Privacy policy

Who we are

Traxure is a catalog monitoring service run by Thursdays At Midnight LLC ("Traxure", "we", "us"). We decide how the personal information described here is used, which makes us responsible for it. Questions go to hello@traxure.com.

This policy covers traxure.com, the Traxure workspace and the alerts we send. It does not cover the music platforms, payment pages or other services we link to; their own policies apply there.

What you give us

We collect what you enter or upload when you use Traxure:

• Account details: your email address and password (kept only as a secure hash by our sign-in provider), or, if you sign in with Google, the name, email address and profile picture Google shares with us.
• Workspace details: your workspace name and the teammates you invite, with their email addresses and roles.
• Artist details: the artist profiles and platform links you connect, the releases you import and their identifiers (such as ISRC and UPC), your notes and your answers to alerts.
• Verification material: the screenshots or other evidence you send to show you control or manage an artist. It is stored privately and seen only by the people who review it.
• Alert settings: the channels you turn on and where they go, such as a mobile number for texts, a browser for push notifications, or a Slack, Discord or webhook address.
• Billing details: your plan, trial and subscription status. Link, a Stripe company, sells Traxure subscriptions as the merchant of record, so it collects your name, billing address and payment details at checkout under its own privacy policy. We receive your plan, subscription status, billing country and the tax charged, never your full card number.
• One-time catalog scan: if you buy a catalog scan, Stripe gives us the email address you entered at checkout. We use it to send your sign-in link, and it becomes your account's email when you open that link.
• Free catalog scan: the email address you type to start a scan, the artists you scan, how far each scan got and when you agreed to these terms. We use it to remind you about your scan and to send you offers on Traxure plans; every such email has an unsubscribe link.
• Messages: what you write when you email support or sales, or ask the assistant in your dashboard.

What we collect automatically

When you visit traxure.com or use the workspace we also collect:

• Sign-in session: a cookie that keeps you signed in.
• Preferences saved in your browser: theme, language, motion setting, your cookie choice and the plan you picked before signing up.
• Server and security logs: IP address, browser type, pages requested, sign-in events and error details, used to keep Traxure running and secure.
• Anonymous page views: when analytics is on, our analytics provider counts page visits, referring sites, country and device type. It sets no cookies and does not follow you across other websites.
• Advertising measurement: unless you opt out, Meta Pixel and Reddit Pixel measure eligible public page visits. Meta also measures checkout starts. Our server reports verified trial starts and first paid subscriptions to Meta and Reddit, and paid one-time scans to Meta, with browser or ad-click identifiers, browser type, IP address, a hashed email for matching and the amount and currency paid. Each provider receives connection information, such as your IP address, when receiving a browser event. Trials and purchases are reported only from verified server checkout and payment records. Your catalog, artist verification material, private workspace content and card details are never included in advertising events.
• Bot protection: when a CAPTCHA appears on a sign-in form, our bot-protection provider collects device and interaction data to tell people from bots, under its own privacy policy.

What we get from music platforms

To monitor your catalog we read public catalog information through official APIs, such as the Spotify Web API and the YouTube Data API, through licensed data providers, and from the public pages platforms show to everyone, which a web-reading service fetches for us. This is information about artists and releases: names, titles, artwork, track lists, identifiers, release dates and whether a release is visible on a profile. Artist photos and artwork load directly from the platforms' image servers.

We never ask for your streaming passwords, and we do not read your listening history, playlists or private platform accounts.

YouTube API Services

Traxure uses YouTube API Services. When you add a YouTube channel, we read that channel's public information and public video details, such as titles, identifiers and publish dates, through the YouTube Data API to check your releases. We store those details with your workspace and delete them when you remove the channel or your workspace.

We do not ask for access to your YouTube or Google account through YouTube API Services. By using Traxure's YouTube features you agree to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy.

If you sign in to Traxure with Google, you can remove Traxure's access at any time from your Google Account's security settings; you will then need another way to sign in.

