Privacy policy

Last updated: 29 September 2026

Data controller

NAYSOF IBÉRICA, S.L. · Tax ID B93682623 · Paseo de Reding 43, 1º Izda, 29016 Málaga (España) · hola@naysof.es

What data we process and why

• Waitlist: your email, the role you are interested in, your music scenes, your language and, if applicable, the code of the person who invited you. We use them to manage your spot and email you about the launch. Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time.
• Account and profile: email, password (stored encrypted), username, name, bio, photo, links, language, music tastes, who you follow and the events you sign up for. Your public profile shows your username, name, bio, photo, links and songs. Legal basis: providing the service you sign up for (art. 6.1.b GDPR).
• Songs you upload: the audio file, cover, title, lyrics and the information you give us about how you made it (tool and plan, date, link if you give it, lyrics origin, collecting society membership), your declarations and the license you accepted with date and time, the proof of your plan, your statement that you are over 18, and data we calculate from the file (a digital fingerprint of the file, an audio fingerprint and its provenance seal, C2PA) and from the lyrics (a fingerprint of each line, to compare them). We use them to publish the song, check that it meets the rules and defend ourselves against claims. Legal basis: providing the service (art. 6.1.b), our legitimate interest in preventing infringements (art. 6.1.f) and our legal obligations as a hosting platform (Regulation (EU) 2022/2065 and Royal Decree-Law 24/2021).
• Reports: if you report content, your name, email and the text of your report. We only use them to handle it and keep a record. Legal basis: legal obligation (art. 16 of Regulation (EU) 2022/2065).

Automated checks

When you upload a song, an automated system with fixed rules (no generative AI) checks its provenance seal and, if it is a Suno song, asks Suno whether it generated it. It compares its audio fingerprint with the songs on Soundtropic and with removed ones, compares its lyrics with the other lyrics on Soundtropic, and takes into account whether you attached proof of your plan and whether you already have songs published without issues.

The lyrics comparison is internal: we store a fingerprint of each line, we do not send your lyrics to anyone for this and we do not use them to train AI.

With that result the song goes live on its own, goes to review by a person or, in two clear cases (you had already uploaded that song, or it matches a removed one), is rejected automatically. We always tell you when a decision was automated. You have the right to have a person review it, to give your point of view and to contest it (art. 22 GDPR): just appeal from “My songs”. We never apply a penalty based only on an automated tool. More details in the Terms and conditions and the AI & rights policy.

Recipients

We do not sell your data. We only share it with these providers, to run the service:

• Supabase (database, accounts and files), in the European Union (Paris region), as data processor.
• Hetzner Online (servers for the website and for audio processing), in Germany, as data processor.
• Resend (sending emails: account confirmation and notices), based in the United States, as data processor.
• Suno (United States): if you say a song was made with Suno, we send Suno a temporary link to the audio file so it can confirm whether Suno generated it. We only send the audio, never your name or email.

Transfers to the United States are made with the safeguards required by the GDPR (European Commission standard contractual clauses or, where the company adheres to it, the EU-US Data Privacy Framework). We will also provide data to the authorities and courts when the law requires it.

Retention

• Waitlist: until launch and at most 12 months after it, unless you create an account or ask us to delete it.
• Account: while you keep it. If you delete it, we delete your profile.
• Songs: while they are on Soundtropic. Even if a song is deleted, we keep the original file, your declarations, the proof and the audio fingerprint for as long as the law requires or as needed to defend ourselves against a claim. If a song was removed for infringing rights, we keep its fingerprint so it cannot be uploaded again.
• Reports: for as long as needed to handle them and, afterwards, while claims about them can be brought.

Your rights

You can request access, rectification, erasure, restriction, portability or objection, and withdraw your consent, by writing to hola@naysof.es. You can also file a complaint with the Spanish Data Protection Agency (aepd.es).

Local storage

We store in your browser (localStorage) your waitlist code, so you can see your spot again, and whether you paused the home page music, so it does not play again on its own. Your session uses the cookies needed to keep you signed in. We do not use advertising or tracking cookies.