# Dajent Privacy Policy **Effective date:** October 9, 2026 **Version:** 1.8 This Privacy Policy explains how **DaJent LLC** ("DaJent," "we," "us," or "our") collects, uses, shares, and protects personal information when you use **Dajent**, our web-based creative suite for DJs, and our website at https://dajent.co (the "Service"). DaJent LLC is a Delaware limited liability company located at 8 The Green STE B, Dover, DE 19901. For privacy questions or to exercise your rights, contact us at **hello@dajent.co**. We wrote this in plain language on purpose. If anything is unclear, email us. --- ## 1. A note for DJs: we process your music library Unlike many services, we want to be upfront that **your music library is data we process.** When you upload audio or import a library, we store your audio files and read and analyze their contents and metadata to give you features like BPM, key, energy, mood, waveforms, cue points, embeddings, and stems. We treat your uploaded audio, your library, and the analysis we derive from it as data covered by this policy. We do not sell your music or share your files with other users. ## 2. Information we collect **Account and profile data.** Your email address, login credentials (managed by our authentication provider), display name, and any invitation or waitlist information. If you join our waitlist we may also collect what you tell us (for example your city, DJ software, and how often you gig). **Payment data.** When you subscribe, our payment processor (Stripe) collects and processes your payment details. **We do not receive or store your full card number.** We keep billing metadata such as your subscription status, plan, billing dates, the last four digits and card brand, and a customer/subscription identifier. **Your music library and uploaded audio.** The audio files you upload, and their metadata (title, artist, album, and similar). **Derived analysis data.** Data we compute from your audio, such as BPM, musical key, energy, mood, waveforms, cue points, beatgrids, audio embeddings (numeric representations of audio features), and stems. **Library, playlist, and set data.** Your playlists, DJ sets, energy curves, custom tags, cue points, and how you organize your library, including data imported from third-party DJ software such as Rekordbox. **Integration data.** If you connect a streaming or source integration, the account or connection details and the data needed to provide that integration (for example search and discovery activity through Crate Digger). **Usage and product analytics.** How you interact with the Service — pages and features used, actions taken, and similar events — collected through PostHog. **Crash and error diagnostics.** When something goes wrong we send the error to **PostHog** so we can find and fix it: the error message, the stack trace, what the app was doing, the app version, and your operating system. This includes errors written to the developer console and failures in the desktop app's background work such as folder syncing and exporting. These reports can incidentally contain file and folder names from your device — for example the path of a track that failed to import. They are treated as non-essential analytics: they are covered by the same choice as product analytics above, and turning analytics off turns them off too. **Heatmap data (website only).** On our website at dajent.co, **PostHog** collects where visitors click and how far down a page they scroll, so we can build heatmaps and see which parts of a page people actually use. This is aggregate position data — coordinates and counts — not a recording of your screen. **We do not record your session.** **We do not record or replay your screen**, and no session-recording tool runs on our website or in the Dajent app. Microsoft Clarity, which previously provided session replay, has been removed, and PostHog's session-replay feature is not enabled; on our website it is switched off in the site's own code. If that ever changes we will update this policy and ask for consent again wherever it is required. See Section 5 and our Cookie Notice. **Advertising measurement data.** We measure our Meta (Facebook/Instagram) ads for every visitor and account, in every region, and this is not covered by the cookie banner's choice. On our website at dajent.co and in the Dajent web app, the **Meta Pixel** tells us which of our ads brought people to the site or app and which pages they reached, and lets us show ads to people who have visited; Meta receives your IP address, the page you are on, and pixel/cookie identifiers. The desktop app does not load the pixel. In addition, **our servers report two account events to Meta** (its Conversions API): the creation of your account, from the website, the web app or the desktop app, and your first paid subscription payment, with its amount and currency. Those reports carry your email address and account identifier in hashed form, the ad click identifiers we received, and your browser's user agent. **Unless you have turned analytics off, our analytics provider (PostHog) also forwards two events to Meta** (in the Dajent app analytics are on by default during our closed beta, in every region; on our website they follow the cookie banner, which in the EU/UK means off until you accept): your sign-up and the start of a free trial (with its currency, no amount), carrying your email address and an identifier derived from it in hashed form, your IP address, your browser's user agent, and the ad click identifiers; Meta counts the sign-up once across both routes. Meta may use this data for its own advertising purposes. It stops when you use "Do Not Sell or Share My Personal Information" or your browser sends Global Privacy Control. See Sections 6, 7, and 11 and our Cookie Notice. **Affiliate referral data.