Privacy Policy

Last updated: 28 April 2026

What we collect

When you sign in with Google we receive your name, email address, and profile picture. When you connect Spotify we receive your Spotify user ID, your top artists, and recently played tracks. We never receive your Google or Spotify password.

What we do with it

We use this data to identify your account, personalise the artists we recommend to you, and remember which artists you've invested in or booked. We do not sell your data to anyone, ever.

Where it's stored

Your account profile and tokens are stored on Supabase (Postgres) in the EU. Spotify access tokens are encrypted at rest. Backups are retained for 30 days.

Cookies

We use first-party cookies to keep you signed in and remember your Spotify connection. We do not use third-party advertising cookies or trackers.

Your rights

You can disconnect Spotify at any time from your profile. You can request deletion of your account and all associated data by emailing the address below — we'll action it within 30 days.

Contact

Questions or requests: hello@undrgrnd.tech