Privacy Policy

Last updated: September 23, 2026 Applies to: Phase 1 of the SoundEX platform

EM-Muzic Ltd. ("we", "us", "our") operates the SoundEX platform at soundex.ai (the "Platform"). Our former address, em-muzic.com, redirects to soundex.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our Platform. Capitalized terms which are not defined herein shall have the meaning ascribed to them in our Terms of Service, into which this Privacy Policy is incorporated by reference.

This policy describes the Platform as it operates in Phase 1. Features that are not part of Phase 1 — including the funding marketplace, fan investment, and artist-partner matching — are not covered here. We will publish an updated policy before any of them becomes available to you, and we will notify you as described in section 14.

Scope of Phase 1

In Phase 1 the Platform provides:

• digital distribution of your music to digital stores;
• a dashboard consolidating data from digital stores, social accounts, and your revenue;
• a task and tip engine that runs on a credit allowance;
• machine-learning models that score, forecast, and generate recommendations for every user, both artists and professionals;
• a PRO account tier that unlocks the full financial and analytics view.

1. Information We Collect

1.1 Information You Provide

We do not ask you to upload a copy of an identification document, and we do not take or hold a photograph of you. If we introduce identity verification of that kind, we will describe it here and tell you before it applies to you.

1.2 Information Collected Automatically

• Usage Data: pages visited, features used, timestamps, interaction patterns, click-stream, searches, session times and durations.
• Device Data: browser type and version, operating system, screen resolution, language settings, mobile device type and version.
• IP Address: collected for fraud prevention, system security, and coarse geo-location.
• Analytics Data: streaming and audience metrics ingested from the accounts you connect.

1.3 Information from Third Parties

• Connected accounts. When you connect a digital store or a social account, we access the public profile information you authorize (profile name, page link, profile picture) and the analytics that account exposes to us. Our access is read-only: we never post, upload, comment, send messages, or take any other action on your account. We never collect or store your passwords, private messages, or any non-public information beyond what the connection grants. Access tokens are encrypted at rest and are used only to fetch your own data.
• Distribution and reporting partners. Revenue reports, stream counts, and royalty data from digital stores and distributors, which we match to your catalog. These reports identify the works they concern and may name artists who are not themselves users of the Platform. Where such a report concerns you, you have the same rights over that information as over anything else described in this policy.
• Public music-industry signals. Publicly available performance and demand indicators about artists and tracks, used to compute rankings and forecasts.

What we never receive from a connected account: the identity of your individual followers, viewers, or listeners; the text of comments; private messages; unpublished or private content; profile view counts; or any information that would identify a member of your audience.

1.4 TikTok

The TikTok service we use. When you choose to connect your TikTok account, we use TikTok Login Kit to read information from that account. This is the only TikTok product we use, and our access is read-only. We do not post, upload, publish, comment, send messages, or take any other action on your TikTok account.

What we receive. With your authorization, TikTok provides us with:

• Your account identity — the identifiers TikTok assigns to you, your display name, and your profile picture.
• Your public profile — your profile links, your bio text, and whether your account is verified.
• Your public statistics — your follower count, following count, total likes, and number of videos.
• Your public videos — for each public video: its title, description, posting date, link, thumbnail, length, and its view, like, comment, and share counts.

What we do not receive. TikTok does not give us, and we do not collect:

• demographic information about your audience, such as their age, gender, or location;
• the text of comments (we receive only how many there are);
• watch time, completion rates, or where your traffic comes from;
• profile view counts;
• private videos, drafts, or anything you have not published;
• direct messages;
• any information about your individual followers.

How we use it. We use this information to show you your own performance inside your dashboard, including your follower growth over time and how TikTok compares to your other connected accounts. The numbers also feed the artist score and the forecasts we generate for you, and they are included in the information we send to Google's Gemini models, our artificial intelligence provider, so that it can produce written insights and suggested tasks for you. We do not use this information for advertising, we do not sell it, and we do not share your individual TikTok data with other artists or with any third party other than the providers named in section 10.

