Privacy Policy

• Account details — email address, display name, password (stored hashed), and, if you sign in with Google, the basic profile Google returns.
• Artist profile — store name, handle, bio, avatar, social links, and payout details you enter.
• Order details — items purchased, licence tier, amounts, and for physical orders your shipping address and phone number.
• Content you upload — audio masters, previews, artwork, photos submitted for personalised songs, and messages or support tickets you send.
• Usage data — pages and listings viewed, favourites, and basic technical logs such as IP address, browser type and timestamps.

We do not collect your full payment card number — Stripe handles that directly.

• To create and secure your account and authenticate you.
• To process orders, issue licences and certificates, and deliver files or physical goods.
• To calculate commission, balances and withdrawals for artists.
• To generate personalised songs and artwork you commission, using the brief and any photo you upload.
• To provide support, handle disputes, and detect fraud or abuse.
• To send transactional email (order updates, password resets, support replies) and platform announcements.
• To meet tax, accounting and other legal obligations.

We share only what is needed, with service providers acting on our instructions:

• Stripe — payments, tax calculation and artist payouts.
• Supabase (via Lovable Cloud) — database, authentication and file storage.
• Cloudflare R2 — storage of master files and uploaded media.
• AI generation providers — the brief, prompt and any photo needed to produce a commissioned song or image.
• Email delivery provider — sending transactional and account email.

When you buy a physical product, the seller receives the shipping and contact details required to fulfil your order. When you buy a licence, the seller sees the sale but not your payment details.

We may also disclose information where required by law, or as part of a business sale or restructure. We do not sell your personal information.

Artist store pages, listings, reviews you post, and public story pages for commissioned songs are visible to anyone. Story pages show the artwork, track and attribution associated with that code — avoid including anything in a brief, photo or review that you would not want to be public.

We use cookies and local storage that are necessary for the site to work: keeping you signed in, remembering your cart, and basic security. We use limited analytics to understand aggregate usage. We do not run third-party advertising trackers.

Data is stored with our cloud providers and may be processed outside Australia, including in the United States and the European Union. We use encryption in transit, access controls and row-level security so that accounts can only reach their own records. No system is perfectly secure, but we take reasonable steps to protect your information and will notify you and the regulator where required if a notifiable data breach occurs.

• Account and profile data — while your account is open.
• Order, licence and financial records — at least seven years, as required for tax and record-keeping.
• Uploaded media that is never used in a final order — removed automatically once it is no longer referenced.
• Support tickets and dispute records — for as long as needed to resolve and evidence the matter.

• Access or correct most of your details directly in your dashboard.
• Request a copy of your personal information, or ask us to delete it.
• Opt out of non-essential announcements; transactional email tied to orders cannot be switched off while you have active orders.

Deletion requests are honoured except where we must keep records for legal, tax or dispute reasons, and except for licences already issued to buyers.

Artiswap is not intended for people under 18. If we learn we have collected details from a child, we will delete them.

We will update this page when our practices change; the “last updated” date reflects the current version. To exercise a privacy right or make a complaint, raise a ticket on our support page. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

See also our Terms of Service.