Privacy Policy

1. Data we collect

Depending on how you use Listen Exchange, we may collect the following information:

• Account information: your email address, user ID and account creation information.
• Profile information: information associated with your Listen Exchange profile.
• Submitted tracks: Spotify track identifiers and information required to associate submitted tracks with your account.
• Feedback: feedback and comments you submit about tracks from other users.
• Listening activity: listening sessions, timestamps, playback progression, session status and other technical signals used to determine whether listening requirements have been completed.
• Platform activity: information related to participation, completed exchanges and internal rewards.
• Contact information: messages and information you send through our contact form.
• Technical information: logs and technical data that may be required for security, debugging and preventing abuse.

2. How we use your data

We use personal data to:

• create and manage your account;
• allow you to submit and manage tracks;
• provide the listening and feedback exchange system;
• track valid participation and listening sessions;
• calculate and manage internal rewards or eligibility;
• prevent fraud, cheating and abuse of the service;
• respond to support requests and messages;
• debug problems and improve the reliability of the platform;
• protect the security of Listen Exchange and its users;
• comply with applicable legal obligations.

3. Legal bases for processing

Depending on the type of processing, we may process your personal data because it is necessary to provide the service you requested, because we have a legitimate interest in operating and securing Listen Exchange, because you have given your consent, or because processing is required by law.

Where processing is based on consent, you may withdraw that consent at any time, without affecting processing that already took place.

4. Listening session data

Listen Exchange uses technical listening session data to determine whether participation requirements have been completed and to protect the exchange system against manipulation.

This may include server timestamps, session identifiers, playback progression and related technical events.

These checks are used to verify platform activity. They are not intended to determine whether you physically heard or paid attention to a particular piece of music.

5. Spotify and third-party content

Listen Exchange uses Spotify content and embedded Spotify players to allow users to discover and listen to submitted tracks.

When you interact with Spotify content, Spotify may process information according to its own privacy policy and terms. Listen Exchange does not control how Spotify independently processes data.

Listen Exchange is an independent service and is not affiliated with, sponsored by or endorsed by Spotify.

6. Service providers

We may use third-party providers to operate Listen Exchange, including services for hosting, databases, authentication, infrastructure and other technical functionality.

These providers may process personal data only where necessary to provide their services to Listen Exchange and subject to their applicable contractual and data protection obligations.

Listen Exchange currently uses Supabase for parts of its database and authentication infrastructure.

7. Sharing of personal data

We do not sell your personal data.

Personal data may be shared with service providers where necessary to operate Listen Exchange, or where disclosure is required by law, necessary to protect the service, or necessary to investigate abuse or security incidents.

Some information you voluntarily submit, such as feedback or track information, may be visible to other users as part of the normal operation of the service.

8. Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Account-related information may generally be retained while your account remains active. Some technical, security or transaction records may be retained for an additional period where necessary to prevent abuse, resolve disputes, maintain system integrity or comply with legal obligations.

Retention periods may evolve as Listen Exchange develops. We aim to avoid keeping personal data longer than necessary.

9. Account deletion

You may request deletion of your Listen Exchange account through the account deletion procedure provided by the service.

When an account is deleted, associated personal data will be deleted or anonymized where appropriate, except where certain information must temporarily be retained for security, legal or legitimate operational reasons.

10. Your data protection rights

Depending on applicable law, you may have rights regarding your personal data, including the right to:

• access personal data we hold about you;
• request correction of inaccurate information;
• request deletion of your personal data;
• request restriction of certain processing;
• object to certain processing;
• request portability of eligible personal data;
• withdraw consent where processing is based on consent.

You may contact us through the Listen Exchange Contact page to exercise these rights.

11. Security

We use reasonable technical and organizational measures to protect personal data and reduce the risk of unauthorized access, loss, misuse or alteration.

No online service can guarantee absolute security. Users are also responsible for keeping their account credentials secure.

12. Cookies and local storage

Listen Exchange may use cookies or similar browser storage where necessary for authentication, security, preferences and operation of the service.

Third-party content such as embedded Spotify players may also use technologies controlled by the relevant third party.

If Listen Exchange introduces non-essential analytics, advertising or other tracking technologies that require consent, appropriate information and consent controls will be provided where required.

13. International data transfers

Some service providers may process data outside your country or the European Economic Area.

Where required, appropriate safeguards will be used for international transfers of personal data.

14. Changes to this Privacy Policy

We may update this Privacy Policy as Listen Exchange evolves or when our data practices change.

The latest version will be published on Listen Exchange with its most recent update date.

15. Contact

If you have questions about this Privacy Policy, want to exercise a privacy right or want to request deletion of your data, please contact us through the Contact page.