XloudMusic Privacy Policy

XLOUDMUSIC PRIVACY POLICY

Effective Date: August 14, 2026

1. INFORMATION WE COLLECT

Identity Data: Information provided during account creation, including your xloudid, email address, and demographic information.

Ledger & Transaction Data: A permanent, immutable record of your marketplace activity, including digital assets acquired, sale prices, transaction timestamps, and wallet balances.

Telemetry & Playback Data: To enforce our single-session playback rule, we collect real-time data regarding your device name, device type, active track IDs, and playback status.

2. HOW WE USE YOUR INFORMATION

We use your data solely to:

Operate and secure the zero-trust marketplace.

Verify cryptographic ownership of digital assets before allowing high-fidelity stream access.

Synchronize playback states across your mobile and web devices.

Process payments and prevent fraud.

3. DATA SHARING & SUBPROCESSORS

XloudOne does not sell your personal data to third parties. We share data only with strictly vetted infrastructure subprocessors (e.g., cloud hosting networks and relational database providers) necessary to operate the Platform securely.

4. COOKIES & LOCAL STORAGE

The web portal and mobile application use persistent local storage tokens and cookies strictly for session authentication and xaid header routing. We do not use third-party tracking pixels for behavioral advertising.

5. YOUR PRIVACY RIGHTS (CCPA, GDPR, CPRA)

Depending on your jurisdiction, you have the right to access, correct, or delete your personal data.

5.1 Right to Erasure: You may request full account deletion via the mobile app settings. Warning: Because digital asset ownership is mathematically tied to your xloudid, deleting your account will permanently destroy your ability to access, stream, or trade any assets currently held in your vault. Asset value is non-refundable upon account deletion.

6. CHILDREN'S PRIVACY

The Platform is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we discover we have inadvertently collected such data, we will delete it immediately.

7. ADDITIONAL DATA WE MAY COLLECT

In addition to Identity, Ledger, and Telemetry data, we may collect: (a) profile content you provide (stage name, bio, avatar, and artwork); (b) library activity stored in your XloudMusic account such as playlists, likes, and recently played; (c) IP address and approximate network location used for security, fraud prevention, and session routing; (d) device identifiers needed for single-session playback; (e) push-notification tokens if you enable notifications; (f) social graph data if you use friends or sharing features; and (g) support correspondence you send to us.

Artist and label portal accounts (web only) may also provide payout destination details, tax forms, split-sheet collaborator contacts, and roster/invite information. That portal data is not collected by the listener mobile application unless you also use those features on the web.

8. PAYMENTS, APP STORES, AND BILLING

Purchases inside iOS or Android use Apple or Google In-App Purchase. Apple and Google process those payments under their own privacy policies. We receive purchase receipts, product identifiers, and entitlement status — not your full payment-card number.

Web billing (listener Plus, artist, and label plans) is processed by Stripe. We store Stripe customer and subscription identifiers needed to honor your plan. Card numbers are handled by Stripe, not by XloudOne.

9. DATA RETENTION AND ACCOUNT DELETION

Account, ledger, and playback-enforcement records are retained while your xloudid remains active and as needed to operate the marketplace, prevent fraud, and meet legal obligations.

If you request deletion, we will delete or de-identify personal data we control, except records we must keep for tax, dispute, or anti-fraud purposes. Ledger rows that prove asset provenance may be retained in anonymized or legally required form. Deletion still permanently ends your ability to access, stream, or trade assets tied to that xloudid.

10. INTERNATIONAL TRANSFERS AND LEGAL BASES

XloudOne is a North Carolina limited liability company. If you access the Platform from outside the United States, your information may be processed in the United States.

Where GDPR or similar law applies, we process data to perform the contract (providing the Platform), to comply with law, and for legitimate interests such as security, fraud prevention, and single-session enforcement. You may object or request restriction where those laws allow.

11. HOW TO EXERCISE YOUR RIGHTS

Use in-app Settings to request account deletion where available. You may also email support@xloudone.com to access, correct, or delete personal data, or to ask questions about this policy. We may need to verify that the request comes from the xloudid holder.

We do not sell personal information as “sale” is defined under CCPA/CPRA, and we do not share it for cross-context behavioral advertising.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy. The current version is published on the XloudMusic website and provided to the mobile application as a separate Privacy document (not combined with Terms). Continued use after an updated effective date or version constitutes acceptance of the revised policy.