Privacy Policy

CoSound (“we,” “us,” or “our”) operates the CoSound platform, a creator campaign platform that connects content creators with music promotion campaigns. Creators participate in campaigns by publishing content using tracks from the licensed audio libraries of platforms such as YouTube, Meta, and TikTok, and earn compensation based on campaign performance metrics. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

Account information

When you sign up, we collect:

• Name and email address
• Password (stored as a secure hash — we never store your plaintext password)
• If you sign in with Google: your Google account name, email, and profile picture, via Google OAuth

Profile and payout information

To process earnings, we may collect:

• Your YouTube channel ID or handle (for view-count verification)
• Payout account details (e.g., bank account or payment provider information) when you set up payouts
• Tax identification information where legally required

Content you submit

• Creators: video URLs (YouTube, TikTok, Instagram/Meta) you submit for campaign performance attribution. CoSound does not host or store video files — only the submitted URL and associated performance data.
• Producers / Campaign Managers: campaign details including track references, target platforms, and target eCPM values you configure when setting up campaigns.

Usage and platform data

• IP address, browser type, and device information when you access the Service.
• Pages visited and actions taken within the dashboard (for debugging and abuse prevention).
• YouTube view count data fetched via the YouTube Data API for your submitted videos, synced daily.

Waitlist information

If you join our waitlist, we collect your email address and any optional information you provide (such as your platform handle or follower count).

• To operate the Service: authenticate your account, display your dashboard, and enable track uploads and video submissions.
• To calculate and process earnings: verify performance metrics (views, impressions) for your submitted video links against campaign targets, and compute your earnings based on the campaign's target eCPM.
• To process payouts: deliver your earnings to your designated payout account.
• To communicate with you: send account-related emails (magic links, password resets, payout notifications, and material policy updates). We do not send marketing emails without your consent.
• To prevent fraud and abuse: detect and investigate suspicious activity such as artificially inflated view counts.
• To improve the Service: understand how the platform is used in aggregate to make product decisions.

We do not sell your personal information. We share data only as follows:

• Service providers: we use third-party services to run CoSound, including:
  • Supabase (PostgreSQL database and file storage)
  • Vercel (hosting and serverless functions)
  • Google (OAuth authentication and YouTube Data API for view-count verification)
  • Meta and TikTok APIs (for performance data verification on those platforms)
• Legal requirements: if required by law, court order, or to protect the rights and safety of CoSound or others.
• Business transfers: if CoSound is acquired or merged, your data may be transferred as part of that transaction. We will notify you beforehand.

We retain your account data for as long as your account is active. If you close your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal or financial compliance (e.g., payout records).

Campaign configuration data is retained for the duration of the campaign and for a reasonable period afterward for audit and dispute-resolution purposes. Video submission URLs and associated performance data are retained for the duration of the associated earnings record.

CoSound uses session cookies to keep you logged in. We do not use third-party advertising cookies or cross-site tracking. We do not use Google Analytics or similar analytics services that share your data with third parties.

The only third-party cookie present may be from Google if you use Google sign-in.

We use industry-standard measures to protect your data: HTTPS for all connections, hashed passwords, and access controls that limit which employees can access personal data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data (most data can be updated in your account settings).
• Delete your account and personal data.
• Export a copy of your data in a portable format.
• Withdraw consent for optional data uses (such as waitlist emails).

To exercise these rights, email us at privacy@cosound.net. We will respond within 30 days.

CoSound is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal data, contact us and we will delete it promptly.

The Service integrates with third-party platforms including YouTube, TikTok, and Meta (Instagram/Facebook). This Privacy Policy does not apply to those platforms. Music used in creator campaigns is sourced from those platforms' official licensed audio libraries — CoSound has no control over the licensing terms or availability of tracks on those platforms. We encourage you to review the privacy policies and terms of service of each platform before connecting your accounts.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a notice in the dashboard. Continued use of the Service after the updated policy takes effect constitutes acceptance of the changes.

For privacy-related questions or requests, contact us at privacy@cosound.net.