We don't sell your personal information. Davincii's products are ad-free — we never share your data with advertisers.
Section 1. What We Collect
We only collect what we need to run your publishing administration — nothing more.
1.1 Account Information. Name, stage name, email address, password (hashed), phone number, country, and date of birth. Collected when you sign up.
1.2 Identity and Tax Information. Legal name, address, taxpayer identification (SSN / EIN / ITIN), and tax forms (W-9 / W-8BEN). Required by law to report royalty payments to tax authorities.
1.3 Catalog and Rights Data. Song titles, writer splits, co-writer details, ISRC / ISWC codes, release dates, masters ownership, and any documentation you upload. Used to register your catalog with PROs and collection societies.
1.4 Payment Information. Bank account details, PayPal handle, Stripe Connect identifiers, or wire instructions — whatever you authorize for royalty payouts. Payment credentials are stored with our payment processors (Stripe, PayPal), not on Davincii servers.
1.5 Royalty and Earnings Data. Income received on your behalf from PROs, mechanical agencies, and collection societies, including statements, splits, and payment history.
1.6 Authentication Data. If you sign in with Google or a passkey, we receive a Google-issued identifier and your email, or a WebAuthn public key. We never receive your Google password.
1.7 Usage and Device Data. IP address, browser type, device identifiers, session cookies, timestamps, and pages viewed. Used for security, fraud prevention, and improving the product.
Section 2. How We Use Your Information
We use your information only for the following purposes:
- Registering your songs with PROs, mechanical agencies, and collection societies.
- Collecting royalties on your behalf and paying you your share.
- Producing quarterly statements and tax reporting (1099 / 1042-S).
- Operating, maintaining, and improving the Davincii platform.
- Communicating with you about your account, registrations, payouts, and service updates.
- Detecting and preventing fraud, abuse, and unauthorized access.
- Complying with legal obligations (tax, anti-money-laundering, subpoenas, court orders).
We do not use your information for advertising, profiling, or automated decision-making that produces legal effects.
Section 3. How We Share Data
We do not sell your personal information.
We share your information only with parties that are required to deliver the service to you, or as legally required:
3.1 Collection Societies and PROs. ASCAP, BMI, SOCAN, SACEM, The MLC, SoundExchange (where you have signed a Letter of Direction), and foreign sub-publishers receive the song metadata and rights information they need to register and distribute your royalties.
3.2 Payment Processors. Stripe, PayPal, and any ACH / wire providers receive the minimum details required to deliver payouts and handle tax forms.
3.3 Identity and Verification Providers. Identity-verification and e-signature tools (e.g. DocuSign) receive the data needed to verify you and execute agreements on file.
3.4 Infrastructure and Service Providers. Hosting, database, email delivery (Resend / Nodemailer), logging, and analytics vendors process data solely to run the platform on our behalf, under written data-processing agreements.
3.5 Legal Requirements. We may disclose information when required by law, subpoena, or valid government request, or to protect Davincii's rights, property, or safety — or that of our users.
3.6 Business Transfers. If Davincii is acquired, merged, or restructured, your information may transfer to the successor entity, subject to the same protections described in this policy.
Section 4. Cookies and Tracking
We use a small number of cookies — strictly for keeping you signed in, remembering your preferences, and securing the session. We do not use third-party advertising cookies or cross-site tracking pixels.
4.1 Essential Cookies. Session cookies (signed JWT) and CSRF-protection cookies used during Google OAuth. These cannot be disabled without breaking sign-in.
4.2 Functional Cookies. Preferences such as dashboard view state, notification read status, and layout choices — stored in your browser's localStorage.
4.3 Analytics. We use privacy-respecting analytics to understand aggregate usage. No personally identifiable information is sold or shared with advertisers.
Section 5. How We Protect Your Information
We treat your data the way we'd want ours treated.
- All traffic is encrypted in transit via HTTPS / TLS.
- Passwords are hashed with bcrypt — never stored in plaintext.
- Sensitive tokens (JWTs, OAuth state) are signed and bound to short-lived, HttpOnly cookies.
- Access to production data is limited to authorized personnel under signed confidentiality obligations.
- Payment credentials are held by Stripe and PayPal (PCI-DSS certified); Davincii does not store card numbers.
- We maintain regular backups and monitor for suspicious activity.
No system is perfectly secure. If a breach affects your information, we will notify you and the relevant authorities as required by law.
Section 6. How Long We Keep Data
We retain your information for as long as your account is active and for as long as needed to deliver the service — including the 12-month post-termination collection window described in our Terms of Service.
6.1 Tax and Financial Records. Retained for at least 7 years to comply with IRS and foreign tax requirements.
6.2 Registration Records. Catalog metadata and registration confirmations are retained indefinitely so we can defend your claims against third parties.
6.3 Account Deletion. You can request account deletion at any time by emailing info@davincii.co. We'll delete what we can; records we're legally required to keep will be retained in archival form only.
Section 7. Your Rights
Depending on where you live, you may have the following rights. We honor them regardless of your location.
7.1 Access. Request a copy of the personal information we hold about you.
7.2 Correction. Ask us to correct inaccurate or incomplete information — most fields can also be edited yourself in the dashboard.
7.3 Deletion. Ask us to delete your information, subject to legal retention requirements above.
7.4 Portability. Request your data in a machine-readable format.
7.5 Objection. Object to processing based on our legitimate interests.
7.6 Opt Out of Sale. We never sell your information — but you can confirm this at any time.
To exercise any of these rights, email info@davincii.co. We will respond within 30 days.
Section 8. International Users
Davincii operates from the United States. If you access the service from outside the US, you agree that your information may be transferred to, processed, and stored in the US and other countries where our service providers operate. For users in the European Economic Area, the United Kingdom, and Switzerland, we rely on Standard Contractual Clauses as the legal basis for these transfers.
Section 9. Children
Davincii is not intended for anyone under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, email info@davincii.co and we will delete it promptly.
Section 10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or dashboard notice at least 30 days before they take effect. The "Effective" date above will always reflect the current version.
Section 11. Contact
Questions, requests, or concerns about your privacy?
Email: info@davincii.co
Davincii LLC — New York, NY — davincii.co — Privacy Policy