We Collect

Depending on how you use the Service, we may collect:

• Account and identity: name, email, phone, username, country, county, password credentials handled by our authentication provider, profile image, biography, role, verification status, and preferences.
• Purchases and payments: products, beat IDs and titles, licence type, prices, currency, transaction and payment references, invoices, delivery records, refund or chargeback details, and limited payment-provider information. We do not intend to store full card numbers.
• Producer and payout information: beats, cover art, stems, contracts, profile content, subscription plan, sales, commission, bank or mobile-money details, PayPal details, withdrawal records, identity/KYC and tax information where required.
• Bookings and service requests: contact information, selected service, date and time, notes, location, deposit or payment information, rescheduling details, project instructions, and communications.
• Academy records: course, intake, experience level, payment or receipt information, student ID, attendance, timetable, progress, approval status, and student-account setup information.
• Uploaded and public content: audio, stems, archives, artwork, documents, brand assets, project files, public profiles, beats, comments, testimonials, and other content you submit. Do not upload material you are not authorised to share.
• Enquiries and applications: contact messages, partner information, industry, location, investment interests, business goals, web-project requirements, budget, timeline, preferences, and attachments.
• Technical and usage information: IP address, device and browser information, pages and actions, timestamps, referring pages, error logs, approximate IP-based location, and security or fraud signals.
• Cookies and local storage: authentication/session data, preferences, consent choices, and browser data, including the hotcorebeatz_cookie_consent cookie. Third-party SDK or advertising cookies may be used when enabled.

2. How We Use Information

• Provide accounts, authentication, password recovery, role access, support, and security.
• Process orders, subscriptions, bookings, academy enrolments, sponsorships, HWS projects, payouts, refunds, and delivery.
• Host, review, moderate, publish, back up, and deliver producer content, public profiles, beats, artwork, and service files as instructed.
• Send verification, receipts, booking updates, delivery links, academy notices, payout notices, support responses, and other transactional messages.
• Send marketing communications where permitted and, where required, with consent. You can unsubscribe from marketing messages.
• Prevent fraud, abuse, infringement, unauthorised access, chargebacks, and unlawful activity; enforce our Terms; and protect people, systems, and property.
• Improve products, troubleshoot errors, measure performance, understand use, and meet accounting, tax, KYC, payment-network, legal, regulatory, and dispute obligations.

3. Legal Bases and Choices

Where data-protection law requires a legal basis, we rely on contract performance or pre-contract steps, legitimate interests such as security and service improvement, legal obligations, and consent where required. You may withdraw consent for future use, refuse optional cookies, or opt out of marketing. Some information is necessary for an account, purchase, payout, booking, course, or project.

4. When We Share Information

We do not sell personal information as a standalone data product. We may disclose information to:

• Supabase: authentication, database, account, marketplace, academy, booking, finance, and application records.
• Cloudflare R2 and Bunny CDN: storage, delivery, uploads, previews, audio, artwork, documents, and project files.
• Brevo: account, delivery, booking, academy, service, verification, and transactional email.
• Paystack, PayPal, M-Pesa/Daraja, banks, and payment providers: payment identity, amount, currency, transaction metadata, verification, settlement, and fraud prevention.
• Advisers and authorities: legal, accounting, audit, tax, law enforcement, regulators, courts, or dispute and business-transfer parties where permitted or required.
• Public visitors: only profile, beat, artwork, biography, recognition, or other content you choose to make public.

Providers process information under their own terms and privacy policies. We may also disclose information to a successor in a merger, acquisition, restructuring, or sale of assets.

5. International Transfers

Our providers and infrastructure may process information in Kenya, the United States, Europe, or other countries where they operate. Those countries may have different rules. We use lawful safeguards required by applicable law and limit access to people and providers who need it.

6. Public Content and Communications

Producer pages, public beats, artist features, testimonials, sponsorship recognition, blog interactions, and other published content may be visible to anyone and copied or indexed by search engines. Do not include private or confidential information in public fields.

7. Cookies, Analytics, and Advertising

We use necessary storage and cookies for sessions, security, preferences, and consent. Optional analytics, advertising, or embedded technologies may be used only as configured and permitted by applicable law. Disabling necessary storage may prevent sign-in, checkout, or other features.

8. Retention and Deletion

We retain information only as reasonably necessary for service delivery, security, disputes, backups, tax and accounting records, payment rules, KYC obligations, and legal claims. Working audio and project files may be deleted after delivery or the agreed support period; public content may remain in backups or historical records for a reasonable period. The business should add a documented retention schedule and exact deletion periods before final publication.

Request account closure or deletion at support@hotcorebeatz.com. Deletion may not remove information we must retain, information made public by you, provider records, or material needed for legal claims.

9. Security

We use reasonable administrative, technical, and organisational safeguards, including access controls, authentication protections, and restricted server-side credentials. No system is guaranteed secure. Never send passwords, secret keys, or full payment-card details by email.

10. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of information; withdraw consent; opt out of marketing; and complain to a data-protection authority. We may verify identity and apply lawful exemptions.

Contact: support@hotcorebeatz.com. The responsible legal entity, privacy address, and supervisory authority for the primary jurisdiction must be completed before final publication.

11. Children and Third-Party Links

The Service is not directed to children who cannot lawfully consent. We do not knowingly collect children's information without appropriate consent. Linked payment providers, social networks, HWS, CDNs, and other third parties have their own policies.

12. Changes and Contact

We may update this Policy by posting the new version and date. For material changes, we may use reasonable additional notice.