** If you arrive through one of our affiliate partners' links, **PromoteKit** (which runs our affiliate program) records the visit and gives your browser a referral identifier in a cookie. When you subscribe or buy, we attach that identifier to your payment with Stripe, and PromoteKit reads the resulting purchase (for example the plan, amount and your customer email) from Stripe so that it can credit and pay the partner. If you are signed in to the Dajent app, we keep the identifier on your account for up to 60 days so that a purchase made from the desktop app is credited too. This is a non-essential tracker that follows your analytics choice; turning it off also deletes the identifier stored on your account. See our Cookie Notice. **Device and log data.** Technical information such as IP address, browser and device type, operating system, timestamps, referring pages, and error logs. **Cookies and similar technologies.** See Section 9 and our Cookie Notice. We do not intentionally collect special/sensitive categories of personal data, and we ask you not to upload such data. ## 3. Why we use your information, and (for GDPR) our lawful bases We use personal information to: - **Provide the Service** — create and run your account, store your library, and produce analysis, playlists, and sets. *Lawful basis: performance of a contract with you.* - **Process payments and manage subscriptions**, including auto-renewal, receipts, and the legally required renewal and acknowledgment notices. *Lawful basis: performance of a contract; compliance with a legal obligation.* - **Improve and develop the Service and our models**, including through product analytics, heatmaps, and de-identified/aggregated analysis data. *Lawful basis: our legitimate interests in improving and securing the Service (and your consent where required, for example for non-essential cookies/analytics in the EU/UK).* - **Measure and target our advertising** through the Meta Pixel on our website and web app and our server reports to Meta — which of our ads bring people to Dajent and lead to an account or a subscription, and showing ads to people who have visited. *Lawful basis: our legitimate interests in measuring and marketing the Service, subject to the opt-out in Section 7.* - **Credit and pay our affiliate partners**, through PromoteKit — recognising that you came from a partner's link and attributing your purchase to that partner. *Lawful basis: your consent where required (EU/UK/Switzerland on our website, where the tracker does not load until you accept); otherwise, our legitimate interests in running our partner program, subject to the opt-out in Section 7 and our Cookie Notice.* - **Communicate with you** — service messages, support, security alerts, and, where permitted, product updates. *Lawful basis: contract; legitimate interests; consent where required.* - **Keep the Service secure and prevent abuse**, enforce our Terms, and debug. *Lawful basis: legitimate interests; legal obligation.* - **Comply with law** and exercise or defend legal claims. *Lawful basis: legal obligation; legitimate interests.* **Refer-a-friend.** When you invite friends, or join through a friend's invite link or code, we store the referral: which account invited which, the dates, and a coarse status (joined, on trial, paying, reward earned, no reward). If you joined through an invite, the inviting DJ sees only a masked version of your email address (for example `j•••@gmail.com`) and that status in plain words — never amounts, refunds, or disputes — and you never see who invited you. If you delete your account, the referral record stays so the other DJ's reward history remains accurate, but your label is replaced by "Closed account" and no email address is kept in it. To prevent referral abuse, when you invite friends or join through an invite we compare the login IP addresses we already keep for account security, a random identifier stored in your browser, and the card fingerprint our payment provider gives us. We keep a one-way hash of that browser identifier for the last 10 browsers you opened your invite card from, until your account is deleted; for IP addresses and card fingerprints we keep only whether they matched, not the values. *Lawful basis: performance of a contract (the program's terms, including the discount and the reward).* ## 4. How we use your uploaded audio and derived data We use your uploaded audio and library only to provide and improve the Service for you: to store it, analyze it, and generate features and outputs at your request. We may use **de-identified and aggregated** analysis data (for example anonymized audio-feature statistics and embeddings not linked to you or to identifiable recordings) to improve and develop the Service and its models. We do not use your identifiable audio to train models for unrelated purposes, and we do not sell your audio or make it available to other users. ## 5. Third-party services (processors and subprocessors) We use trusted third parties to run the Service. They process personal information on our behalf under contract, or as independent controllers where noted. As of the effective date, they are: - **Supabase** — database, authentication, and file storage for your account, library, and uploaded audio. Hosted on Amazon Web Services (AWS) in the US (us-west-2 region). - **Stripe** — payment processing. Stripe handles your card details; we do not store full card numbers. - **PromoteKit** — runs our affiliate program: records visits from partner links and reads referred purchases from Stripe so that we can pay partners their commission. PromoteKit acts as our service provider. - **PostHog** — product analytics (how features are used), crash and error reports, and — on our website only — heatmaps. PostHog does not record or replay sessions for us. - **Meta Platforms** — advertising measurement and retargeting, via the Meta Pixel on our website and web app, via our server reports of account creation and first paid subscriptions (the Conversions API), and — unless you have turned analytics off — via PostHog, which forwards sign-ups and free-trial starts. Meta acts as an independent controller for its own advertising purposes, not solely as our processor. - **MusicBrainz** — music-metadata lookups to enrich track information. - **Audio-analysis machine-learning models (MuQ-based)** — run on your uploaded audio to produce analysis outputs. Analysis may run on our infrastructure or trusted compute providers. - **Streaming/source integrations** — if