Privacy

Your email address, which is how you sign in. Anything you put on your profile or in an application. The tracks you upload and the notes you write for reactors. The links reactors submit as deliveries. Records of bookings, payments, refunds, and payouts.

We do not ask for a password, so we never store one. Sign in is a link sent to your email.

Tracks live in private storage. They are not publicly readable and they are not indexed. A reactor can only hear a track after they have been booked on that campaign, through a link that expires within the hour.

We treat unreleased music as the sensitive thing it is. We do not share it, sample it, or use it to train anything.

Stripe processes payments and payouts and receives what it needs to do that. Card numbers go to Stripe directly and never touch our servers. Supabase hosts the database, authentication, and file storage. Resend delivers transactional email. Vercel hosts the site.

We do not sell your data, and we do not run advertising trackers on this site.

A reactor you book sees your track, your campaign notes, and the name on your account. They do not see your email address or your payment details.

An artist who books you sees your public profile: your name, bio, handles, genres, and verified average views. If you decline a booking, they are told you passed. They are never told why, and your decline is not recorded anywhere public.

Booking, payment, and payout records are kept as long as the law requires for financial records. Uploaded tracks are deleted on request once every booking on that campaign has finished.

Ask us for a copy of your data, or ask us to delete your account, at hello@paidreactions.com. Deleting an account does not erase financial records we are required to keep, and it does not retract a reaction already posted to a public platform.