Privacy Policy

1. Who We Are

OpeningSong is a music fan engagement platform operated from Geneva, Switzerland. We are committed to protecting your privacy and being transparent about how we collect and use your data.

For privacy inquiries, contact us at hello@openingsong.com

2. Information We Collect

Account Information

When you create an account, we collect your email address, username, and password (stored encrypted). If you sign up via Google, we receive your name and email from Google.

Streaming Data

When you connect Last.fm, Apple Music, or SoundCloud, we access your full listening history to provide streaming stats, personalized artist recommendations, and calculate credits for artists on our platform. This includes track names, artist names, play counts, and timestamps. We do not access private playlists or other non-streaming data from these accounts.

Location Data

When you use the concert check-in feature, we collect your GPS coordinates to verify your presence at a venue. Location data is only collected when you actively tap "Check In" — we never track your location in the background. We store the coordinates and accuracy of each check-in for verification and fraud prevention.

Social Media Data

If you connect Instagram or TikTok for social engagement credits, we access your public profile information and posts related to artists on our platform. We do not access private messages or non-public content.

Usage Data

We collect information about how you use the platform, including pages visited, features used, posts and comments made, and credits earned. We also collect device information (browser type, operating system) and IP addresses for security and analytics.

Merch Purchase Data

When you scan a merch table QR code, the artist or their staff enters the purchase amount. We store the amount, the credits awarded, and which concert/artist it was associated with. We do not process payments or store payment card information.

3. How We Use Your Information

We use your information to:

Provide and maintain the platform; calculate and award credits based on your engagement; verify concert attendance and merch purchases; display your profile, badges, and leaderboard position to other users; send you notifications about your account, credits, and rewards; send email digests summarizing your activity (if enabled); improve the platform and develop new features; detect and prevent fraud or manipulation; and comply with legal obligations.

4. Legal Basis for Processing (GDPR)

Under the EU General Data Protection Regulation and Swiss Federal Act on Data Protection, we process your data based on:

Contract: Processing necessary to provide you with the platform services you signed up for (account management, credit calculation, rewards).

Consent: For optional features like location-based check-ins, connecting streaming accounts, and email digest notifications. You can withdraw consent at any time through your Settings.

Legitimate Interest: For platform security, fraud prevention, and service improvement.

5. Data Sharing

We do not sell your personal information. We share data only in these limited circumstances:

With Artists: Artists can see aggregated engagement data, leaderboard positions, and public profile information for members of their space. Artists cannot see your email, password, or data from other artist spaces.

With Other Users: Your username, profile image, badges, posts, and comments are visible to other users within artist spaces you join. Your leaderboard position and credit totals may be visible to other members.

Service Providers: We use Vercel (hosting), Railway (database), Cloudinary (image hosting), and Resend (email delivery). These providers process data on our behalf under data processing agreements.

Legal Requirements: We may disclose data if required by law or to protect the rights, safety, or property of OpeningSong, our users, or the public.

6. Cookies and Similar Technologies

We use cookies for:

Essential Cookies: Required for authentication (keeping you logged in) and basic platform functionality. These cannot be disabled.

Preference Cookies: Remember your settings like dark mode and notification preferences.

Analytics Cookies: Help us understand how users interact with the platform so we can improve it. These can be declined via our cookie banner.

We do not use advertising or tracking cookies. We do not share cookie data with third-party advertisers.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it.

Streaming sync data is retained for credit calculation purposes. Concert check-in location data is retained for fraud prevention. Anonymized, aggregated data may be retained indefinitely for analytics.

8. Your Rights

Under GDPR and Swiss data protection law, you have the right to:

Access: Request a copy of the personal data we hold about you.

Rectification: Request correction of inaccurate data.

Erasure: Request deletion of your personal data ("right to be forgotten").

Portability: Request your data in a structured, machine-readable format.

Restriction: Request that we limit processing of your data.

Objection: Object to processing based on legitimate interest.

Withdraw Consent: Disconnect third-party accounts or disable features at any time through your Settings page.

To exercise any of these rights, contact us at hello@openingsong.com. We will respond within 30 days.

9. International Data Transfers

Our servers are hosted by Vercel and Railway, which may process data in the United States and other countries. We ensure appropriate safeguards are in place for international data transfers in compliance with GDPR and Swiss data protection requirements.

10. Children's Privacy

OpeningSong is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "last updated" date at the top of this page indicates when the policy was last revised.

12. Contact & Supervisory Authority

For privacy questions or to exercise your rights, contact us at hello@openingsong.com

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local data protection authority.