Privacy policyPrivacy policyPrivacy policyPrivacy policyPrivacy policy

Prod’s Lounge (prodslounge.com) is a collaborative platform for music producers: projects, songs, deliveries with versions, comments, credits and rights paperwork.

The controller of your data is Fernando Nicolas Invernizzi de Leonardis, based in Uruguay.

For any question or request about your data: hola@prodslounge.com.

Account: your email address, a display name and your password (stored encrypted by our authentication provider; we never see it). If you sign in with Google, we receive your name, email and Google profile picture. You can optionally upload a different photo.

Content you upload: audio and project files, their versions, release covers, comments (with timestamps), logged work hours and feedback messages.

Collaboration data: the projects, releases and songs you take part in, your role, credits, percentage splits, approval signatures, achievements and notification-bell alerts.

Paperwork data (optional): if you fill in your member profile to generate AGADU or SUDEI forms or the ISRC request to the CUD, we store what you type there: full name, ID number, address, phone numbers, email, date and place of birth, nationality, marital status, pseudonym, profession and membership details. We also store your ISRC codes. None of this is required to use the platform.

Technical data: your browser’s time zone and language (to show dates and the interface correctly), and error logs that contain no personal content (see “Cookies” and “Who processes your data”).

We do not ask for or store card or payment data: support payments go through Ko-fi, an external service.

To provide the service: sign you in, store and show your projects and files, let your team collaborate, generate on request the AGADU, SUDEI, CUD and distribution PDFs and sheets, and send you in-app notifications.

To keep the platform secure and running: detect errors, prevent abuse and answer enquiries.

We do not sell your data, we do not use it for advertising or commercial profiling, and the app has no third-party analytics tools.

We process your data to deliver the service you request when creating your account, and with your consent for the optional paperwork data (you can withdraw it at any time by deleting that data). For security and abuse prevention we rely on our legitimate interest.

We comply with Uruguay’s Personal Data Protection Law No. 18,331 and, for people in the European Union, the General Data Protection Regulation (GDPR).

If you sign in with Google, we use your name, email and profile picture only to create and identify your account and to show you inside the app.

We do not use Google data for advertising, we do not sell or share it with third parties, and we do not access your Drive, your contacts or any other data in your Google account.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Members of a project see what is in that project (songs, files, comments, credits, hours and who did what), according to their role and permissions.

Your member profile, your ISRC codes and your preferences are private: only your account sees them. Technically they are accessible to whoever administers the platform, who does not use them for any other purpose.

If a release owner turns on a public link, anyone with that link sees the title, cover, track list and can listen to the final audio; nothing else. It can be turned off at any time.

The site administrator and moderators can see emails and basic account data for support and moderation.

We use providers that process data on our behalf and only to deliver their service:

• Supabase: database and authentication (accounts, projects, comments, profiles).
• Cloudflare: file storage (R2) and DNS.
• Netlify: hosting of the web application.
• Google: sign-in with Google, if you choose that option.
• Sentry (European Union region): technical error logging; configured not to send cookies, headers, request content or personal data beyond an identifier.
• Ko-fi: if you support the project through Ko-fi, it sends us your name, email, message and amount to record the donation and recognise you as a supporter if it matches your account.

Our providers may store or process data outside Uruguay, for example in the European Union or the United States. We choose providers that apply appropriate contractual safeguards for those transfers.

While you have an account. You can delete your account from My profile → Delete account: your profile, your personal data and the projects you own alone are removed, along with their files.

If you share a project, or created content in other people’s projects, automatic deletion cannot be completed until that link is resolved; write to us and we will sort it out with you.

Our providers’ backups roll over automatically and may keep data for a limited period after deletion.

You can access your data, correct it, ask us to delete it, object to its processing, ask for a portable copy and withdraw your consent at any time.

You can do many of these yourself in the app: edit your profile and member profile, delete your files and comments, and delete your account.

For anything else, write to hola@prodslounge.com; we reply within the legal deadlines.

If you believe we are not handling your data properly, you may complain to Uruguay’s Personal Data Regulatory and Control Unit (URCDP) or to the data protection authority in your country.

We use only what is essential for the app to work, with no advertising or tracking cookies:

• Session: cookies from our authentication provider to keep you signed in.
• Preferences: your chosen language, your time zone (to show dates correctly), whether you have already seen the home page (to take you straight to sign-in) and, briefly, an invitation waiting to be accepted when you sign in (10 minutes).
• Your browser also stores, only on your device, the email remembered on the login form and a flag saying you already saw the intro this session.

Connections are encrypted (HTTPS), access to data is restricted by permissions at the database level, and files are delivered through temporary signed links.

No system is infallible: if we detect an incident affecting your data we will tell you and report it to the authority where required.

Prod’s Lounge is not aimed at people under 16 and we do not knowingly collect data from minors. If you believe an account belongs to a minor, write to us and we will delete it.

If we change this policy we update the date above and, if the change is significant, we tell you inside the app.

Fernando Nicolas Invernizzi de Leonardis — hola@prodslounge.com