The data controller is Denis Markus Tibu, tax number (NIF) 260906697, registered at R. José Régio, Sintra, 2725-353 Algueirão-Mem Martins, Portugal. For any question about personal data, write to contact@settshow.site.

• Account: name, email and, if you sign in with Google, your Google account identifier and name (we never receive your Google password).
• Profile and billing: artist name, label or company, tax number (NIF) and address, which you enter for your invoice.
• Reviews and messages: if you leave a review, its text, rating and the name you choose to show (it becomes public once we approve it); and the messages you exchange with us in the chat.
• Campaigns: song title, artist name, the link to your song, notes, the start timestamp and the audio file (MP3) you upload.
• Payments and invoices: amount, date, transaction identifiers and the email of the PayPal account used to pay. We do not receive or store card details.
• Metrics: public numbers of the published posts (views, likes, comments, shares, saves). We do not collect personal data about the people who watch or interact with the posts.
• Visit statistics: we count visits to the site in an anonymous way (which pages are viewed, the country and the device type) with Vercel Web Analytics. It uses no cookies and does not identify you.
• Technical data: a session cookie to keep you signed in and technical server logs (for example IP address and access time) for security reasons.

• Providing the service (creating your account, receiving and managing campaigns, publishing, showing metrics, processing payments): performance of a contract.
• Invoicing and tax and accounting obligations: compliance with legal obligations.
• Security, preventing fraud and abuse, and improving the service: SettShow's legitimate interest.
• Service communications (confirmations, updates about your campaign): performance of a contract. We do not currently send marketing; if we ever do, it will be with your consent.

We do not take automated decisions with legal effects about you, and we do not build profiles for advertising.

We use service providers (processors) that handle data on our behalf and only for the purposes above:

• Supabase: database, authentication and file storage, hosted in the European Union (Ireland).
• Vercel: hosting of the application.
• PayPal: payment processing. PayPal is also responsible for the data it collects directly from you when you pay, under its own policy.
• Google: only if you choose to sign in with your Google account.
• Apify: service that automatically collects the public metrics of posts; it only receives the public addresses of the posts.

The content of your campaign (your song and the videos we make with it) becomes public when we publish it on SettShow's social media pages, which have their own privacy policies. We also share data with authorities when the law requires it. We do not sell your data.

Some providers may process data outside the European Economic Area (for example, in the United States). In those cases we require appropriate safeguards, such as the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.

• Account and profile: as long as your account exists. You can ask us to close it at any time.
• Invoices and payment records: 10 years, the retention period required by tax and accounting law, even if you close your account.
• Campaign files and details: up to 12 months after the campaign ends, unless you ask for earlier deletion.
• Technical security logs: for a short, proportionate period, normally up to 90 days.

At any time, you can:

• access your data and receive a copy;
• correct inaccurate data (you can edit much of it in your profile);
• ask for erasure, restriction of processing, or object to processing based on legitimate interest;
• ask for portability of the data you gave us;
• withdraw consent, where processing is based on it.

To exercise these rights, write to contact@settshow.site. We reply within one month. Some data (such as invoices) cannot be deleted while the law requires us to keep it. If you think we handle your data improperly, you can lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt.

We use essential cookies only: the session cookie that keeps you signed in. We do not use advertising or audience-analytics cookies. When you pay, PayPal loads its buttons and may set its own cookies, governed by PayPal's policy.

We protect data with encrypted connections (HTTPS), per-user access control (each customer only sees their own campaigns, orders and invoices), files in private storage and restricted team access. Still, no system is completely immune; if a data breach occurs that puts you at risk, we will tell you and the authorities, as the law requires.

The service is not intended for people under 18 and we do not knowingly collect data from minors. If you know this has happened, contact us so we can delete it.

We may update this policy. The date of the last update is shown at the top and we will tell you about significant changes. See also our Terms and Conditions.