Privacy

Effective date: 2026-10-28 · Last updated: 2026-10-28 Contact: [email protected]

1. Scope

This policy explains what personal data we collect, why, and your rights. It covers revolutionunlocked.com and related services (the "Platform").

The Platform is in an early stage. Today, you can submit your work as a prospective founding creator, sign up for email updates, apply to invest, and create an account (with email or Google sign-in), and we collect analytics about how the site is used, subject to your cookie choices. The streaming, payment and SIREN data categories described below apply as those features are activated.

2. Data we collect

• Account data: name, email, password (hashed) or Google sign-in identity, account tier, role (listener/creator), and basic sign-in activity (when you last signed in and how often).
• Creator data: artist profile, bio, social/streaming profile links, uploaded content and metadata, rights attestations.
• Founding-creator submissions: name, email, artist/project information, links, and the audio/artwork files and metadata you submit through the founding-creator intake, held privately for manual review — not published or streamed.
• Email updates: your email address and your consent to receive updates when you sign up, plus a hashed (not readable) version of your IP address and your browser information, used to prevent abuse.
• Investor applications: the information you give us when you apply to invest — name, email, organization, role, LinkedIn and website, location, relevant experience, check-size range, sector and stage focus, whether you self-certify as an accredited investor, and any notes — plus a hashed IP address and browser information, used to prevent abuse.
• Usage & streaming activity: plays, listens, engagement, device/browser info, IP address, session data. (Per-artist activity is surfaced to the relevant creator; see Transparency below.)
• Payment data: processed by Stripe; we do not store full card numbers.
• AI (SIREN) interactions: prompts and context you provide to SIREN.
• Private preview links: when you open a private preview page we have built for a creator, we record the visit — when, for how long, which of our emails the link came from, your device and browser, country and IP address — and what you do on the page: tracks played, the video watched, links clicked, and your questions to SIREN with its answers. We use this only to follow up with the creator and improve their page. Google Analytics does not run on these pages. IP addresses and SIREN messages are deleted after 14 months.
• Private investor links: when you open a private link to our pitch deck that we have sent you, we record the visit — when, for how long, which link, your device and browser, country and IP address — and which slides you view and whether you download the PDF. If you accept our confidentiality agreement and use our investor portal, we also keep a record of your acceptance (your details, the time and your IP address) and of each document you open or download. We use this to administer and secure access and to follow up with you. Google Analytics does not run on these pages. IP addresses and browser details from deck links are deleted after 14 months; portal and acceptance records are kept for as long as the confidentiality obligations last plus three years, to establish or defend legal claims.
• Cookies: we use strictly necessary cookies to run and secure the Platform, and — depending on where you are and the choice you make in our cookie banner — Google Analytics cookies to understand how the site is used. See our Cookie Policy for details and your choices.

3. How we use data

Provide and operate the Platform; evaluate founding-creator submissions; send the email updates you asked for and confirm your signups and applications; review investor applications; administer and secure access to private investor materials; process subscriptions and payouts; power discovery, quality analysis, and SIREN responses; publish aggregate fairness metrics; secure the Platform and prevent abuse; comply with law. We review submissions and applications in our internal workspace tools, which are listed in the Subprocessor Policy. We do not use unselected founding-creator submissions to train AI or machine-learning models — see the Acceptable Use & Community Guidelines.

4. Legal bases (GDPR/UK GDPR where applicable)

Contract performance (accounts, payments), steps you ask us to take before entering a contract (reviewing submissions and investor applications), legitimate interests (security, abuse prevention, product improvement, fairness metrics, administering private investor access, and establishing or defending legal claims), consent (email updates, non-essential cookies), and legal obligation.

5. Transparency & disclosure

We publish aggregate, non-identifying platform fairness metrics (e.g., discovery distribution). Each creator can see day-to-day activity on their own content (plays, listens, engagement). We do not publicly disclose data that identifies individual listeners.

6. AI / LLM processing

Where an AI feature is available, SIREN may use a third-party provider to generate an advisory response. We send only the context needed for that request, subject to the applicable configuration and agreements. The current provider and processing status are maintained in the versioned Subprocessor Policy; we do not state that a provider, DPA, retention setting or no-training configuration applies unless it is current and verified.

7. Sharing

We share personal data only with the processors and service providers then listed in the versioned Subprocessor Policy, for the purposes described there. We do not sell personal data.

8. Retention

We retain data only for the period needed for the purpose collected, our documented retention schedule, legal obligations, dispute/security needs and the Creator Agreement where applicable. Retention periods by data category are set out in our Data Retention & Deletion Policy.

9. Your rights

You have the right to access, correct, delete, and port your data, to object to processing, and to withdraw consent, subject to jurisdiction. There is no charge for these requests, and we respond within one month of a verified request, or sooner where required by law. You will not receive discriminatory treatment for exercising any of these rights. Contact [email protected].

Because the Platform does not currently require an account for the founding-creator intake, email updates or investor applications, we verify access, correction, and deletion requests by matching the email address you used to our records. We may be unable to verify a request made from a different email address.

Specific mechanisms: stop email updates at any time via the unsubscribe link in any update email (we will still send transactional/account emails); manage push notifications in your device settings; review and edit your profile directly in account settings; request a copy of your data or delete your account by emailing [email protected]. We may be unable to fully delete an account with an unresolved trust, safety, or legal hold, in which case we will explain why.

Do not sell. We do not sell personal information as defined by the CCPA/CPRA or similar US state laws, and we do not exchange personal information for any financial incentive.

10. Third-party links

The Platform may link to third-party websites (for example, an artist's social or streaming profiles). We do not control and are not responsible for the privacy practices of those sites.

11. Security

Encryption in transit, access controls, and infrastructure hardening. We limit the personal data we collect in the first place. Our infrastructure and payment providers maintain their own security programs — see Hetzner's security practices, Cloudflare's security practices, and Stripe's security practices — and are listed with current status in the Subprocessor Policy. No system is perfectly secure.

12. Children

Not directed to children under 13, or under the higher minimum age that applies in the member's country. People under 18 (or the local age of majority) join only with a parent or guardian's agreement, as set out in the Age & Eligibility Policy.

13. Changes

We may update this policy from time to time. We will notify you of material changes, for example with a notice on the Platform or by email where appropriate, and update the "Last updated" date above.