Privacy Policy

1. Data We Collect

We collect the following types of information:

Personal Information

• Name and email address (via Clerk authentication)
• Payment information (processed by Stripe — we do not store card details)
• Profile information you provide

Usage Data

• Pages visited, features used, and actions taken within the Service
• Device and browser information
• IP address

Third-Party Data

• Spotify artist data (public artist profiles, listener counts, genres)
• Email content (when you connect your Gmail account for email sync)
• Calendar events (when you connect Calendly integration)
• Form responses (when you connect Typeform integration)
• Analytics data (when you connect Fathom integration)

2. How We Use Your Data

• Service operation: To provide, maintain, and improve the Service
• Communications: To send transactional emails, notifications, and updates
• Analytics: To understand usage patterns and improve the user experience
• Security: To detect and prevent fraud, abuse, and security issues
• Legal compliance: To comply with applicable laws and regulations

3. Platform Administration & Data Access

dark label. (operated by Dark Label Music) uses role-based access control to manage the platform. Designated administrators have access to user data as described below. This access is necessary for platform operation, user support, coaching, and business analytics.

To help us coach and support you, Dark Label's owner and admins can view your account read-only. They can't change anything or send anything as you, and every view is logged.

Administrator Roles

• Owner: The primary platform administrator with full access to all user data and platform settings, including the ability to assign roles to other users.
• Admin: Can view all user data and manage user access (approve or revoke accounts). Cannot change user roles.
• Moderator: Can view user data, platform usage metrics, pipeline insights, and audit logs. Cannot manage user access or change roles.

Data Accessible to Administrators

Administrators (Owner, Admin, and Moderator roles) may view:

• Your profile information (name, email, account status)
• Pipeline entries, stages, and CRM activity
• Projects and their current status
• Invoices and payment history
• Email communications synced through the platform
• Calendar events and scheduling data (events from Google Calendar show only their times; see section 5)
• Connected integration data (Calendly, Typeform, Fathom)
• Discovery sessions and scoring results
• Outreach sequences and enrollment status
• Content pieces and catalogue data
• Platform usage metrics and activity history

Activity Logging

We maintain an audit log that records significant actions taken within the platform. This includes actions such as creating or modifying pipeline entries, sending emails, creating invoices, managing sequences, uploading files, and administrative actions like approving users or changing roles. Audit logs are used for platform security, user support, and business analytics. Audit log data is retained for as long as your account is active.

Coaching Engagement

If you are enrolled in a coaching program, we record how you engage with it: how much of each classroom lesson and livestream replay you watch (the parts of the video you played and how far you got), which livestreams you join live and for how long, and your workbook activity (steps you open, work you submit, coach feedback you open). The coaches and staff of your coaching community can see this, so they can tell when you might need a hand. It is not shared outside your coaching community, and it is deleted with your account.

4. Third-Party Processors

We share data with the following third-party services:

• Clerk — Authentication and user management
• Spotify — Artist data retrieval (public API)
• Stripe — Payment processing
• Google — Gmail sync and calendar integration
• Calendly — Scheduling integration
• Typeform — Form integration
• Fathom — Analytics integration
• AWS — File storage (S3)
• Sentry — Error tracking and monitoring

5. Google User Data

This section covers the information dark label. receives from Google when you connect your Google Calendar or sign in with Google.

What we access

• When you connect Google Calendar: when you are busy or free on the calendars you choose; the events on your primary Google calendar (title, time, place, description, who is invited and the event link); permission to add, change and remove the events dark label. creates for the calls and bookings you make in the app, with a Google Meet link when the call uses one; and the email address of the Google account, so we can show you which account is connected.
• If you sign in with Google: your name, email address and profile picture, which Google shares with our sign-in provider, Clerk.

How we use it

Only to provide the features you turned on: keeping your booking page from offering times when you are busy, putting booked calls on your calendar and removing cancelled ones, and showing your calendar events in your Planner, on your Calls & Bookings page and on your Calendar page. An event is linked to an artist when that artist's email is among the invitees; your Calls & Bookings page lists the linked ones.

Storage and protection

We store the busy times we read (start, end and which calendar, with no event titles), the events copied from your calendar, and the sign-in tokens that let dark label. reach your calendar. The tokens are encrypted before they are stored.

What we do not do

• We do not sell your Google data.
• We do not use it for advertising.
• We do not use it to develop, improve or train generalized artificial intelligence or machine-learning models.
• We do not transfer it to anyone else, except as needed to provide or improve the features you use, for security, to comply with the law, or as part of a merger or acquisition (and we will tell you first).
• No one at Dark Label reads your Google data unless you ask us to for support, for security, or when the law requires. When staff view your account (section 3), events copied from Google Calendar show only their times, never their titles, places or descriptions.

Stopping access and deleting it

• Disconnect your calendar in Settings → Calls. That asks Google to revoke dark label.'s access, turns the connection off, erases the stored tokens and deletes the busy times stored for it. Events already copied from your calendar stay in your account until you delete it.
• You can also remove dark label.'s access at any time at myaccount.google.com/permissions.
• Deleting your account removes your connection, busy times and copied events, as described under Data Retention below.

dark label.'s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

6. Data Retention

• Account data is retained while your account is active
• After account deletion, data is permanently removed within 30 days, apart from the exceptions below
• Posts, comments and messages you shared with other people stay after your account is deleted, shown as “Former member” with no name, photo, email or profile link
• We keep messages flagged as abusive, even after an account is deleted, and a deleted account’s coaching files for up to one year
• We keep a record of live-session chat for safety; it isn’t shown to other members
• Backups containing your data are rotated within 90 days
• We may retain anonymized, aggregated data indefinitely for analytics

7. Your Rights

Under GDPR and similar data protection laws, you have the following rights:

• Access: Request a copy of all personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, use the Data Export and Account Deletion features in your account settings, or contact us at privacy [at] darklabelmusic.com.

8. Cookies

We use the following cookies:

• Authentication cookies — Required for login sessions (Clerk)
• Preference cookies — Store your consent and display preferences
• Demo session cookie — Used for demo mode access

We do not use third-party tracking cookies or advertising cookies.

9. Contact

For privacy inquiries, contact our data protection officer at privacy [at] darklabelmusic.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The date of the last update is shown at the top of this page.