Privacy Policy

Information the service uses

Account authentication uses your email, password credentials, verification/session information, and account metadata. Profiles can contain a display name, username, avatar, backdrop, bio, location, creator roles, and social links. The app also stores uploaded content, credits, follows, likes, Library and playlist relationships, messages, room membership, presence timestamps, activity, and upload-rights confirmations.

Purchase records include account identifiers, order/payment identifiers, beat and producer details, amount, selected license, accepted license information, and payment status. Email-only Media submissions collect the details described in the separate Media privacy notice. Support messages contain whatever you choose to send.

Playback and view systems use account-derived hashes or a browser/device identifier for counting and duplicate prevention. Browser storage holds authentication/session information and preferences such as chat sounds, unread badges, and player behavior. This page does not describe messages as end-to-end encrypted.

Public and restricted information

Public profiles, published songs and artwork, public playlists, published Spotlight posts, editorial media, and beat previews are available to visitors. Public files can be copied by recipients. Private Library entries and private playlists have owner access controls. DMs and DM images use participant access controls; room visibility depends on the room’s access settings. Online indicators are shown to signed-in community members.

Protected beat delivery files are held separately from public previews and delivered only after authenticated purchase checks. Temporary signed media URLs are bearer links: someone who receives an unexpired link may be able to use it until it expires. Hiding a link does not prevent a recipient from copying it.

Services and data use

Supabase provides account authentication, database records, and uploaded-file storage. Cloudflare hosts the app and stores marketplace/poster records and private beat-delivery files. Stripe is integrated for sandbox checkout and producer connection records; the code also contains cryptocurrency checkout integration. This notice does not claim that real-money payments or every integration is currently enabled.

YouTube embeds and external social links can send requests to those third-party services when you view or follow them. Google Analytics loads when a measurement ID is configured; app events can include page, playback, upload, and purchase-related information. The separate third-party services govern the information they receive under their own policies.

Account and content data support sign-in, displaying and delivering content, social interactions, credits, purchase fulfillment, moderation, support, and service operation. Advertising and analytics uses, potential disclosures, and applicable choices are described below.

Your choices and deletion

Settings lets you edit supported account/profile details, change creator preferences, manage blocked users, change supported notification preferences, sign out, and confirm account deletion. Library and playlist controls let you remove your own saved relationships without deleting another creator’s music.

Completed account deletion removes the Auth account, its profile and roles, owned public creator content, Library/playlists, follows/likes, presence and linked activity, and the user’s own message content. Other participants’ messages and shared rooms remain. Linked credits on other people’s work are changed to Deleted user. Unreferenced owned files are removed using the storage services; shared files are preserved.

Transaction records and protected files needed for legitimate buyer delivery remain. Rights attestations and moderation evidence can remain with account links removed. Editorial posts and posters are preserved when the deleting user only acted as their admin. Account-derived listening hashes are removed or replaced while aggregate counts can remain. Email-only Media submissions have no verified account link and require a separate support request.

If deletion cannot finish, the service reports an incomplete result and keeps a restricted retry manifest. It does not claim completion while file or Auth cleanup is still failing. Protected release-commerce/shared-ownership cases require support review. Previously downloaded copies, externally hosted content, email correspondence, and provider backups are not claimed to disappear immediately.

Retention

We retain information only for as long as reasonably necessary for account operation, security, transactions, legal obligations, fraud prevention, dispute resolution, enforcement, and other legitimate purposes permitted by applicable law. Different categories of information may be retained for different periods.

Account deletion may not remove records that must be preserved for transactions, license history, legal obligations, rights ownership, fraud or security, disputes, or moderation and enforcement evidence. Retention also depends on the category of information and applicable provider systems; no fixed deletion or retention period is promised here.

Worldwide users and privacy rights

BigBankApp may be used by people in different countries. Information may be processed or stored outside your own country, including through the service providers described above. Privacy rights and legal protections vary by jurisdiction.

Depending on applicable law, you may have rights to access, correct, delete, object to processing, restrict processing, or exercise other privacy rights. Send requests to bbsmediallc@gmail.com with enough information to identify your request, without sending passwords or payment credentials. We will respond to valid privacy requests as required by applicable law and may need to verify identity before disclosing or changing account information.

Advertising, analytics, and tracking

Where applicable and permitted by law, BigBankApp may use personal information for advertising and analytics and may share certain information with advertising, analytics, measurement, or related service partners. Depending on the activity and configuration, information may include public profile details, pages or content viewed, playback and engagement events, purchase-related events, and browser, device, or online identifiers. This does not mean that private messages or every category of account information is disclosed for advertising.

The implementation includes optional Google Analytics for page and event measurement when a measurement ID is configured. Analytics or advertising integrations may use cookies, browser storage, pixels, or similar tracking technologies where enabled. Necessary account/session storage and preferences are described above. This notice does not assert that an advertising network or optional tracking integration is currently enabled simply because the app supports it.

Some privacy laws may classify advertising-related disclosures as a “sale” or “sharing,” even without a payment for the information. This policy does not claim that BigBankApp sells personal information for money or that every disclosure falls outside those legal definitions. Depending on applicable law, you may have rights to opt out of targeted advertising or qualifying sale/sharing, or to withhold or withdraw consent. Contact bbsmediallc@gmail.com to exercise applicable rights. Browser settings may limit cookies, but are not a substitute for a legally required opt-out process.

OWNER / LEGAL REVIEW REQUIRED

The actual advertising partners and configuration, category-level disclosures, minor-specific requirements, consent and cookie controls, applicable opt-out preference signals, and international-transfer safeguards require implementation and legal verification. An automated consent or opt-out system and blanket compliance with every country’s privacy laws are not claimed by this policy. This text does not enable new advertising or tracking.