you connect an external music source, we exchange the data needed to provide that integration with the provider you choose. ### 5a. YouTube API Services If you connect a YouTube account, Dajent's use and transfer of information received from Google APIs is governed by the **YouTube API Services**, and adheres to the [YouTube API Services Terms of Service](https://developers.google.com/youtube/terms/api-services-terms-of-service). When you connect YouTube, we access, collect, and store: your **playlist list and playlist items**; **video metadata** such as title, channel, duration, and thumbnail; and the **OAuth access and refresh tokens** that authorize the connection (kept with your other connected-source data — see "Integration data" in Section 2). We use this data only to show, import, and keep in sync your YouTube playlists and videos inside Dajent. We do not use YouTube data for advertising, and we do not share it beyond what is needed to provide the integration. Google's own use of information it receives from Dajent's use of YouTube API Services is described in the [Google Privacy Policy](https://policies.google.com/privacy). You can review or revoke Dajent's access to your Google account at any time from [Google security settings](https://security.google.com/settings/security/permissions). We also use **Discord** for our optional, external user community. Discord is not required to use the Service; if you join, Discord's own privacy policy applies to that community. We may add or change service providers as the Service evolves; we will update this list and, where required, notify you. ## 6. How we share information We share personal information only: - with the **service providers** listed above, to run the Service; - with **payment and financial** partners to process your subscription; - when you **direct us to** (for example connecting an integration); - with the **DJ who invited you**, if you joined through refer-a-friend — only a masked email label and a plain-word status, as described in Section 3; - to **comply with law**, respond to lawful requests, or protect the rights, safety, and property of DaJent, our users, or the public; - in a **business transfer** (merger, acquisition, financing, or sale of assets), with notice consistent with this policy. **We do not sell your personal information for money.** We do share limited data with Meta for advertising measurement and retargeting — through the Meta Pixel on our website and web app, through our server reports of account creation and first paid subscriptions, and, unless you have turned analytics off, through PostHog's forwarding of sign-ups and free-trial starts; because Meta may use the data it receives for its own advertising purposes, that counts as **"sharing" for cross-context behavioral advertising** under California law. It never involves your music library, your uploaded audio, or the analysis we derive from it — only the browsing data and account events described in Section 2. Section 7 tells you how to turn it off. See the California section for the CPRA-specific meaning of "sell" and "share." ## 7. Do Not Sell or Share, and Global Privacy Control You can opt out of the sharing described in Section 6 at any time, and there is nothing to sign up for to do it: - **"Do Not Sell or Share My Personal Information"** in the footer of our website and of the Dajent app — this is our opt-out mechanism. It stops the Meta Pixel and PostHog's forwarding to Meta in that browser at once. Used in the Dajent app while you are signed in, it opts your account out too, so our servers stop reporting your account's events to Meta and the choice follows you to your other browsers and the desktop app. On our website, which has no sign-in, it applies to that browser only. Signed in to the app, you set it for your account, and undo it, from the same link there. - **Global Privacy Control (GPC)** — we honor browser GPC signals as a valid opt-out of sale/sharing. When your browser sends one, no advertising, analytics or affiliate tracker loads at all, and any account you create or sign in to from that browser is opted out of our server reports. - **Email us** at hello@dajent.co with any request. The cookie banner's "Reject non-essential" governs analytics and affiliate tracking only; it is not an opt-out of this sharing. An opt-out stops future sharing, but it cannot recall a report already sent: if you opt out after signing up, the report of your account's creation has already reached Meta. Nothing else we do meets the definition of a sale or share; if that ever changes, we will update this policy before it does. ## 8. Data retention We keep personal information only as long as needed for the purposes in this policy: - **Account, library, and analysis data** — while your account is active. If you delete specific content, we remove it from active systems promptly. If you close your account (or after downgrade/cancellation for content above your tier's limits — see our Terms), we delete the associated data within **30 days**, except as noted below. Content is purged from backups within **90 days**. - **Billing records** — retained as required by tax and accounting law (typically up to **7 years**). - **Auto-renewal consent records** — retained as required by California's Automatic Renewal Law (at least **3 years, or 1 year after the subscription ends, whichever is longer**). - **Logs and security data** — retained for a limited period for security and debugging. We may keep information longer where required by law or to resolve disputes and enforce agreements. ## 9. Cookies and similar technologies We use cookies and similar technologies for essential functions (such as keeping you logged in via our authentication provider), for product analytics (PostHog), for affiliate tracking (PromoteKit — so we can credit and pay the partner who referred you), on our website only for heatmaps (PostHog), and on our website and web app for advertising measurement and retargeting (the Meta Pixel). **We do not use session-recording tools.