How to stop it. You can disconnect TikTok at any time from the connections page in your account. Disconnecting stops any further collection immediately. Information we already collected stays with your account and is deleted when your account is deleted, or earlier if you ask us. You can also withdraw our access directly from within your TikTok account settings. To request deletion of information we already hold, write to sound@soundex.ai or use the data deletion page, linked under Legal in the footer of every page on the Platform.

TikTok is a source of information to us, not a recipient: information flows from TikTok to us, and we send no personal data to TikTok.

2. How We Use Your Information

We use collected data to:

• operate, maintain, secure, and improve the Platform;
• deliver digital distribution and track the revenue it generates;
• compute your ARI (Artists Rank Intelligent) score, forecasts, and daily personalized tips;
• run the task engine and account for your credit consumption;
• provide the PRO tier's financial and analytics views;
• send service-related communications and product updates;
• prevent fraud and abuse and keep the Platform secure;
• comply with our legal, tax, and accounting obligations.

2.1 Automated Analysis and Scoring

Parts of the Platform are automated. We compute an ARI score, revenue forecasts, and recommended actions from your catalog performance, audience data, and financial history, using statistical and machine-learning models. The statistics from the social and streaming accounts you connect, TikTok included, are among the inputs. These outputs are decision support: they inform what the Platform shows and suggests to you. They do not by themselves decide whether you may use the Platform, receive a payout, or access any feature.

You may ask us to explain any score or recommendation that concerns you, to correct the data it was computed from, and to have a person at SoundEX review it. Write to sound@soundex.ai.

3. Data Sharing

We do not sell your personal data. We share data only as set out below.

• Distribution partners. Digital stores and distributors, to deliver your music and collect your revenue.
• Service providers. Named in section 10. Each is bound by a data processing agreement and may process your data only on our instructions.
• Legal requirements. Where required by law, court order, regulatory request, or to protect rights, property, or personal safety.
• Change of control. In a merger, acquisition, or sale of all or substantially all of our assets, provided the acquirer maintains privacy terms no less protective than these.
• People you choose. Managers, labels, and professionals you deliberately grant access to, and only to what you grant. You can withdraw that access at any time from your dashboard.

4. Data Security

We apply the following measures:

• TLS encryption for all data in transit;
• encryption at rest for connected-account access tokens;
• role-based access control over internal systems, with administrative actions logged;
• reCAPTCHA to prevent automated abuse;
• regular security review and vulnerability assessment;
• hosting on Google Cloud Platform in the europe-west3 region (Frankfurt, Germany), on infrastructure certified to ISO/IEC 27001 and operated under GDPR-compliant terms.

No method of transmission or storage is completely secure. We cannot guarantee that unauthorized access will never occur, and to the extent permitted by law we are not liable for it. This does not limit any liability that cannot be excluded under applicable law.

5. Data Retention

We retain your data for as long as your account is active, or as needed to provide the service.

You can view and correct your personal information from your account dashboard. To export your data, to delete a connected account's data, or to close your account and have your personal data deleted, write to sound@soundex.ai. We action such a request within 30 days.

Disconnecting a platform is not the same as deleting its data. Disconnecting stops us collecting anything further from that account, but the information we already gathered from it stays with your account until you ask us to delete it. Ask us and we will.

Disconnecting inside SoundEX also does not withdraw the permission you granted at the platform itself. You can withdraw it there, in that platform's own app or connection settings, and we recommend doing both. Withdrawing it at the platform stops us reaching your account; it does not delete what we already hold, which is what a request to sound@soundex.ai does.

Deletion requests are handled by a person rather than automatically. We action them within 30 days and confirm to you in writing when it is done.

Deleting the data from one connected platform is separate from closing your account, and it covers only the platform you name. It does not affect other platforms you have connected, your music and distribution records, the reports we receive from your distributor — which reach us from the distributor and not from the platform, even where they concern the same store — or the financial records we are required to keep.

When an account is closed:

• personal data is deleted within 30 days of the request;
• financial and tax records are retained for 7 years, as required by law;
• distribution records are retained for as long as your music remains available in digital stores, and for 7 years thereafter;
• aggregated and anonymized statistics, which no longer identify you, may be retained indefinitely.

Files you upload are stored in a version-controlled repository (see section 10). Deleting a file removes it from the Platform, but a copy can remain in that repository's history until we remove it there as well. We are moving this storage onto a service where deletion is immediate, and we will update this section when that is done.

