Privacy Policy

Last updated 14 November 2026

This Policy explains what personal data Limited Liability Partnership “OZEN XO”, BIN 190440002324 (“popp.now”, “we”, “us”) collects when you use popp.now, why, who we share it with and what rights you have. It is drawn up under the Law of the Republic of Kazakhstan “On Personal Data and Its Protection” and, for users in the EU, EEA and UK, the GDPR. We are the controller of your data.

1. What we collect

• Account data — email address, artist name and your password, stored only as an irreversible hash.
• Suno data — when you paste a Suno link we fetch the track’s public details from Suno: title, lyrics, style tags, artwork, audio and the creator’s public profile name and picture.
• Release data — the details you enter or edit (title, artist name, genre, language, release date, explicit flag, lyrics), the audio and artwork you upload, and identifiers such as ISRC and UPC.
• Rights confirmation — the statement you confirm before release, with its time and your IP address, kept as evidence.
• Payment data — the plan, amount, status and transaction identifiers of your orders. Card details are entered on the payment provider’s page; we never receive or store your card number.
• Reporting data — stream and revenue statistics stores send us about your releases.
• Technical data — IP address, browser details, request times and error logs, needed for security and diagnostics.
• Usage analytics — which pages you open and which buttons you press, page load speed and, for some visits, a recording of how you move through the page (clicks, scrolling and what appears on screen), to see where the release flow gets stuck. Everything you type into form fields, including passwords and email addresses, is hidden in recordings. Collected with PostHog without cookies or other storage on your device, so you are not recognised across visits. Recordings are deleted automatically after 30 days.

2. Why we use it

To create and run your account (performance of our contract with you); to prepare, review and deliver your releases and show their statistics (contract); to take payments and handle refunds (contract and legal duties); to prevent fraud and abuse and keep the service secure (legitimate interest); to answer your messages; and to meet tax, accounting and other legal obligations. We do not sell personal data and do not use it for third-party advertising.

3. Who we share it with

• Music aggregators and stores (for example FUGA, Spotify, Apple Music, YouTube Music, Amazon, Yandex Music) — release details, audio and artwork, to publish your release. Artist name, titles, artwork and credits become public.
• Tiptop Pay — to process payments and refunds.
• Infrastructure providers — hosting, file storage and email delivery, acting on our instructions only.
• PostHog (servers in the US) — usage analytics, acting on our instructions only.
• Authorities — only on a lawful demand.

4. International transfers

Stores, aggregators and infrastructure providers are located in different countries, so your data is transferred outside your country, including outside Kazakhstan and the EEA. Music distribution is impossible without it. We transfer only what is needed and only to recipients that protect it, using standard contractual safeguards where the law requires them.

5. How long we keep it

Account and release data are kept while your account is open. Payment records are kept for the periods set by tax and accounting law. Details of releases already published are kept after your account closes, as they are needed to handle store reports and claims for past periods. Unfinished guest drafts are kept until you finish the release or ask us to delete them.

6. Your rights

You may ask us to tell you what data we hold about you and give you a copy, correct it, delete it, restrict or object to its processing, or withdraw your consent. You may also complain to your data protection authority. Write to support@popp.now — we reply within the time set by law, normally within 30 days. Deleting your account does not by itself remove releases already in stores; ask us for a takedown if you want that too.

7. Cookies and local storage

We use only what the site cannot work without: a sign-in cookie that keeps your session, and your browser’s local storage to remember an unfinished release on this device. Usage analytics stores nothing on your device. There are no advertising or third-party tracking cookies, so we do not ask for cookie consent. Blocking cookies makes signing in impossible.

8. Security

Connections are encrypted, passwords are hashed and staff access is limited by role. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

9. Children

popp.now is not intended for anyone under 18. If you believe a minor has signed up, tell us and we will delete the account.

10. Changes

We may update this Policy. The current version is always on this page with its date; we will email you about material changes.

11. Contact

Limited Liability Partnership “OZEN XO”, BIN 190440002324, Republic of Kazakhstan. For privacy matters: support@popp.now.