Privacy Policy

We use your personal data for the following purposes:

• a.Providing the service — Creating accounts, managing profiles, processing song requests, enabling live sessions, and delivering platform features.
• b.Processing payments — Managing subscriptions, processing tips, facilitating performer payouts via Stripe Connect, and maintaining financial records.
• c.Music integrations — Connecting to Tidal and Apple Music to enable playlist management and track search features.
• d.Platform improvement — Analysing usage patterns, monitoring performance, and improving features and user experience.
• e.Safety & compliance — Detecting and preventing fraud, abuse, and suspicious tipping activity. Enforcing our terms of use and complying with legal obligations.
• f.Communications — Sending transactional emails (e.g. login links, payment confirmations), responding to support requests, and platform announcements.

We process your data under the following legal bases:

Where we rely on consent, you may withdraw it at any time by contacting us or using in-platform controls. Withdrawal does not affect the lawfulness of prior processing.

We share data with the following third-party service providers who process it on our behalf or as independent controllers:

We do not sell your personal data to any third party. Data is only shared where necessary to provide the service, comply with legal obligations, or with your explicit consent.

We retain your data only for as long as necessary to fulfil the purposes described in this policy:

• •Account data — Retained while your account is active and for a reasonable period after deletion to resolve disputes.
• •Financial records — Retained for a minimum of 6 years as required by UK tax and accounting regulations.
• •Song requests & tips — Retained as part of session history for performer analytics.
• •Music platform tokens — Deleted immediately when you disconnect a music service.
• •Analytics data — Retained in aggregated or anonymised form for platform improvement.

You may request deletion of your data at any time (see Your Rights below).

Under UK GDPR and EU GDPR, you have the following rights:

• •Right of access — Request a copy of the personal data we hold about you.
• •Right to rectification — Request correction of inaccurate or incomplete data.
• •Right to erasure — Request deletion of your personal data (“right to be forgotten”).
• •Right to restrict processing — Request that we limit how we use your data.
• •Right to data portability — Receive your data in a structured, machine-readable format.
• •Right to object — Object to processing based on legitimate interests or for direct marketing.
• •Right to withdraw consent — Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at privacy@request-it.live. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or the Data Protection Commission (DPC) in Ireland.

We use cookies and similar technologies for the following purposes:

We do not use third-party advertising cookies or tracking pixels.

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS/TLS)
• Row-level security policies on database tables
• Secure authentication via magic links and OAuth (no passwords stored)
• PCI-DSS compliant payment processing through Stripe
• Access controls limiting data access to authorised personnel
• Regular monitoring for suspicious activity

While we take all reasonable precautions, no system is completely secure. In the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority as required by law.