Who we are
Street Banker is run by Street Banker Inc., a North Carolina corporation ("Street Banker", "we", "us"), 180 Main St, Rockwell, NC 28138, USA. This policy covers streetbankermusic.com and its suites (REACH, Tour, MOTION, The Room, Noise Lab, Company and those that join them later). Privacy questions and requests: hello@streetbankermusic.com, with "Privacy" in the subject line. Some members use Street Banker through a partner that puts its own brand on the app; this policy still applies, and Street Banker remains responsible for the data described here.
What we collect
We collect what you give us, what your tools create, and a small amount of technical data. We do not store card numbers; Stripe handles payment details.
- Members and team seats: name, email, password (stored scrambled, never readable), plan, time zone, settings, role and rooms for team seats, and sign-in and activity records.
- Artist profile and press kit: artist name, bio, location, genres, links, photos and press quotes.
- Music and files: audio, stems, masters, artwork, contracts, split sheets, statements and other files in the Vault, and recordings and transcripts made in the suites.
- Royalty and catalog data: statement lines, earnings, songs, ISRC and UPC codes, writers, splits and registrations, from files you upload and music databases we look up for you.
- Fans of an artist: name, email, city, how and when they signed up, what they agreed to receive, pre-saves, purchases and visits to that artist's pages.
- Tour crew and guests: names, phone numbers, roles, hotel and travel details and guest lists added by the member running the tour.
- Our own outreach (Operator Desk): names, roles, public contact details and notes about artists and industry contacts we may approach.
- Payments: plan, payment status, Stripe customer number and receipts, from Stripe.
- Applications: details sent with a distribution application, including the sender's internet address, passed to the distribution partner.
- Technical data: internet address, browser and device type, pages used and error reports.
Fan data you capture
When a fan subscribes on your campaign pages, we store their email with a consent record, on your behalf. Artists control this data; we process it. Fans can ask the artist, or us, to change or delete their details. Every email we send for an artist carries an unsubscribe link and says who sent it. Links in the emails we send a fan for an artist carry a code that credits their visits and button clicks on that artist's pages to their record, and the page passes it on after they sign up; nothing is stored on the fan's device for this. An artist can also bring fans in from their own Shopify store or Hypeddit account. Where a fan pre-saves, they sign in to Spotify directly; the email on their Spotify account is added to the artist's fan list, with the pre-save recorded as their consent, and they can unsubscribe from any email. The Spotify token is encrypted at rest and deleted once the release-day save completes.
Invitation requests
While accounts are by invitation, you can ask for one on the sign-up page. We keep the name, email and one-line note you give us and when you asked. For one day we also keep a scrambled code made from your connection's address (never the address itself), which only limits how many requests one connection can send. A copy of your request can be emailed to Street Banker's owner through Resend, our email provider. We use your email only to reply about an invitation. Once a request is answered (an invitation made, or set aside), it is deleted 90 days after you sent it. A request still waiting is kept until it is answered.
How we use it
We use data to run the service you signed up for:
- accounts, sign-in, team seats and the suites;
- reading statements, catalogs and registrations to show earnings, gaps and possible missing money;
- looking up public music data about your own music;
- sending fan emails and reminders an artist sets up, only to fans who agreed;
- account and billing emails, payments and the billing records tax law requires;
- AI tools you choose to use;
- keeping the service safe: stopping bots and abuse, fixing errors and keeping backups;
- reaching out to artists and industry contacts about Street Banker (anyone can ask us to stop);
- improving the service using counts and usage patterns.
What we don't do
We don't sell personal data or share it for advertising. We don't use your uploads to train AI models, and we don't let our service providers do it either: your recordings, stems, lyrics, prompts, images, video and documents are never used to train, tune, test or improve a general or shared model, with or without your name on them. Running a feature you asked for on your own project is not model training; a model trained just for you would need its own written agreement first. We use service measurements and combined, anonymous usage data to keep the service secure, reliable and billed correctly, never to rebuild or reveal your content. We don't read fan tokens for anything beyond the save and the consented email. Your private content never appears in our advertising, case studies, public demos or endorsements without a separate permission from you. Agreeing to the terms, acknowledging this policy, agreeing to a recurring charge, agreeing to marketing email and any optional AI-training permission are separate choices, never bundled.
Service providers
We share data only with these companies, only for the job listed, and under their own privacy terms:
- Render: hosts the app and its databases in the USA.
- Cloudflare: stores uploaded files and backups (R2) and checks forms for bots (Turnstile).
- Stripe: takes payments and manages subscriptions.
- Resend: sends email, including fan emails an artist sends.
- Sentry: records errors so we can fix them.
- OpenAI, ElevenLabs and RoEx: power AI writing, image, voice and audio tools you choose to use, receiving only what you send to that tool.
- ACRCloud: recognises songs from audio.
- Shopify and Hypeddit: when an artist connects them, bring that artist's customers or fans in.
- Symphonic (through HubSpot): receives distribution applications.
- Music data services we look things up in, sending song and artist names or codes, not member contact details: Soundcharts, Songstats, The MLC, MusicBrainz, Deezer, Discogs, Spotify, YouTube and Google (including map lookups and news), Bandsintown, Ticketmaster and Eventbrite.
- We also share data when the law requires it, to protect people from harm, or if Street Banker is sold or merged (the buyer would be bound by this policy).
Cookies
We use a few cookies to keep you signed in and remember simple choices. No advertising or cross-site tracking cookies.
- session: keeps you signed in, until you close the browser, or 31 days if you tick "remember me".
- sb_back: remembers that this browser has visited before; 1 year.
- sb_tutor: remembers whether you turned the on-page guide on or off; 1 year.
- sbcv_ (one per smart link): remembers which version of an artist's smart link a visitor saw; 90 days.
- sb_demo_lead: remembers the email of someone who asked for a demo; 90 days.
- Cloudflare Turnstile: checks a form is sent by a person, not a bot; short-lived.
- The app also keeps a few small settings in your browser's own storage, such as a "remember my email" choice.
Retention and deletion
Your data stays while your account is open. You can delete your account at any time in Settings. To have every copy removed, including files you uploaded and your data in the suites, email us and we will do it within 30 days, except records we must keep by law (billing records, usually 7 years). We back up the app every night to Cloudflare in the USA and keep each backup for 35 days, so deleted data leaves the backups within 35 days.
Your rights
Wherever you live, you can see and correct your details in Settings, delete your account, get a copy of your data (artists can download their fan list; for everything else, email us and we send it within 30 days), stop marketing emails with the unsubscribe link, and ask what we hold about you or ask us to stop a use you object to. In California, the EU and the UK these are rights under law, and you can complain to your local data protection authority. We may ask you to confirm who you are first.
Where data is stored
Street Banker is run from the USA and data is stored in the USA. If you use it from another country, your data is sent to and kept in the USA.
Children
Accounts are for people 13 and over (16 in the EU), and paid plans for people 18 and over. We delete data we learn came from a child under 13.
Security
Passwords are stored scrambled, connections are encrypted, fan tokens are encrypted, forms have bot checks, and team members reach only what they are given. No system is perfect; we will tell affected people about a breach as the law requires.
Changes
We post any change here with a new date, and tell members about important changes first.
Contact
Street Banker Inc., 180 Main St, Rockwell, NC 28138, USA. hello@streetbankermusic.com
Questions: hello@streetbankermusic.com