Privacy Policy

SignalDeck is an artist profile platform run by Groove Protocol. Groove Protocol is the controller of the personal data described on this page. Contact: info@grooveprotocol.com.

• Your account. Your email address, so we can send you sign-in links and connect you to your profile. Legal basis: providing the service you asked for (GDPR Art. 6(1)(b)).
• Your artist profile. What you add in the dashboard, such as your artist name, bio, photos, links and releases. You decide what you publish. Legal basis: Art. 6(1)(b).
• Claims and requests. When you claim, correct or ask us to remove a profile, we keep the request, the links you give us and the verification code, so we can check that the profile is yours. Legal basis: our legitimate interest in keeping profiles accurate and safe (Art. 6(1)(f)).
• Booking requests. When you send a booking request through a profile, we keep your name, email address, phone number if you give one, the event details and your message, and show them to the artist who owns the profile. Legal basis: taking the steps you asked for (Art. 6(1)(b)).
• Profiles built from public release data. Some profiles were created from public release information (artist name, releases, label, genre and public links) before the artist joined. We do not add biographies, legal names or contact details to them. Legal basis: our legitimate interest in presenting our labels' releases and letting each artist take over their page (Art. 6(1)(f)). The artist can claim, correct or remove such a profile at any time.
• Technical data. Our hosting providers keep standard server logs, such as IP address and browser type, to run and protect the service.

We do not use advertising or analytics cookies. When you sign in, your browser stores a session token so you stay signed in. Signing out removes it.

• Supabase. Database, sign-in and file storage. Our project is hosted in the EU (Frankfurt, Germany).
• Vercel. Hosting and delivery of the website.
• Hostinger. Sending sign-in emails from our domain.

These providers act on our instructions under their data processing terms. Where a provider may process data outside the EU/EEA, the transfer is covered by the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework. We do not sell personal data.

• Account and profile. While your account exists. Ask us and we delete your account and profile within one month.
• Claims and requests. While they are open, and afterwards only as long as needed to answer questions about them.
• Booking requests. As long as the artist's profile exists, unless you ask us to delete them sooner.
• Server logs. For the short period our hosting providers keep them.

You can ask us for a copy of your data, to correct or delete it, to restrict or object to how we use it, and to receive it in a portable format. Write to info@grooveprotocol.com. For a profile built from public release data you can also use "Request removal" on the profile page.

You can also complain to a data protection authority. In Croatia this is the Personal Data Protection Agency (AZOP, azop.hr).

If we change this policy, we update this page and the date above.