Privacy Policy

Effective Date: January 25, 2023 Last Updated: September 13, 2026

_____________________________________

1. Introduction

Oida Industries, doing business as Music Supremacy (“Music Supremacy,” “we,” “us,” “our”), operates musicsupremacy.com and the related tools and services described in our Terms and Conditions (the “Services”).

 

This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the rights and choices available to you. It applies to visitors to our website, account holders and subscribers, and people who interact with campaigns, microsites, and QR codes built by our users on our platform.

 

By using the Services you agree to this Policy. If you do not agree, please stop using the Services.

2. Two Roles: Controller and Processor

Understanding which role we play determines who you contact about your data.

 

We are a controller for information about our own visitors, subscribers, and prospects — the people who buy or evaluate Music Supremacy. This Policy governs that data.

 

We are a processor (service provider) for the fan, customer, and audience data our subscribers collect through microsites, QR codes, forms, quizzes, games, and advertising campaigns they build with our tools. In that case, our subscriber is the controller. They decide what is collected and why; we process it on their instructions.

 

If you scanned an artist’s QR code or entered a contest on a microsite and want your data deleted, contact that artist or business first. If you cannot reach them, write to us at [PRIVACY EMAIL] and we will forward your request to the relevant account holder and assist as required by law.

3. Information We Collect

3.1 Information You Give Us

  • Account information: name, artist or business name, email address, password, phone number, billing address, job role.
  • Billing information: subscription plan, transaction history, and the last four digits and expiry of your payment card. Full card numbers are handled directly by our payment processor and are never stored on our servers.
  • Content you upload: music, artwork, photos, video, logos, copy, campaign assets, destination URLs, and any other material you add to the Services.
  • Communications: support tickets, emails, chat messages, survey responses, and any information you volunteer in them.
  • Marketing preferences: newsletter subscriptions, topic interests, and opt-in or opt-out signals.

3.2 Information We Collect Automatically

  • Device and connection data: IP address, browser type and version, operating system, device type, screen size, language, and referring URL.
  • Usage data: pages viewed, features used, buttons clicked, session duration, timestamps, and error logs.
  • QR code scan data: time of scan, approximate location derived from IP (typically city or region level), device type, and the destination served. This is the analytics that makes dynamic QR codes useful.
  • Microsite and campaign analytics: page views, unique visitors, click-through, quiz and game completions, and conversion events.
  • Cookies and similar technologies: see Section 7.

3.3 Information From Third Parties

  • Payment processors: confirmation of payment, fraud signals, chargeback notices.
  • Advertising and analytics platforms: aggregate campaign performance, impressions, clicks, spend, and conversion data.
  • Social and streaming platforms: profile data you authorize us to access when you connect an account, subject to that platform’s permissions.
  • Data enrichment and lead sources: business contact details used for marketing, where lawful.

3.4 Information We Do Not Want

Do not send us sensitive personal information — government ID numbers, financial account numbers, health information, precise geolocation, biometric data, or information about criminal history — unless we specifically request it. We do not need it and do not intend to collect it.

4. How We Use Your Information

We use personal information to:

 

  • Create and administer your account and authenticate logins;
  • Provide, host, and maintain the Services, including microsites, QR codes, AI tools, games, and quizzes;
  • Process payments, manage subscriptions and renewals, and send billing notices;
  • Deliver analytics and reporting on your campaigns;
  • Provide customer support and respond to your inquiries;
  • Send service and transactional messages, including security alerts, renewal reminders, and changes to terms (you cannot opt out of these while you hold an account);
  • Send marketing emails, newsletters, and product updates, where permitted (you can opt out at any time);
  • Set up, run, optimize, and report on advertising campaigns you engage us for;
  • Detect, investigate, and prevent fraud, abuse, spam, and security incidents;
  • Improve the Services, including debugging, testing, and developing new features;
  • Comply with legal obligations and enforce our Terms and Conditions.

