Privacy Policy

Account information. When you sign up, Clerk, our authentication provider, collects your email address and name (or receives them from Google, if you sign up with Google) so we can create and secure your account.

Billing information. If you subscribe to a paid plan, Stripe, our payment processor, collects your payment details to charge you. Your full card number is handled by the processor and is never stored by Opah.

Your inputs. The artists you choose to track and the playbooks you build are stored so we can generate your analysis.

Smart Links. If you publish a Smart Link, the email addresses fans enter on its page are stored for you, with the country and city of the request, and you can view and export them. Each visit and click on a Smart Link page is recorded with its source tag, the referring page, and the country, region and city derived from the request; the IP address itself is not stored.

If you are a fan. If you enter your email address on an artist’s Smart Link page (an opah.studio/l/ address), it is stored for that artist, who can see and export it, together with the country and city of the request. Opah sends no email to that address. Smart Link pages load no Meta or Google ad tag. Section 6 explains who is responsible for your address and how to have it removed.

Aggregated platform data. To power the Service, we collect information that is already publicly available about the artists you track, for example public streaming, advertising, and social metrics exposed by Spotify, the Meta Ad Library, TikTok, YouTube, and Instagram. This data is about artists you research, who may not be Opah users themselves; section 5 is the notice for them.

Usage and technical data. Like most web services, we automatically receive basic technical data (such as device and browser information and log data) needed to operate, secure, and improve the Service.

Page views. We count views of the home, pricing, compare and The Whole Game pages, the sign-up and sign-in pages, and the email sign-in link page on our own systems, for every visitor and without a cookie. Each view is stored with the page, how the visitor arrived, the kind of browser or in-app browser, and a visitor tag computed from the IP address and browser user-agent with a key that changes every day, so a visitor cannot be followed from one day to the next. The IP address and user-agent are not stored.

Where the GDPR or the UK GDPR applies, each use rests on one of the legal bases below. We do not sell your personal information.

Where a use rests on legitimate interests, you can object to it (section 9). Ad measurement also has its own switch (section 4), and the digest and reminder emails have an unsubscribe link in every message.

We share information only with the providers we rely on to run the Service, each limited to what they need for their function:

We may also disclose information if required by law, or to protect the rights, safety, and integrity of Opah, our users, or the public.

First-party cookies and storage. Opah sets cookies to keep you signed in (through Clerk) and to record how you first arrived, for example which link or post you clicked to get here (opah_attr, kept 90 days). We use that only to understand which of our own channels bring people to Opah; it is stored on our own systems and is never shared or sold. The opah_ad_optout cookie holds the setting on the Your privacy choices page. Two entries in your browser’s local storage stop the same sign-up or plan-button click from being reported twice.

Ad measurement tags. The Meta Pixel and the Google Ads tag load on the home, pricing, compare, about, FAQ and The Whole Game pages, the dashboard home page, and the page a Google sign-up returns to on its way to the dashboard. No other page loads them, including this one, the Terms, the sign-up and sign-in pages, the email sign-in link page, Smart Link pages and the other dashboard pages. A tag that loaded on one of the listed pages stays in the open browser tab when you move on within the site, and reports nothing from a page that is not listed. They report:

• to Meta only, a page view on the home, pricing, compare, about, FAQ and The Whole Game pages;
• a click on a plan button, which leads to Stripe checkout, with the plan and its price;
• a new account (sign-up);
• a purchase, with the plan and the amount.

Each report carries an event id so it is counted once: your account id for a sign-up, the subscription id for a purchase, and a random id for a plan-button click. The tags set their own cookies, such as Meta’s _fbp and _fbc and Google’s _gcl_au and _gcl_aw. The Google tag runs with its remarketing and ad-personalisation signals turned off and sends no page views. The Meta Pixel runs with its automatic event setup and its automatic advanced matching (reading form fields) turned off. Meta and Google process this data under their own terms and privacy policies, and Opah’s Meta ad account can use it to build audiences of visitors for Opah’s advertisements. Meta’s Business Tools Terms say Meta keeps this event data for up to two years.

Meta Conversions API. When you create an account or buy a plan, Opah’s server also reports that event to Meta directly. The report carries a SHA-256 hash of your email address and of your Opah user id, never the email address itself, plus the plan and amount for a purchase.

When none of this runs. The tags do not load, and the server sends Meta no report, when the request comes from the European Economic Area, the United Kingdom or Switzerland (read from the country of the request’s IP address), when your browser sends the Global Privacy Control signal, or when ad measurement is turned off on the Your privacy choices page. For a purchase, these are read when you open checkout. When the country cannot be determined, the tags load.