YouTube Terms of Service (opens in a new tab)Google Privacy Policy (opens in a new tab)Google security settings (opens in a new tab)

How we use information

We use personal information to:

• run Traxure: connect your artist, import releases, run scheduled checks and show the results;
• send the alerts you choose, plus account, security and billing notices;
• review artist verification requests;
• process payments and manage your plan and free trial;
• keep Traxure secure by preventing fraud, abuse and unauthorized access, and fix problems;
• answer support requests;
• email people who ran a free catalog scan about their scan and Traxure plan offers, until they unsubscribe;
• improve Traxure using aggregated, de-identified usage;
• meet legal obligations and enforce our terms.

We do not sell your personal information or use your uploads to train AI models. We show no ads in Traxure. Unless you opt out, we share limited information with Meta and Reddit to measure and improve our ads; this may be considered sharing for cross-context behavioral advertising under some US state laws. Advertising is on by default. You can turn it off in Cookie settings at the bottom of any page, and doing so does not affect your account or subscription.

Legal bases (EEA, UK and Switzerland)

Where these laws apply, we rely on:

• Contract: to provide the service you signed up for and bill for it.
• Legitimate interests: to secure Traxure, prevent abuse, verify artist authority, understand how the site is used and measure our advertising unless you opt out, balanced against your rights.
• Consent: for text message alerts, push notifications and, where required, analytics. You can withdraw consent at any time.
• Legal obligation: to keep tax and payment records and answer lawful requests.

Who we share it with

We share personal information only in these ways:

• Service providers that host, secure and deliver Traxure for us, such as hosting, email and payment providers, under contracts that limit how they use it. Link, a Stripe company, sells and bills subscriptions as the merchant of record and handles your payment details as its own controller under the Link Privacy Policy.
• Destinations you choose: alerts go to the email, phone, browser, Slack, Discord or webhook you set up, and your workspace is visible to the teammates you invite.
• Artist verification: our review team sees your verification material. We do not send it to platforms or distributors.
• Advertising measurement: unless you opt out, Meta and Reddit can receive public page visits, browser or ad-click identifiers and verified conversion information; Meta can also receive checkout starts. Our server reports trial starts, first paid subscriptions and paid one-time scans. Each handles this information under its own privacy policy and business terms. We do not send music, verification material, passwords or payment card details.
• Legal and safety: when the law requires it, or to protect the rights, property or safety of our users, the public or Traxure.
• Business changes: if Traxure is merged, acquired or sold, information may move to the new owner under this policy, and we will tell you.

We do not sell your data, and we never contact platforms or distributors on your behalf.

Data processingLink Privacy Policy (opens in a new tab)Meta Privacy Policy (opens in a new tab)Meta Business Tools Terms (opens in a new tab)Reddit Privacy Policy (opens in a new tab)

Cookies and similar technologies

Traxure uses an essential cookie to keep you signed in and your browser's local storage to remember preferences such as theme, language and your advertising choice. Advertising is on by default. Unless you opt out, Meta uses _fbp and _fbc identifiers, while Reddit Pixel uses the _rdt_uuid browser identifier and _rdt_cid ad-click identifier, to connect eligible public page activity with our ads. These advertising cookies expire after 90 days.

Anonymous page counts are on by default and use no cookies. Choose Decline all, or switch off Statistics, under Cookie settings at the bottom of any page to turn them off. If your browser sends a Global Privacy Control or Do Not Track signal, analytics starts off and stays off unless you turn it on.

Advertising is a separate choice from Statistics. Decline all or switch off Advertising in Cookie settings to revoke browser measurement, delete our advertising cookies and cancel pending account conversions when you are signed in. If you are signed out, we retain the withdrawal request and retry after sign-in. If the account update fails, we show a retry message and retry when you reconnect. Global Privacy Control and Do Not Track always keep advertising off. Withdrawal stops future events; it cannot recall events already received by Meta or Reddit.

If you open a friend's invite link, an essential cookie remembers their invite code for 30 days so the discount can be applied at checkout.

When a bot check is shown, the bot-protection provider may set its own security cookie. The checkout pages and Google sign-in set cookies on their own sites to process payments and sign you in. You can block or delete cookies in your browser settings, though blocking the sign-in cookie signs you out.

