FDBK — Privacy Policy

1. Who we are

This Privacy Policy explains how FDBK collects, uses, shares and protects personal data in connection with the FDBK website and application at https://fdbk.studio/ and the related services (the “Service”). The data controller responsible for your personal data is Etzion Yariv Sam (Registration / Tax No. 182058431), of Dimosthenous 6, Kifisia, Greece (“FDBK”, “we”, “us”, “our”). You can contact us about privacy at info@fdbk.studio.

2. Our two roles

FDBK acts in two capacities. We are a controller of the personal data of our account holders (for example, your name, email, login and billing data). We act as a processor, on behalf of and on the instructions of our label and artist customers, for the personal data those customers upload and process through the Service — in particular their contact lists (DJs, tastemakers, press and other recipients) and campaign activity. Where FDBK is a processor, the customer is the controller of that data and is responsible for having a lawful basis to collect and use it. If you are a recipient of a promotional email sent through FDBK and have a question about your data, please contact the label or sender that emailed you; we will assist them in responding.

3. What personal data we collect

We collect the following categories of personal data:

• Account and profile data — name, the label or entity you represent, email address, password (stored hashed), and profile details.
• Label workspace and content data — information about your releases, tracks and campaigns, and files you upload (which may contain personal data in metadata).
• Contacts data you upload (as controller) — the names, email addresses, affiliations, phone numbers and notes of the recipients you add to your mailing lists, and their engagement (opens, plays, downloads, feedback, unsubscribes).
• Billing data — subscription plan, and payment and tax information processed by our payment provider (we do not store full card numbers).
• Usage and device data — log data, IP address, device and browser information, and how you interact with the Service.
• Communications — messages you send us (e.g. support requests) and your preferences.

4. How we use your data, and our legal bases

We use personal data for the following purposes, relying on the legal bases under the EU General Data Protection Regulation (GDPR) indicated:

• To provide the Service — create and manage your account, host your content, run your campaigns and deliver your emails, and provide analytics and reports (performance of a contract).
• To process payments — manage subscriptions and billing (performance of a contract; legal obligation).
• To secure and improve the Service — prevent fraud and abuse, ensure deliverability and reliability, and analyse and improve how the Service is used (our legitimate interests, and your consent where required for analytics cookies).
• To communicate with you — send service and transactional messages, and, where permitted, product updates (performance of a contract; legitimate interests; consent where required).
• To comply with law — meet legal, accounting and regulatory obligations and respond to lawful requests (legal obligation).

5. Who we share data with

We do not sell your personal data. We share it only with service providers (“processors”) who help us run FDBK, each under a data-processing agreement:

• Supabase — authentication, database and file storage (hosting your account and content data).
• Stripe — payment processing and subscription billing; Stripe handles payment and identity/tax data as an independent controller for those purposes.
• Resend — sending your promotional (marketing) emails to the recipients you select.
• Lovable — transactional and system emails (such as sign-in and account notifications).
• Analytics providers — Google Analytics and Microsoft Clarity, to measure and improve how the Service is used, including session and behaviour analytics.
• Recipients and people you choose to share with — content you send or share by design is visible to its recipients: promotional material and downloads you send reach the recipients you select, and read-only reports or assets you share by link or email are visible to the people you share them with.

We may also disclose data where required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, financing or other business transfer (subject to this Policy).

6. International transfers

FDBK and its service providers may store and process personal data within and outside the European Economic Area (EEA). Where data is transferred outside the EEA, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision, to protect that data. Details are available on request.

7. How long we keep data

We keep personal data for as long as your account is active and for as long as necessary to provide the Service, and thereafter as required to comply with our legal obligations, resolve disputes and enforce our agreements. Contacts and campaign data processed on a customer's behalf are retained according to that customer's instructions and their use of the Service; on account termination, and subject to legal retention requirements, such data may be deleted. You can request deletion of your personal data as described below.

8. How we protect data

We apply appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit, private storage with time-limited access for shared files, and restriction of access to authorised personnel and processors. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, you have the right to: access your personal data; have inaccurate data corrected; have your data erased; restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time (without affecting prior processing). To exercise these rights, contact us at info@fdbk.studio. You also have the right to lodge a complaint with a supervisory authority — in Greece, the Hellenic Data Protection Authority (HDPA / Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα). If your request concerns data we process on behalf of a customer (for example, a mailing-list contact), we will refer you to, and assist, that customer as the controller.

10. Cookies and analytics

The Service uses cookies and similar technologies for authentication, security, preferences and analytics. We use Google Analytics and Microsoft Clarity to understand and improve usage, including session and behaviour analytics. Where required by law, we request your consent for non-essential cookies, and you can manage your preferences through the cookie controls provided and through your browser settings.

11. Children

The Service is not directed to children, and you must not use it if you are a minor in your jurisdiction without the permission described in our Terms of Use. We do not knowingly collect personal data from children; if you believe a child has provided us personal data, please contact us and we will take appropriate steps to delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “last updated” date and, where required, notify you. Your continued use of the Service after an update constitutes acceptance of the revised Policy.

13. Contact us

For any question about this Privacy Policy or your personal data, contact us at info@fdbk.studio.

FDBK · Etzion Yariv Sam (Reg. / Tax No. 182058431) · Dimosthenous 6, Kifisia, Greece.