Privacy Policy
We value openness. Here is exactly how we handle your data, written in plain English.
1. Introduction & Data Controller
VibeValley Records ("we," "us," or "our") is committed to protecting your privacy and ensuring you have control over your personal data. This Privacy Policy explains how we collect, use, and share your information in compliance with the General Data Protection Regulation (GDPR).
Data Controller:
VibeValley Records
Stockholm, Sweden
Email: hello@vibevalleyrecords.com
2. What Data We Collect
Account Information
- Identity Data: Name, username, and email address (via Clerk authentication).
- Profile Data: Profile picture and social media links.
Artist & Distribution Data
- Catalog Data: Audio files (WAV/MP3), artwork, metadata (titles, credits, ISRC).
- Financial Data: Payout details and transaction history (processed securely via Stripe).
Communication Data
- Form Submissions: Name, email, and messages sent via our contact forms (processed by Formspree).
3. Legal Basis for Processing
We process your data under the following legal bases (GDPR Art. 6):
- Contractual Necessity: To provide music distribution services, manage your account, and pay royalties.
- Legitimate Interests: To improve our platform, prevent fraud, and ensure security.
- Consent: For marketing communications (newsletters), which you can withdraw at any time.
- Legal Obligation: Tax reporting and compliance with Swedish/EU laws.
4. Third-Party Processors
We adhere to strict data minimization principles. We only share data with trusted third-party processors necessary for our operations:
Clerk
Authentication and user management. Handles secure login and profile data.
Supabase
Database and file storage. Stores your music files, artwork, and metadata securely.
Formspree
Contact form processing. Relays messages from our site to our support team.
Stripe
Payment processing. Handles financial transactions securely.
Vercel Analytics
Privacy-friendly web analytics. Collects anonymized usage data to help us improve the site.
All processors are vetted for GDPR compliance. Data transfers outside the EU/EEA are protected by Standard Contractual Clauses (SCCs).
5. Data Retention
- Account Data: Retained as long as your account is active.
- Distribution Data: Retained for the duration of our distribution agreement plus a period required for tax/audit purposes (typically 7 years).
- Marketing Data: Deleted immediately upon unsubscription.
6. Your Rights
Under GDPR, you have the right to:
- Access: Request a copy of the data we hold about you.
- Rectification: Correct inaccurate data.
- Erasure: Request deletion of your data ("Right to be Forgotten"), subject to legal retention requirements.
- Restrict Processing: Ask us to limit how we use your data.
- Object: Object to processing based on legitimate interests or for direct marketing.
- Portability: Receive your data in a structured, commonly used format.
To exercise these rights, simply email us at hello@vibevalleyrecords.com.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se if you believe your data has been processed unlawfully.
7. Cookies
We use essential cookies to make the site work (e.g., keeping you logged in) and analytical cookies to understand how our site is used.
You can manage your cookie preferences through your browser settings. For more details, see our Cookie Policy.
Last updated: February 10, 2026