Privacy Policy

Your privacy is important to us. This Privacy Policy explains how ToneLot collects, uses, and protects your information.

Information We Collect

Account information (email, username, profile details)
When you choose Google sign-in, the Google account identifier, verified email address, and basic profile information made available through Firebase Authentication
When you connect X, the X account identifier and public handle made available through Firebase Authentication so ToneLot can show a verified profile link
Email-verification status used to protect marketplace and messaging features
Authenticator-app enrollment information and one-time security codes processed by Firebase Authentication when you choose to enable two-factor authentication
Date of birth and age group used to enforce the 13+ account rule and 18+ payout rule
Transaction and payment data (for purchases and payouts), including a PayPal-confirmed payout email, PayPal payer ID, any account-status information PayPal shares, destination-change hold, and payout-review records when PayPal is used
Stripe wallet status, balances, payout history, and payment-account identifiers needed to route seller earnings
Usage data (site activity, messages, uploads)
When advertising is enabled, Google and its advertising partners may collect device, browser, approximate-location, cookie or local-storage, and advertisement-interaction data directly from your browser
Producer-invite and anti-fraud data, including invite codes, inviter, producer, and buyer account identifiers, qualifying first-sale records, reward amounts, review status, account-age and verification signals, and non-card-number payment-method fingerprints returned by Stripe
Copyright notices and counter-notices, including legal name, company, email, phone, mailing address, signature, claimed works, material locations, declarations, and review history

How We Use Your Information

To provide and improve our services
To enforce the 13+ account requirement, apply protections for users ages 13–17, and determine when age-sensitive payout features must remain restricted
To process purchases, display real Stripe pending and available balances, initiate seller-requested bank payouts, verify a PayPal destination, review the first PayPal payout, and automatically send later eligible cleared balances after the applicable hold
To communicate with you about your account or activity
To display, measure, limit the frequency of, and prevent fraud involving advertisements, subject to your consent choices and applicable law
To assign Founding Producer numbers, review first-sale producer referrals, identify linked or dummy accounts and reused payment or payout identities, credit approved balances, and reject or reverse rewards tied to fraudulent, refunded, or disputed sales
To require control of a verified email before uploads, marketplace sales, or direct messaging
To protect enrolled accounts by requiring an authenticator code after the primary sign-in method
To review copyright claims, locate or disable reported material, process counter-notices, notify affected users, and maintain repeat-infringer records
To comply with legal obligations

How We Protect Your Information

We use industry-standard security measures
Google sign-in is processed by Google and Firebase Authentication; ToneLot does not receive or store your Google password
X account connection is processed by X and Firebase Authentication; ToneLot does not receive or store your X password
Your date of birth is stored in your private account record and is not displayed on your public profile
Two-factor setup keys and one-time codes are handled by Firebase Authentication and are not displayed on your public ToneLot profile
Bank details and identity-verification documents are collected and stored by Stripe; ToneLot does not receive or store complete bank account numbers
We do not sell your personal information to third parties
Access to your data is restricted to authorized personnel only
Copyright-claim contact information is stored in a server-only case record and is not exposed through public Firestore access; applicable law may require sharing a notice or counter-notice with the affected parties
A Founding Producer number and any unexpired legacy Lot Boost status are public profile details; invite relationships, qualifying-sale records, and referral-reward ledgers are not displayed publicly

Advertising and Cookies

ToneLot may use Google AdSense to display clearly identified advertisements
Google and its partners may use cookies or similar technologies to serve and measure ads and, where permitted, personalize them
Where consent is legally required, you will be given a choice before personalized advertising data is used
You can manage Google advertising preferences through My Ad Center and can also control cookies through your browser
Learn more about how Google uses information from sites that use its services in Google’s partner-sites notice

Teen Accounts

ToneLot does not permit accounts for children under 13
Users ages 13–17 may create accounts and use posting, commenting, buying, and selling features
Users may list and sell beats before completing payout setup; their seller share is recorded in a held ToneLot balance until payout requirements are complete
Stripe payout onboarding is unavailable before age 18; after age 18, Stripe separately collects and verifies identity, date-of-birth, tax, bank, and payout information before withdrawals are enabled

Your Rights

You can update your account or permanently delete it from Settings
Account deletion removes your login, public profile, private account details, settings, notifications, and marketplace listings
Account deletion is blocked while seller funds or payouts remain unresolved so money is not abandoned
Purchased beat files and limited transaction records may be retained as needed to serve completed purchases, prevent fraud, handle disputes, meet tax and legal obligations, and protect other users
You can request access to your data
Contact us at 9mmullen12@gmail.com for privacy questions

Last updated: September 22, 2026