Privacy Policy

This Privacy Policy explains what personal data Zebastian Victorin and Victoriny Records ("we", "us") collect through the Zebastian Victorin Artist Hub website at zebastianvictorin.com (the "Site"), why we process it, how long we keep it, and the rights you have over it. We only collect and process data that is actually needed to operate the Site and its connected services.

Fan and member data. When you join the Inner Circle, we collect:

• Your first name and email address (required to join).
• Optional details you may provide: country, city, and a favorite track.
• Engagement signals such as when you last interacted and an engagement score, used to understand how active members are.
• Marketing attribution data — UTM source, medium, and campaign parameters from the link you used to reach the Site, and a Google Analytics client identifier from your browser.
• Your consent status for receiving emails, which you can withdraw at any time.

Account and authentication data. Authorized team members log in to manage the Site. We store the account role (admin or user) needed to control access to administrative tools.

Analytics and advertising data. We collect aggregated traffic and performance metrics through Google Analytics, Google Search Console, Google Ads, and Meta to understand how the Site is used and how campaigns perform.

The Site connects to third-party platforms using OAuth (authorization code flow) and other server-side credentials. When an integration is authorized, we store access and refresh tokens securely on our servers as encrypted secrets. These tokens are never exposed to your browser, and raw credentials are never included in any client-facing response.

The platforms connected in this way include Spotify, Apple Music, YouTube, Instagram, Meta, Google (Google Ads, Google Analytics, Google Search Console, Google Sheets), and Canva. Each connection requests only the scopes needed for its function.

If you authorize a TikTok integration, we will access only the TikTok account and content data that the scopes you grant permit — for example, public profile information or content you make available through the connection. We do not access TikTok data you have not authorized. You can revoke this authorization at any time through TikTok or by asking us to disconnect the integration, after which we stop retrieving new data and remove stored tokens.

We use the following services to measure traffic and campaign performance. Each processes data according to its own privacy policy:

• Google Analytics — to measure website visits, sessions, and page views.
• Google Search Console — to measure search appearance and clicks.
• Google Ads — to measure advertising impressions, clicks, cost, and conversions (read-only).
• Meta — to measure advertising and marketing performance.

These services may set cookies or similar identifiers in your browser. You can manage cookies through your browser settings.

The Site uses cookies and similar technologies for analytics (such as Google Analytics) and to remember your language and viewing preferences. We do not use cookies to identify you personally across other sites. You can disable cookies in your browser; some features may be limited as a result.

Your name, email, and optional details are stored as part of our fan relationship management (CRM) system so we can send you Inner Circle content and release updates. We record your consent status and whether you have unsubscribed. We only send emails to members who have consented, and we honor unsubscribe requests promptly.

We process your data to:

• Provide and improve the Site and the Inner Circle membership.
• Send you the content you signed up for, including unreleased previews and release announcements.
• Understand which marketing channels bring in new members, using UTM parameters and analytics identifiers.
• Measure and improve the performance of music, content, and advertising campaigns.
• Operate the administrative tools that manage releases, content, and integrations.

We keep your member data for as long as you are an active member. If you unsubscribe or request deletion, we remove your personal data from our active systems. Aggregated and anonymized analytics data may be retained longer for historical comparison. Raw data fetched from third-party platforms is retained only as needed for sync and audit purposes.

We share data only with the service providers we use to operate the Site:

• Base44 — the platform that hosts the Site, its database, and its backend services.
• The third-party platforms listed above, to the extent needed for each integration to function (for example, Google Sheets receives exported fan signup data).

We do not sell your personal data. We only share it where necessary to provide the services described here, or where required by law.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your personal data.
• Withdraw consent for marketing emails at any time.
• Object to or restrict certain processing.

To exercise these rights, contact us through our contact page or by email at contact@zebastianvictorin.com.

You can disconnect a third-party integration at any time — either through that platform's own settings or by asking us to remove the connection. We will delete the stored tokens and stop retrieving new data from that platform.

To delete your Inner Circle member data, contact us and we will remove your name, email, and associated details from our active systems.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised. Continued use of the Site after changes constitutes acknowledgment of the updated policy.

If you have questions about this Privacy Policy or your data, please contact us through our contact page or by email at contact@zebastianvictorin.com.