This section is for artists, and the people behind them, whose public information Opah collects because an Opah user tracks them. You may not have an Opah account, and we did not collect this information from you directly.

• Source: public platforms, namely Spotify, the Meta Ad Library, Instagram, TikTok and YouTube, collected through ScrapeCreators (section 3).
• What: the artist name and public handles; public profile figures such as followers, monthly listeners, the Spotify popularity score and listener cities; public posts and their engagement counts; and ads in the Meta Ad Library with their images and text. Anthropic analyses the ad images for Opah.
• Why: to show Opah users how artists market their music: what they post and advertise, when, and where their listeners are. Opah does not contact the artists it analyses and makes no decision about them.
• Legal basis: legitimate interests, ours and our users’, in studying the public marketing activity of artists (section 2).
• Who sees it: Opah users who track the artist, and the providers in section 3.
• How long: kept to show history over time (section 7).
• Your rights: you can ask for a copy of what we hold about you, ask us to correct or delete it, and object to the processing, by writing to support@opah.studio (section 9). If you object, we stop processing your data unless we have compelling legitimate grounds that override your interests, and we tell you which.

When a fan enters an email address on a Smart Link page, the artist or manager who published that Smart Link decides why the address is collected and how it is used; they are its controller. Opah stores it on their behalf, as their processor, sends it no email, and does not use it for anything else. The person who publishes a Smart Link is responsible for having a legal basis to collect and use the addresses (usually the fan’s consent, given by signing up) and for the emails they send to them (Terms, section 5).

A fan can ask the artist, or us at the address below, to see or delete their address. When we receive a request about a Smart Link sign-up, we tell the artist and act on their instruction, or delete the address ourselves where the law requires.

• Your account, roster, playbooks and Smart Links are kept until you delete your account.
• Fan sign-ups and the visit and click records of a Smart Link are deleted when that Smart Link, or the account it belongs to, is deleted.
• Page-view records (section 1) are deleted 13 months after the view.
• Billing records (invoices and payments) are kept by Stripe, including after you delete your account, for as long as tax and accounting law requires.
• Public artist data (section 5) is shared by every account that tracks the artist and is kept to show history over time. It is not deleted when one account is.

Deleting your account. The Account panel in the dashboard has a “Delete account” button, confirmed by typing your account email; you can also ask us at the address below. Deletion cancels any subscription at once, without a refund or credit for the rest of the billing period (Terms, section 3), and deletes your account, roster, playbooks and Smart Links with their fan sign-ups, visit and click records and artwork, and your sign-in account at Clerk. What stays: the billing records at Stripe; a record that the deletion happened, with your Opah user id and Stripe ids; internal records keyed only to your Opah user id, which no longer link to your name or email; and, if an address bounced or reported our email as spam, that address on our do-not-email list. Deletion cannot be undone.

We use reputable infrastructure providers and reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. No system is perfectly secure, but we work to safeguard your data and to respond promptly to any issue.

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, to object to or restrict certain processing, and to withdraw a consent you gave. Using these rights does not change the price or the service you get.

• Export: the Account panel in the dashboard has “Download data (JSON)” (your profile, subscription summary, email preferences, roster, playbooks, Smart Links with their records and sign-ups, and the emails Opah sent you) and “Fan sign-ups (CSV)”. Invoices and payments are in Stripe’s billing page, reached from the same panel.
• Delete: “Delete account” in the same panel (section 7).
• Ad measurement: switched off for your browser on the Your privacy choices page, or by the Global Privacy Control signal.
• Anything else, or if you have no account: email support@opah.studio. We reply from that address. If the request is about an account, we act on it when it comes from that account’s email address, or ask for confirmation from it. We answer within 30 days; if a request needs longer, we say so within those 30 days and give the reason.

If you are in the EEA, the UK or Switzerland, you can also complain to your local data protection authority.

Opah accounts are for people 18 and older (Terms, section 2). The Service, including Smart Link pages, is not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has given us information, contact us and we will delete it.

Opah is operated from the United States. Your account data is stored by Supabase in the United States (Amazon Web Services, us-east-1), and the providers in section 3 process data in the United States and other countries. Personal data from the EEA, the UK or Switzerland that reaches our providers in the United States is protected by the safeguard each provider offers in its data processing terms: certification under the EU–U.S. Data Privacy Framework (with its UK Extension and the Swiss–U.S. Data Privacy Framework), or the European Commission’s Standard Contractual Clauses.

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.

Opah is the controller of the personal information described here, except fan sign-ups on Smart Links (section 6). Questions or privacy requests? Reach us at support@opah.studio, or by post at Opah, 6339 Charlotte Pike, Unit #D242, Nashville, TN 37209.