Privacy policy

Spun (spunmusic.com) helps electronic music artists find where their tracks were played and get the clip. Spun is run by Flowidus Limited, New Zealand ("we"). This policy explains what we collect, why, who helps us run Spun, and your choices. Questions or requests: hello@spunmusic.com.

What we collect

• Your account: your email address, and your name and profile picture if you log in with Google. Your workspace name, team members and their roles.
• Your music: artist names and aliases, track titles and details, and any audio you upload. Uploaded audio is stored privately: only your workspace can play it.
• The free search: the email address, artist name, track title and link you enter, and whether you asked for alerts. One free search per email address. To stop people using the free search in bulk, we also keep a scrambled (one-way hashed) copy of your IP address for 30 days.
• Forwarded alerts: if you forward 1001tracklists notification emails to your private Spun address, we read them to find plays of your tracks. We keep each forwarded email for 30 days, then delete it.
• Payments: handled by Paddle, our reseller, which sells you the subscription and handles tax. Paddle collects your payment details and billing address under its own privacy policy; we never see or store your card number. We keep your plan, billing period and Paddle customer reference.
• Alert emails: your alert settings (time zone, quiet hours, muted tracks) and a log of the alerts we sent you.
• Technical data: login session cookies and the workspace you last chose, and standard server logs (such as IP address and browser) kept for security and fixing faults.

What we do with it

• Find DJ sets, radio shows and recordings that include your tracks, and the second your track drops.
• Recognise your tracks inside recordings by creating audio fingerprints from the audio you upload.
• Send you the emails you ask for: account confirmation, password resets, alerts, summaries and receipts.
• Run billing, keep accounts secure, and fix problems.

We don't sell your personal information, and we don't use your uploaded music to train AI models.

Public information about DJ sets

Spun keeps an archive of public facts about DJ sets: who played, where, when, the tracklist and links to recordings. These come from public tracklist pages and official platform APIs (see below). We never store audio from DJ sets or radio.

Who helps us run Spun

These companies process data for us, each under their own security and privacy terms:

• Supabase: database, logins and private file storage (Sydney, Australia).
• Vercel: website hosting (global network).
• Paddle: our reseller (merchant of record): checkout, payments, invoices, tax and refunds.
• Resend: sending and receiving email (Tokyo, Japan).
• ACRCloud: audio fingerprinting of tracks you upload.
• Google: optional log in with Google.
• Fly.io: runs the scanner that builds the set archive (Sydney, Australia).
• Meta and TikTok: ad measurement, only if you accept advertising cookies.

Some of these store or process data outside New Zealand. We choose providers that protect it to a comparable standard.

YouTube

Spun uses YouTube API Services to find recordings of DJ sets and link you to the exact moment your track plays. By using those features you agree to the YouTube Terms of Service, and the Google Privacy Policy applies. We store YouTube video IDs and refresh or delete the titles and details we keep within 30 days. Free-search results, which include YouTube titles and thumbnails, are deleted after 30 days. Spun doesn't access your YouTube account.

Cookies

Spun uses essential cookies to work: keeping you logged in, remembering the workspace and currency you chose, finishing a Google login, and remembering your cookie choice. These are always on.

With your OK, we also use the Meta (Facebook and Instagram) and TikTok pixels. They tell us which of our ads brought you here and whether you went on to search, sign up or subscribe, so we can spend less on ads that don't work. Meta and TikTok set their own cookies and handle that data under their own privacy policies. Nothing loads until you choose "Accept" on the cookie notice, and you can change your mind any time with "Cookie settings" at the bottom of the home page. We never send them your uploaded tracks, your plays or your email address.

How long we keep it

• Your account and music: until you delete them or close your account.
• Forwarded alert emails: 30 days.
• Billing records: as long as tax law requires (usually 7 years).
• Public set archive: kept, as it describes public performances rather than you.

Your choices and rights

Under New Zealand's Privacy Act 2020 (and Australia's Privacy Act, if you're there), you can ask to see the personal information we hold about you, correct it, or delete it. Email hello@spunmusic.com and we'll reply within 20 working days; deletion requests are completed within 7 days. You can turn off or mute alert emails any time on the Alerts page. If you're unhappy with how we handle your information, you can complain to the NZ Office of the Privacy Commissioner (privacy.org.nz).

Changes

If we change this policy in a way that matters, we'll email account holders before it takes effect.