Privacy Policy

Effective September 19, 2026. Last updated September 19, 2026.

This Privacy Policy explains how SoundSwift collects, uses, shares, and protects personal information across SwiftGen AI, Studio, SwiftMedia, Aura, Tours and Events, Connect, the Band and Crew Layer, Aphelion, Arc, and SwiftTickets.

Information We Collect

  • Account information: name, username, email, password hashes, profile, roles, and preferences.
  • Uploaded media: tracks, stems, videos, images, documents, and metadata you provide.
  • AI-generated content: prompts, parameters, outputs, and job logs from SwiftGen AI, Studio assistance, and related tools.
  • Aura data: rosters, tasks, notes, permissions, finance snapshots, and workspace files.
  • Tour logistics: itineraries, venues, travel, hospitality, and day-sheet details.
  • Event details: titles, dates, locations, capacity, and ticketing configuration in Aphelion and SwiftTickets.
  • Social media tokens: OAuth access and refresh tokens, page or account IDs, and publish receipts for SwiftMedia.
  • Payment information: billing name, last-four, tokenized card or wallet references, invoices, and payout details. Full card numbers are handled by payment processors and are not stored by SoundSwift as raw PAN data.
  • Device and usage information: IP address, browser, app version, cookies, approximate location, crash logs, and feature analytics.
  • Connect data: display name, room IDs, device labels, and optional recordings if enabled.
  • Arc data: uploaded videos, titles, comments, watch history needed to operate the player, and channel settings.

How We Use Information

  • Operate, host, and secure the platform and each app.
  • Process generations, mixes, campaigns, rooms, tickets, and payouts.
  • Provide and improve features, recommendations, and search.
  • Prevent fraud, abuse, copyright evasion, and security incidents.
  • Fulfill ticketing, refunds, and tax or accounting records for Aphelion and SwiftTickets.
  • Run SwiftMedia campaigns you authorize, including posting to connected social accounts.
  • Train or evaluate AI systems only where SoundSwift discloses that use and you have not opted out of an available opt-out, and never by selling your private catalogs to unrelated advertisers.
  • Communicate service, security, and, with consent or as allowed, product messages.

How We Share Information

SoundSwift does not sell personal information. SoundSwift shares data with:

  • Payment processors, to charge, refund, and pay out.
  • Social media APIs when you connect SwiftMedia, including tokens and the posts you authorize.
  • AI providers such as OpenAI, Azure, and similar model hosts, to process prompts, embeddings, and generations you request.
  • Infrastructure and security vendors, including hosting, storage, email, CDN, and monitoring, under contract.
  • Other users when you make content, events, or rooms public or invite them.
  • Legal authorities when required by law or to protect rights, safety, and the Services.

How Specific SoundSwift Data Is Stored and Protected

  • Stems, tracks, and mixes are stored on access-controlled object storage or servers associated with your account or workspace. Playback and download follow the permissions you or your manager set.
  • AI outputs are stored with the generating account so you can replay, download, or delete them, subject to backup retention.
  • Tour logistics and event data are limited to members of the relevant Aura, Tours and Events, or Band and Crew workspace. Role-based access is applied so crew and coordinators see only what their role allows.
  • Social media tokens are stored encrypted at rest, transmitted over TLS, and used only to perform actions you authorize. You may disconnect a network at any time. SoundSwift then revokes or deletes the token when the provider allows.
  • Aphelion and SwiftTickets keep order and attendee records as required for fulfillment, refunds, and financial law.
  • Arc videos and comments follow the visibility you set on the video or channel.

User Rights

Subject to law, including GDPR, UK GDPR, and CCPA/CPRA where applicable, you may request:

  • Access to personal information SoundSwift holds about you.
  • Correction of inaccurate data.
  • Deletion of your account or specific content, subject to legal holds, ticket records, and shared-event obligations.
  • Export of a portable copy of core account and content metadata where technically feasible.

Submit requests through www.soundswift.com/contact or in-product settings. SoundSwift may need to verify your identity. Authorized agents may submit CCPA requests with proof of authorization.

Security Measures

  • Encryption in transit (TLS) and encryption at rest for sensitive stores where implemented.
  • Access controls, least-privilege staff access, and role-based workspace permissions.
  • Audit logs for administrative and, where enabled, workspace actions.
  • Credential hashing, session controls, and monitoring for abuse.

No method of transmission or storage is 100 percent secure. You are responsible for device security and for not sharing passwords or raw social tokens.

Children’s Privacy

The Services are not directed to children under 13, and SoundSwift does not knowingly collect personal information from children under 13 (COPPA). If you believe such information has been collected, contact SoundSwift and it will be deleted. Users must meet the age of digital consent in their jurisdiction, often 16 in parts of the EEA, or use the Services only with a parent or guardian as required by law.

Data Retention

SoundSwift retains account and media data while your account is active and for a reasonable period afterward for backups, disputes, fraud prevention, tax, and legal compliance. Ticket and payment records are kept as required by financial law. You may delete individual tracks, campaigns, videos, or rooms when the product provides a delete control. Residual copies may persist in backups for a limited window.

No Sale of User Data

SoundSwift does not sell personal information as “sale” is defined under the CCPA. SoundSwift does not share personal information for cross-context behavioral advertising except as you authorize through connected ad or social tools. You may send a do-not-sell-or-share request through Contact.

SoundSwift may process data in the United States and other countries. Where required, appropriate transfer mechanisms are used for EEA and UK data.

Privacy questions: www.soundswift.com/contact or privacy@soundswift.com.