Privacy Policy

1. Who we are

Promo-Chats is a music promo servicing platform operated under Spanish and European law. The Platform provides technology tools that enable music industry professionals ("Clients") to distribute promotional content to curators, DJs, journalists, and other industry contacts ("Recipients").

2. Roles and Responsibilities under GDPR

Under the General Data Protection Regulation (EU 2016/679), Clients who upload contact data and send campaigns act as independent Data Controllers. Promo-Chats acts as a Data Processor, processing personal data exclusively on behalf of and under the instructions of the Client. Promo-Chats does not determine the purposes or means of processing Recipient data — this responsibility lies solely with the Client. Each Client is independently responsible for ensuring they have a lawful basis (such as explicit consent) to process and contact their Recipients through the Platform.

3. What data we collect

For Clients: name, company name, email address, payment information, and SMTP/channel connection credentials. For Recipients/Curators: name, email address, social media handles (WhatsApp, Instagram, Facebook, TikTok, X/Twitter, Telegram), professional role, venue, city, country, genre preferences, and channel preferences. Automatically collected: IP addresses when interacting with promo pages, consent links, or unsubscribe links; engagement data (opens, feedback); timestamps of all interactions.

4. Legal basis for processing

Client data: processed on the basis of contractual necessity (provision of the Service) and legitimate interest (platform operation and security). Recipient data uploaded by Clients: processed on the basis of the Client's lawful basis, which is the Client's sole responsibility to establish and maintain. Recipients who self-register at /join provide explicit consent. Platform operation data: processed on the basis of legitimate interest (security, fraud prevention, service improvement).

5. How we use your data

Client contact details and campaigns are used to deliver the promotional services requested. Recipient data is used exclusively to deliver promotional content on behalf of Clients, through the channels authorized by each Recipient. We do not sell, rent, or share personal data with third parties for marketing purposes. We do not engage in automated profiling or decision-making.

6. Data sharing and third-party services

The Platform transmits messages through third-party services including WhatsApp (Meta), Instagram (Meta), Facebook (Meta), TikTok (ByteDance), X/Twitter, Telegram, and email (via SMTP). Each transmission is subject to the privacy policy and terms of the respective service. Promo-Chats does not control how these third parties process data once delivered. Payment processing is handled by Stripe, Inc., subject to Stripe's privacy policy.

6b. Sub-processors

In accordance with GDPR Article 28, the following sub-processors may process personal data on behalf of Promo-Chats: • Stripe, Inc. (USA, EU SCCs) — Payment processing. Data: billing name, email, payment card (tokenized). • Banahosting / Datacenter Europe (Spain/EU) — Server hosting and data storage. Data: all platform data. • Anthropic, PBC (USA, EU SCCs) — AI Profile Finder feature. Data: contact names and publicly available information only, no private data. • Meta Platforms, Inc. (USA, EU SCCs) — WhatsApp, Instagram, Facebook message delivery. Data: recipient handles and message content. • ByteDance Ltd. (Singapore/China, EU SCCs) — TikTok message delivery. Data: recipient handles and message content. • X Corp. (USA) — X/Twitter message delivery. Data: recipient handles and message content. • Telegram FZ-LLC (UAE) — Telegram message delivery. Data: recipient handles and message content. We will notify Clients of any changes to sub-processors at least 30 days in advance via email. Clients may object to new sub-processors, in which case they may terminate their account.

7. Data retention

Client account data: retained for the duration of the account plus 12 months after deletion. Recipient data: retained for as long as the Client maintains an active account, or until the Recipient requests deletion, whichever comes first. Campaign logs and engagement data: retained for 24 months from the date of creation. Backups: automatically purged within 30 days of the primary data deletion.

8. Data security

We implement appropriate technical and organizational measures to protect personal data, including: encrypted data transmission (TLS/SSL), hashed password storage (bcrypt), session-based authentication with secure cookies, access controls and role-based permissions, and regular security reviews. Despite these measures, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your rights (GDPR)

Under the GDPR, you have the right to: • Access: request a copy of the personal data we hold about you. • Rectification: request correction of inaccurate or incomplete data. • Erasure: request deletion of your personal data ("right to be forgotten"). • Restriction: request that we restrict processing of your data. • Portability: receive your data in a structured, commonly used, machine-readable format. • Objection: object to processing based on legitimate interest. • Withdraw consent: withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. To exercise any of these rights, contact us at privacy@promo-chats.com. We will respond within 30 days.

10. Unsubscribe and data deletion

Every promotional email contains an unsubscribe link that immediately removes you from all mailing lists. To request complete deletion of all your data from the Platform, email privacy@promo-chats.com or use the GDPR deletion feature in your account settings. Upon request, we will delete all personal data within 30 days and confirm deletion in writing.

11. Cookies

We use strictly necessary cookies for authentication and session management. We do not use tracking, analytics, or advertising cookies. No cookie consent banner is required as we only use essential cookies exempt under the ePrivacy Directive.

12. Data breach notification

In compliance with GDPR Articles 33 and 34, in the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, Promo-Chats will: • Notify the Spanish Data Protection Agency (AEPD) within 72 hours of becoming aware of the breach. • Notify affected Data Controllers (Clients) without undue delay, providing: the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures taken or proposed to address the breach. • Notify affected individuals directly if the breach is likely to result in a high risk to their rights and freedoms. To report a suspected data breach or security incident, contact: security@promo-chats.com

13. International data transfers

Data is primarily stored and processed within the European Economic Area (EEA). Where data is transferred outside the EEA (for example, through third-party messaging services), such transfers rely on appropriate safeguards including Standard Contractual Clauses (SCCs) or the service provider's adequacy decision.

14. Children's privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor, we will delete it promptly.

15. Disclaimer of liability for user-uploaded data

Promo-Chats provides technology tools and does not control, verify, or assume responsibility for the personal data uploaded by Clients or the communications they send. Clients are solely responsible for the lawfulness, accuracy, and appropriateness of the data they upload and the messages they distribute. Promo-Chats shall not be held liable for any damages, claims, or regulatory action arising from a Client's misuse of the Platform or unlawful processing of personal data.

16. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

17. Contact

For any privacy-related inquiries or to exercise your data protection rights: Email: privacy@promo-chats.com You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority.

© 2026 Promo-Chats. All rights reserved.