StarrBase Music is operated by Adam Kuhn, Tamworth, New South Wales, Australia. This Privacy Policy explains how we handle personal information when you use starrbase.xyz and all associated platform services.
This policy is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We are committed to handling your personal information responsibly and transparently.
By using StarrBase Music, you consent to the collection, use, and disclosure of your personal information as described in this policy.
1. Scope
This Privacy Policy applies to all personal information collected by StarrBase Music through our website, platform, APIs, and related services. It applies to artists, fans, visitors, and any person who interacts with StarrBase Music.
This policy does not replace the privacy policies of third-party service providers that operate independently as part of our platform stack. Where relevant, we identify those providers and recommend you review their policies.
2. Information We Collect
Depending on how you use StarrBase Music, we may collect the following categories of personal information:
- Account and identity data: user ID, email address, account role (artist or fan), display name, and profile settings.
- Profile and publishing data: profile photos, artist biography, EPK content, release metadata, event details, public handles and URL slugs.
- Commerce and subscription records: purchases, artist support subscriptions, tips, Streaming+ subscription status, EPK purchase status, affiliate program participation, transaction identifiers, and related timestamps.
- Artist payout data: Stripe Connect account identifiers, onboarding status, and payout-related metadata where you are an artist seller.
- Affiliate data: referral codes, referral link activity, landing page analytics, commission records, and payout preferences.
- Media and file data: uploaded audio files, cover artwork, press photos, video links, and document assets.
- Usage and interaction data: feature activity, page interactions, product event signals, and session behavior.
- Technical and device data: IP address, browser and user-agent signals, and API request metadata.
- Communications data: support requests and transactional email records.
- Tracking and attribution data: conversion identifiers, click IDs, hashed IP address, and hashed user-agent signals processed through advertising integrations.
3. How We Collect Information
- Directly from you when you register, edit your profile, upload content, purchase music, subscribe to an artist, tip an artist, purchase or build an EPK, activate the affiliate program, or contact support.
- Automatically through platform operation and instrumentation when you browse, interact with, or stream content on StarrBase Music.
- From integrated third-party providers such as Stripe (payment and identity verification flows), Firebase (authentication), and Spotify (music search metadata), where required to complete platform operations.
4. How We Use Your Information
- To authenticate users and secure accounts.
- To host, process, stream, and display user-published content including releases, EPK pages, and event pages.
- To process commerce transactions, including music purchases, EPK unlocks, artist support subscriptions, tips, and Streaming+ subscriptions.
- To deliver purchased content via account library access and secure download links.
- To operate and display public artist profiles, release pages, event pages, and EPK pages.
- To operate the affiliate program, including tracking referrals, calculating commissions, and processing payouts via Stripe.
- To operate the Members artist subscription community experience.
- To monitor platform performance, detect abuse, prevent fraud, and protect platform integrity.
- To send operational and transactional communications, including purchase receipts and subscription confirmations.
- To measure product performance and advertising campaign effectiveness.
6. Public Information and Visibility
StarrBase Music includes surfaces that are public by design. Information you publish to these areas is accessible to all visitors and may be indexed by search engines:
- Public artist profiles and release pages.
- Electronic press kit pages.
- Public event pages.
- Public profile handles, URL slugs, and associated profile media.
You are responsible for deciding what information you choose to publish publicly. StarrBase Music does not control how third parties, including search engines, may access or store publicly published content.
7. Payments and Billing Information
All payment processing on StarrBase Music is handled by Stripe. Payment card details are entered directly into Stripe's secure checkout environment. StarrBase Music does not receive, store, or have access to full payment card numbers or card security codes.
StarrBase Music stores transaction and subscription metadata required for product operation, purchase history, account access entitlements, and financial reconciliation. This includes transaction IDs, purchase timestamps, subscription status, and payout records for artist sellers.
9. Data Retention
We retain personal information for as long as necessary to operate StarrBase Music, maintain user account records, prevent abuse, resolve disputes, and satisfy legal, tax, and accounting obligations. Retention periods vary depending on the category of data and the purpose for which it was collected.
Some platform content, such as expiring artist events, is subject to scheduled automated cleanup. Other records, including purchase history, payout records, and affiliate commission records, are retained for financial and legal purposes for a minimum of seven years in accordance with Australian tax law requirements.
When you delete your account, we process deletion of your profile data and user-generated content as part of the account removal flow. Certain records may be retained where required for fraud prevention, legal obligations, or dispute resolution even after account deletion.
10. Your Rights and Choices
Under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to request access to personal information we hold about you, request correction of inaccurate or incomplete information, and make a complaint about how we handle your personal information.
- You can update your profile information directly through your account settings.
- You can request account deletion through your account dashboard. Artist and fan dashboards both include an in-product account deletion action.
- You can request access to, correction of, or deletion of your personal information by contacting us at questions@starrbase.xyz. We will respond to verified requests within a reasonable time and no later than 30 days.
- If you are a resident of the European Economic Area, the United Kingdom, or another jurisdiction with additional privacy rights (such as GDPR-equivalent rights), you may have additional rights including the right to data portability, restriction of processing, and objection to processing. Contact us at questions@starrbase.xyz to make a request.
- You can opt out of non-essential tracking technologies using your browser settings or the opt-out tools described in our Cookies Policy.
11. Security
We implement technical and organisational measures designed to protect personal information against unauthorised access, disclosure, loss, or misuse. These include Firebase authentication and access controls, Firestore security rules restricting data access by role, server-side token verification for all commerce operations, and HTTPS-enforced data transmission.
No method of storage or transmission over the internet is completely secure. While we take reasonable precautions, StarrBase Music cannot guarantee absolute security of information transmitted to or stored on our platform.
12. Children's Privacy
StarrBase Music is not intended for use by persons under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe a person under 16 has provided personal information through StarrBase Music in violation of this policy, please contact us at questions@starrbase.xyz and we will take appropriate action, including deleting the information if confirmed.
13. International Data Handling
StarrBase Music is operated in Australia. Some of our third-party infrastructure and service providers, including Google, Stripe, Meta, and Reddit, may process and store data on servers located outside Australia, including in the United States and other countries.
Where personal information is disclosed to overseas recipients, we take reasonable steps to ensure those recipients handle the information consistently with the Australian Privacy Principles, including through contractual data processing terms with those providers.
14. Complaints
If you have a complaint about how StarrBase Music has handled your personal information, please contact us first at questions@starrbase.xyz. We will investigate your complaint and respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
15. Changes to This Policy
We may update this Privacy Policy as StarrBase Music evolves or as legal requirements change. We will update the effective date when we make changes. Where required by law, we will provide additional notice. Continued use of StarrBase Music after an updated policy becomes effective constitutes acceptance of the updated policy.
16. Contact
Privacy and data requests: questions@starrbase.xyz
General support: support@starrbase.xyz
StarrBase Music is operated by Adam Kuhn, Tamworth, New South Wales, Australia.