 

AI features. Some tools use third-party AI models to generate or refine content. Prompts and the content you submit to those features are transmitted to the model provider to produce output. We do not sell your content, and we instruct providers not to use your content to train their general-purpose models where that option is available. Do not submit confidential or personal information into AI prompts that you would not want processed by a third-party provider.

 

Automated decision-making. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

5. Legal Bases for Processing (EEA / UK)

Where GDPR or UK GDPR applies, we rely on:

 

Purpose

Legal basis

Providing the Services, billing, support

Performance of a contract

Security, fraud prevention, product improvement, B2B marketing

Legitimate interests

Non-essential cookies, analytics and advertising cookies, marketing emails to individuals

Consent

Tax, accounting, and legal record-keeping

Legal obligation

 

Where we rely on consent, you may withdraw it at any time; withdrawal does not affect processing already carried out.

6. How We Share Information

We do not sell your personal information for money. Certain analytics and advertising cookie practices may qualify as a “sale” or “sharing” under California law; Section 10 explains how to opt out.

 

We share information with:

 

  • Service providers who work on our behalf under contract: hosting and cloud infrastructure, payment processing, email delivery, customer support tooling, analytics, error monitoring, and AI model providers.
  • Advertising platforms and exchanges, where you engage our programmatic advertising services or where advertising cookies are enabled with consent.
  • Other users’ audiences, where you publish a microsite or campaign — content you publish is public by design.
  • Professional advisors, including lawyers, accountants, and auditors, under confidentiality obligations.
  • Authorities, when required by law, subpoena, court order, or to protect the rights, property, or safety of Music Supremacy, our users, or the public.
  • A successor entity, in connection with a merger, acquisition, financing, reorganization, or sale of assets. We will notify you if your information becomes subject to a materially different privacy policy.

 

We require service providers to protect your information and to use it only for the purposes we specify.

7. Cookies and Tracking

We use cookies, pixels, local storage, and similar technologies for:

 

  • Strictly necessary: login sessions, security, load balancing, and fraud prevention. These cannot be disabled.
  • Functional: remembering preferences, language, and interface settings.
  • Analytics: understanding how the site and campaigns are used, in aggregate.
  • Advertising: measuring campaign performance, retargeting, and conversion attribution.

 

Where required by law, we request consent before setting non-essential cookies through [COOKIE TOOL]. You can change your choices at any time via the cookie settings link in our footer, and you can block or delete cookies in your browser settings — though strictly necessary cookies are needed for the Services to function.

 

Do Not Track. Browsers send Do Not Track signals inconsistently and there is no agreed standard, so we do not respond to DNT. We do honor Global Privacy Control (GPC) signals as an opt-out of sale and sharing where required.

8. Data Retention

We keep personal information only as long as needed for the purposes described here, then delete or anonymize it.

 

Data

Typical retention

Account and profile data

For the life of the account, then [e.g., 30] days after cancellation

Billing and transaction records

[e.g., 7] years, to meet tax and accounting obligations

Content, microsites, campaign assets

For the life of the account, then [e.g., 30] days after cancellation

QR scan and campaign analytics

[e.g., 24] months, then aggregated or deleted

Server and security logs

[e.g., 12] months

Support correspondence

[e.g., 3] years

Marketing contacts

Until you unsubscribe, plus a suppression record to honor your opt-out

 

Backup copies may persist for a limited additional period as part of routine systems operation. Where we act as a processor, retention follows the instructions of the subscriber who controls that data.

9. Your Rights (EEA, UK, and Similar Regimes)

Subject to applicable law, you may have the right to:

 

  • Access the personal information we hold about you;
  • Correct inaccurate or incomplete information;
  • Delete your information (“right to be forgotten”);
  • Restrict or object to processing, including direct marketing;
  • Portability — receive your data in a structured, machine-readable format;
  • Withdraw consent at any time;
  • Lodge a complaint with your supervisory authority. In the UK this is the Information Commissioner’s Office; in the EEA it is your national data protection authority.