** Essential cookies are needed to run the Service. On our website, for visitors in the EU/UK and other regions that require it, we ask for consent before setting analytics and affiliate cookies. The Meta Pixel is not covered by that choice and runs in every region; Section 7 explains how to stop it. **In the Dajent app during our closed beta, analytics are on by default for beta participants in all regions, including the EU/UK**; we tell beta participants this, and you can turn them off at any time from the banner or "Cookie settings." See our **[Cookie Notice](https://www.dajent.co/cookies)** for details and choices. ## 10. Your privacy rights Depending on where you live, you may have some or all of these rights: - **Access / know** — get a copy of the personal information we hold about you and how we use it. - **Correction** — fix inaccurate information. - **Deletion** — ask us to delete your personal information. - **Portability** — receive certain data in a portable format, and export your library. - **Opt out of sale/sharing and of certain profiling** — we do not sell your data; for the advertising sharing described in Section 6, opt out any time as described in Section 7. - **Withdraw consent** — where we rely on consent, withdraw it at any time. - **Non-discrimination** — we will not treat you worse for exercising your rights. To exercise any right, email **hello@dajent.co**. We will verify your request (usually via your account email) and respond within the time the law requires. You can also use an authorized agent where the law allows. If we deny a request, we will explain why, and you can appeal by replying to our response. ## 11. California privacy notice (CCPA/CPRA) This section applies to California residents. **Categories of personal information we collect** (from the past 12 months): identifiers (such as email, IP address, account and customer IDs); commercial information (subscription and transaction records); internet/network activity (usage analytics, heatmap data, device/log data); audio information and other content you upload (your music files and library); and inferences/derived data from analysis (such as audio embeddings and feature statistics). We collect these from you and automatically as you use the Service; sources and purposes are described above. **Sale/sharing.** We **do not sell** personal information. We **do share** a narrow set of data for cross-context behavioral advertising as the CPRA defines it, disclosed to Meta Platforms for advertising measurement and retargeting: identifiers and internet/network activity (IP address, pixel/cookie identifiers, and the pages you visit) collected by the Meta Pixel on our website and web app; and, from our servers, identifiers (your email address and account identifier in hashed form, ad click identifiers, and your browser's user agent) together with commercial information (that you created an account, and the amount and currency of your first paid subscription payment); and, unless you have turned analytics off, the same kinds of identifiers plus your IP address, forwarded by PostHog with your sign-up and the start of a free trial. We do not share your uploaded audio, library, or derived analysis data with anyone for advertising, and we do not knowingly sell or share the personal information of anyone under 16. Opt out at any time as described in Section 7 — via "Do Not Sell or Share My Personal Information" or GPC. **Sensitive personal information.** We do not use or disclose sensitive personal information for purposes that would trigger the right to limit its use. **Your California rights** include the right to know/access, delete, correct, opt out of sale/sharing, limit use of sensitive personal information, and not be retaliated against for exercising your rights. Exercise them at hello@dajent.co or via GPC as described above. **Shine the Light.** California residents may request information about disclosures of personal information to third parties for those third parties' own direct-marketing purposes. Apart from the advertising sharing described above — which you can opt out of at any time — we do not make such disclosures. Requests: hello@dajent.co. ## 12. EU/UK privacy notice (GDPR) If you are in the European Economic Area, the United Kingdom, or Switzerland, DaJent is the controller of your personal information for the Service, and the following applies. **Lawful bases** are described in Section 3. **Your rights** include access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, and withdrawing consent. You also have the right to lodge a complaint with your local **data protection authority**. **International transfers.** We are based in the United States and host data in the US (AWS us-west-2 via Supabase). When we transfer personal information from the EEA/UK/Switzerland to the US or other countries, we rely on appropriate safeguards such as the European Commission's **Standard Contractual Clauses** (and the UK Addendum), together with additional measures where needed. Contact us for more information about these transfers. **EU/UK representative and DPO.** [[EU/UK REPRESENTATIVE — appoint if required under Art. 27; leave blank until assessed with counsel]]. ## 13. Children The Service is **not directed to children under 16**, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact hello@dajent.co and we will delete it. ## 14. Security We use reasonable technical and organizational measures to protect personal information, including encryption in transit, access controls, and reputable infrastructure providers. No method of storage or transmission is perfectly secure, so we cannot guarantee absolute security. Keep your password confidential and tell us at hello@dajent.co if you suspect a problem. ## 15. Changes to this policy We may update this Privacy Policy. If we make material changes, we will notify you (for example by email or in-app notice) before they take effect and update the "Effective date" above. Your continued use of the Service after the effective date means you accept the updated policy. ## 16. Contact us DaJent LLC 8 The Green STE B, Dover, DE 19901, USA Email: hello@dajent.co Website: https://dajent.co DaJent LLC · 8 The Green STE B, Dover, DE 19901, USA · hello@dajent.co · [dajent.co](https://dajent.co)