Deepora

Legal

Privacy Policy

Last updated: July 2026

1. Introduction

Deepora, LLC ("we", "us", "our") operates the Deepora website and the Deepora Smart Links service (collectively, the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over it. The Service includes this website (deepora.co), music submission forms, artist dashboards, and shareable "Smart Link" landing pages that redirect listeners to third-party streaming and music platforms. This policy applies to all visitors, artists, fans, and registered users of the Service.

2. Data We Collect

We may collect and process the following categories of personal data:

  • Account data: name, email address, and authentication details when you register or log in to a dashboard.
  • Submission data: artist name, email, genre, uploaded audio files, and track links submitted for consideration.
  • Usage and interaction data: clicks on destination buttons, device type, referral information, and pages viewed, collected when a Smart Link is opened or interacted with.
  • Technical data: IP address, browser type, and standard server log information collected automatically.
  • Contact messages: name, email, and message content submitted through the contact form.

3. How We Use Your Data

We process personal data for the following purposes: to operate, maintain, and improve the Service; to create and host Smart Links and their associated analytics; to respond to enquiries and evaluate music submissions; to provide artists with aggregated click statistics; to detect, prevent, and address fraud, abuse, and security issues; and to comply with legal obligations. We do not sell your personal data. We may share data with the third-party streaming and social platforms a user actively selects on a Smart Link, but only to the extent necessary to redirect them to the destination they chose.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, United Kingdom, and Switzerland, we process personal data on the following legal bases: (a) consent — for optional analytics cookies and non-essential tracking; (b) contract — to provide the Service to registered artists and operate their accounts; (c) legitimate interests — to secure the Service, analyze aggregate usage, and prevent abuse; and (d) legal obligation — where required by applicable law.

5. Cookies and Tracking Technologies

The Service uses cookies and similar technologies (local storage, pixels) to operate core functionality and, where applicable, to measure traffic and clicks on Smart Links. Essential cookies are required for the Service to function (for example, to remember basic session state). Optional analytics and measurement cookies are only placed after you have accepted them. The third-party streaming and social platforms linked from Smart Links (such as Spotify, Apple Music, YouTube, SoundCloud, Bandcamp, Beatport, Instagram, TikTok, and others) may set their own cookies and trackers once you navigate to them; Deepora does not control those platforms' cookies or data practices. You can manage or withdraw your cookie permissions at any time through your browser settings and via the "Manage your permissions" link on each Smart Link.

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy or as required by law. Account and Smart Link data is kept for the life of the account. Submission data is retained for a reasonable evaluation period. Usage and log data is aggregated or deleted on a rolling basis. You may request deletion at any time by contacting us at hello@deepora.co.

7. Sharing and Service Providers

We share personal data only with service providers that help us operate the Service (for example hosting, analytics, email delivery, and file storage) under written agreements that require them to protect the data and use it only on our behalf. We may also disclose data when required by law, court order, or to protect our rights, safety, or property. We do not sell personal information to third parties.

8. Your Rights

Subject to applicable law, you have the right to access, correct, port, restrict, or request deletion of your personal data, to object to certain processing, and to withdraw consent at any time without affecting the lawfulness of prior processing. Residents of California (CCPA/CPRA) and other US states with applicable privacy laws may have additional rights to know, delete, correct, or opt out of the sale or sharing of personal information and to limit the use of sensitive personal information. We do not sell or share personal information as defined by those laws. To exercise any right, contact us at hello@deepora.co.

9. International Data Transfers

The Service is operated from New York City, New York, United States. If you access the Service from outside the US, your data will be transferred to and processed in the US and other countries where our service providers operate. We take reasonable steps to ensure such transfers are protected by appropriate safeguards, such as standard contractual clauses, where required by law.

10. Security

We implement reasonable technical and organizational measures to protect personal data, including access controls and encryption in transit. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Service is not directed to children under 16 (13 in the EEA/UK where applicable). We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us and we will delete it.

12. Changes

We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact

Deepora, LLC is located in New York City, New York, USA. For privacy enquiries or to exercise your rights, contact us at hello@deepora.co.