Privacy Policy

Last updated: 29 March 2026

ABLE Music (“ABLE”, “we”, “us”) operates ablemusic.co. This policy explains what personal data we collect, why we collect it, and what rights you have over it. We are the data controller under UK GDPR.

Contact: privacy@ablemusic.co

1. Data we collect and why

Artists

• Profile data (name, bio, links, images) — to display your public page. Legal basis: contract.
• Email address — for your account and magic-link sign-in. Legal basis: contract.
• Billing information — processed by Stripe for paid plans. We do not store card details. Legal basis: contract.
• Usage analytics — page views and CTA clicks on your profile, aggregated. Legal basis: legitimate interests.

Fans

• Email address — collected when you sign up on an artist’s page. Stored on behalf of the artist. Legal basis: consent (Article 6(1)(a) UK GDPR).
• Your email is passed to the artist whose page you signed up on. ABLE acts as a data processor on the artist’s behalf. The artist is the data controller for their fan list.

2. Who we share data with

We use the following sub-processors:

• Supabase (EU region) — database and authentication
• Railway (US) — application hosting
• Resend — transactional and broadcast email delivery
• Stripe — payment processing
• PostHog (EU region) — product analytics (anonymised)
• Sentry — error monitoring (no PII in error reports)

We do not sell personal data. We do not share data with advertisers.

3. How long we keep data

• Artist profile data: for as long as the account is active, then 90 days after deletion request.
• Fan email addresses: until the artist deletes them or the artist account is deleted.
• Analytics events: 12 months rolling.
• Billing records: 7 years (legal requirement).

4. Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the data we hold about you
• Erasure — ask us to delete your data
• Correction — ask us to correct inaccurate data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — fans can unsubscribe from an artist’s list at any time by contacting the artist or emailing us

To exercise any right: privacy@ablemusic.co. We will respond within 30 days.

5. Cookies

We use a single session cookie for authentication. We do not use third-party advertising cookies. Analytics are server-side and anonymised.

6. Complaints

You have the right to lodge a complaint with the ICO (Information Commissioner’s Office): ico.org.uk

7. Changes

We will post updates to this page with a revised date. For significant changes, we will notify artists by email.