 

To exercise a right, email privacy(at)musicsupremacy(dot)com. We will verify your identity and respond within the period required by law — generally 30 days, extendable where permitted. We do not charge a fee unless a request is manifestly unfounded or excessive.

10. California Privacy Rights (CCPA / CPRA)

California residents have the right to know what personal information we collect, use, disclose, and sell or share; to delete personal information; to correct inaccurate information; to opt out of sale or sharing and of targeted advertising; to limit use of sensitive personal information; and not to be discriminated against for exercising these rights.

 

In the preceding 12 months we have collected the following categories of personal information: identifiers; customer records; commercial information; internet or network activity; approximate geolocation derived from IP; audio, electronic, or visual information you upload; and inferences drawn for product and marketing purposes. Sources, purposes, and disclosure categories are described in Sections 3, 4, and 6.

 

We do not knowingly sell or share the personal information of anyone under 16.

 

To submit a request, email privacy(at)musicsupremacy(dot)com or use the “Your Privacy Choices” link in our footer. Authorized agents may submit requests with written proof of authorization. We will verify your identity using the information already associated with your account.

 

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have substantially similar rights, including the right to appeal a denied request by replying to our decision.

11. International Transfers

We are based in [STATE/COUNTRY] and use service providers located in various countries. If you are located outside that country, your information will be transferred to and processed there, where data protection laws may differ.

 

Where we transfer personal information out of the EEA or UK, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, together with supplementary measures where needed. You may request a copy of the relevant safeguards by writing to privacy(at)musicsupremacy(dot)com.

12. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), access controls and least-privilege permissions, hashed passwords, logging and monitoring, and vendor due diligence.

 

No system is perfectly secure. We cannot guarantee absolute security, and you are responsible for keeping your password confidential and for using a strong, unique password. Notify us immediately at contact(at)musicsupremacy(dot)com if you suspect unauthorized access.

 

If a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by applicable law.

13. Children’s Privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact privacy(at)musicsupremacy(dot)com and we will delete it.

 

Note for subscribers: if your fanbase includes minors, you are responsible for complying with COPPA, the GDPR’s child consent rules, and similar laws when collecting data through campaigns you build on our platform.

14. Marketing Communications

You may opt out of marketing email at any time using the unsubscribe link in any message or by emailing privacy(at)musicsupremacy(dot)com. We will process opt-outs promptly and keep a suppression record so we do not contact you again.

 

You cannot opt out of transactional and service messages — billing receipts, renewal notices, security alerts, and changes to terms — while you hold an active account.

15. Third-Party Sites and Platforms

The Services link to and integrate with third-party platforms, including social networks, streaming services, advertising exchanges, and payment processors. We do not control their privacy practices, and this Policy does not apply to them. Review their privacy policies before sharing information with them.

16. Subscriber Obligations

If you use our tools to collect personal information from fans, customers, or audiences, you are the controller of that data and you must:

 

  • Have a lawful basis for collection and use;
  • Provide your own privacy notice to the people whose data you collect;
  • Obtain any required consent, including for cookies, tracking, and marketing;
  • Honor access, deletion, and opt-out requests you receive;
  • Comply with GDPR, UK GDPR, CCPA/CPRA, CAN-SPAM, CASL, and other applicable laws;
  • Not use our tools to collect sensitive categories of data without an appropriate legal basis and safeguards.

 

If you require a Data Processing Agreement, request one at privacy(at)musicsupremacy(dot)com.

17. Changes to This Policy

We may update this Policy. Material changes will be posted here with a revised “Last Updated” date and, where legally required or materially adverse to you, communicated by email or in-account notice before taking effect. Continued use of the Services after the effective date constitutes acceptance.

18. Contact Us

Oida Industries d/b/a Music Supremacy Privacy inquiries: privacy(at)musicsupremacy(dot)com General support: contact(at)musicsupremacy(dot)com Address: 1835 East Hallandale Beach Boulevard #176, Hallandale Beach, FL 33009 Web: https://musicsupremacy.com/contact/