Text message alerts

Texts are optional account alerts that you turn on in Settings by saving your mobile number and agreeing to receive them. We record when you agreed and the exact wording. Message frequency varies, and message and data rates may apply. Reply STOP to opt out or HELP for help. Your number is used only to send the alerts you chose; our text message provider receives it only to deliver them. We never share mobile numbers or text consent with third parties or affiliates for marketing or promotional purposes.

How long we keep it

We keep personal information only as long as we need it:

• Account, workspace, artist and alert data: while your account is open. When you delete your workspace or ask us to, we delete it within 30 days.
• Verification material: while the review and the approval it supports are in use, or until you ask us to delete it.
• Catalog data from platforms: only as long as each source's terms allow, after which it is removed or reduced to internal references.
• Billing records: as long as tax and accounting law requires, typically up to seven years. Link keeps its own sale and tax records.
• Free catalog scan emails: until you unsubscribe or ask us to delete them. After you unsubscribe we keep the address only on a do-not-email list, so we never write to it again.
• Text message consent records: as long as we may need to show that you agreed, even after you opt out.
• Advertising attribution: browser and ad-click identifiers, the email hash and browser type are eligible for matching for at most 30 days. Expired matching data is never sent and is cleared during the next cleanup; withdrawal clears it and cancels pending conversions. Minimal conversion receipts are retained to prevent duplicate reporting.
• Security logs: for a limited period, as needed to protect accounts and investigate abuse.
• Backups: deleted data can remain in encrypted backups until they are overwritten on their regular schedule.

Security

Data is encrypted in transit and at rest with our hosting providers. Each workspace is isolated at the database level, our team's access is limited to what the job needs and protected by multi-factor authentication, and secrets stay on our servers. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

Your rights and choices

Depending on where you live, you can ask us to:

• tell you what personal information we hold about you and give you a copy in a portable format;
• correct it;
• delete it;
• restrict or object to how we use it;
• withdraw a consent you gave;
• reconsider a decision we made about your request (an appeal).

Email hello@traxure.com from the address on your account. We verify the request and reply within 30 days, or within 45 days where US state law allows. Using these rights is free and never changes how we treat you. An authorized agent can act for you with your signed permission.

You can also turn alerts off in Settings, reply STOP to texts, choose Decline all under Cookie settings, and complain to your local data protection authority.

Deleting your data

Email hello@traxure.com and we delete everything tied to your workspace within 30 days, except records the law requires us to keep, such as billing records.

California and other US states

In the last 12 months we collected these categories of personal information, for the purposes described above:

• Identifiers: name, email address, mobile number, IP address and account IDs.
• Commercial information: your plan, trial and billing history.
• Internet activity: sign-in events, use of the workspace and anonymous site visits.
• Professional information: the artists, labels and releases you manage.
• Other information you provide, such as verification screenshots and messages.

We do not sell personal information or use sensitive personal information to infer characteristics about you. Unless you opt out, advertising measurement shares identifiers, limited internet activity and subscription conversion information with Meta or Reddit; this may be considered sharing for cross-context behavioral advertising. Use Decline all or turn off Advertising in Cookie settings to opt out, and we honor Global Privacy Control. We have no actual knowledge of selling or sharing information about anyone under 16. Your mobile number and text-message consent are never shared for marketing.

International transfers

Traxure is run from, and stores data in, the United States. If you use it from another country, your information is transferred to the US, where privacy laws may differ from yours. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses offered by our providers.

Children

Traxure is for adults managing music careers, and you must be 18 or older to create an account. We do not knowingly collect personal information from children under 13, or under 16 in the EEA and UK. If you think a child has given us information, email hello@traxure.com and we will delete it.

Spotify and other platforms

Spotify, YouTube and the other platforms Traxure checks have their own privacy policies for the data they hold. Traxure is not affiliated with any of them. Spotify is a third-party beneficiary of this Privacy Policy and of our Terms of Service.

Trademarks and independence

Changes to this policy

We update this policy as Traxure changes, and the date at the top shows the current version. If a change materially affects how we use your information, we will tell you by email or in the workspace before it takes effect.

Contact

Thursdays At Midnight LLC, operator of Traxure. Email hello@traxure.com with privacy questions and requests, or support@traxure.com for help with your account.