6. Your Rights

Depending on your jurisdiction, you have the right to:

• Access — obtain a copy of your personal data;
• Rectification — correct inaccurate or incomplete data;
• Erasure — request deletion of your data;
• Restriction — ask us to limit how we process your data while a dispute is resolved;
• Portability — receive your data in a structured, machine-readable format;
• Object — object to processing based on our legitimate interests, and to direct marketing at any time;
• Withdraw consent — where processing rests on consent, withdraw it at any time. This does not affect processing carried out before the withdrawal, and it does not remove records we are legally required to keep;
• Human review — obtain an explanation of, and human review of, any automated score or recommendation, as described in section 2.1.

To exercise any of these rights, contact sound@soundex.ai. We respond within 30 days. If you are in the European Economic Area or the United Kingdom you also have the right to lodge a complaint with your national data protection authority; in Israel, with the Privacy Protection Authority.

7. Cookies & Tracking

We use cookies strictly to operate the Platform: session cookies that keep you signed in and expire when you close the Platform, and persistent cookies that remember your preferences until you delete them. We use them for authentication, session management, fraud prevention, and to remember your settings.

We do not use advertising cookies, and we do not embed third-party tracking or advertising networks. You can disable or delete cookies through your browser settings; if you do, you may not be able to sign in or use parts of the Platform.

8. International Data Transfers

Your data is stored in Germany. It is also processed in Israel, where we are established, and in the United States, where our artificial-intelligence provider processes it and where the file storage and email services named in section 10 operate.

Israel benefits from a European Commission adequacy decision. For transfers to countries without one, including the United States, we rely on Standard Contractual Clauses together with additional technical safeguards. You may request a copy of the relevant safeguards from sound@soundex.ai.

9. Children's Privacy

The Platform is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18, and we may require proof of age at any stage. If we learn that we hold data about someone under 18, we delete it promptly. Contact sound@soundex.ai to report such a case.

10. Service Providers

We engage the following providers. Each processes data only on our instructions, under a data processing agreement.

We do not currently use a third-party payment processor, and we do not collect or store payment card details. We do not use Google Analytics or any other analytics or advertising service. When we introduce a payment processor, we will name it here and notify you before it processes any of your data.

You can review each provider's own privacy policy on its website.

11. Direct Marketing

With your consent, we may use your email address and phone number to send you information about our current and future products and services. You may withdraw that consent at any time, by using the unsubscribe link in any message or by writing to sound@soundex.ai. Withdrawing it does not stop service messages that we must send you about your account, your distribution, or your money.

12. Use of Artificial Intelligence

The Platform uses AI models supplied by Google, through its Vertex AI service, to generate tips, tasks, and written recommendations, and it uses our own statistical and machine-learning models to compute scores and forecasts.

This processing takes place in Google's us-central1 region, in the United States. It therefore involves a transfer of your data outside the European Economic Area, as described in section 8.

Your data is sent to the AI provider only as needed to produce an output for you, and only the data required for that output. Your personal data is not used to train models that serve other customers, and we do not permit the provider to do so. We train our own models only on aggregated data that does not identify you.

Your consumption of these features is metered in credits: one allowance for AI generation and a separate allowance for analytics, exports, and forecasts. The allowance is part of your account tier and renews each month. We record how many credits you use and when, in order to operate it.

13. Data Protection Contact

Written enquiries: EM-Muzic Ltd., Data Protection Inquiries, sound@soundex.ai.

14. Changes to This Policy

We may update this Privacy Policy. Changes are posted on this page with an updated "Last updated" date.

Material changes — including any change to what we collect, how we use it, or with whom we share it — take effect seven (7) days after we post notice on the Platform or send it by email, whichever is earlier. Where an amendment is required to comply with a legal obligation, it may take effect immediately.

We will publish a revised policy before Phase 2 introduces the funding marketplace, fan investment, or matching.

15. Contact Us

EM-Muzic Ltd. Email: sound@soundex.ai

© 2026 EM-Muzic Ltd. All rights reserved. SoundEX and ARI are trademarks of EM-Muzic Ltd.