1. General Provisions

1.1. This Privacy Policy ("Policy") defines the procedure for processing and protecting personal data of users of the G. Music platform ("Platform").

1.2. The personal data operator is sole proprietor Suklich Nikita Igorevich (INN: 860504132609, OGRNIP: 322861700086338), hereinafter the "Operator".

1.3. The Policy has been developed in accordance with Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data" and other regulatory acts of the Russian Federation.

1.4. By using the Platform, you consent to this Policy. If you disagree, stop using the Platform.

2. What Data We Collect

2.1. Data provided by the User during registration:

• Name (nickname) and email address;
• Google account data (when authorizing via Google OAuth);
• Profile photo (if available).

2.2. Additional Artist data:

• Full name and contact details;
• Payment details (bank details, sole proprietor/self-employed details);
• Information about uploaded content and metadata.

2.3. Automatically collected data:

• IP address, browser type and version, operating system;
• Platform usage data (listened tracks, search queries, interface actions);
• Cookies and similar technologies;
• Location data (country, region — based on IP).

3. Purposes of Data Processing

We process personal data for the following purposes:

• Registration and identification of the User on the Platform;
• Providing access to Platform functionality;
• Making payments to Artists;
• Improving service quality, personalizing recommendations;
• Ensuring security and preventing fraud;
• Fulfilling obligations under the distribution agreement;
• Sending Platform notifications (marketing messages with User consent);
• Compliance with Russian Federation legislation.

4. Legal Basis for Processing

Personal data processing is carried out on the basis of:

• User consent (Art. 6, Part 1, Para. 1, FZ-152);
• Performance of a contract to which the User is a party (Art. 6, Part 1, Para. 5, FZ-152);
• Legitimate interest of the Operator — ensuring security and improving the service (Art. 6, Part 1, Para. 7, FZ-152).

5. Data Storage and Protection

5.1. Personal data is stored on servers located in the Russian Federation, in accordance with Art. 18, Part 5, FZ-152.

5.2. We apply organizational and technical measures to protect data from unauthorized access, loss, alteration, and disclosure, including:

• Data encryption during transmission (TLS/SSL);
• Restricted access to personal data;
• Regular security updates;
• OAuth 2.0 authentication without password storage.

5.3. Personal data is stored no longer than necessary for processing purposes, unless otherwise required by law. Account data is stored until the account is deleted by the User or the Operator.

6. Data Sharing with Third Parties

6.1. We do not sell personal data to third parties.

6.2. Data may be transferred to:

• Payment systems (Robokassa) — for payment processing;
• Analytics services — in anonymized form;
• Government authorities — upon request, in cases provided by Russian Federation law.

6.3. When transferring data to third parties, an appropriate level of protection is ensured in accordance with FZ-152 requirements.

7. Cookies

7.1. The Platform uses cookies to ensure functionality, analytics, and personalization.

7.2. Types of cookies used:

• Essential — for authorization and basic functionality;
• Analytics — for analyzing Platform usage;
• Functional — for saving preferences (language, theme).

7.3. Users can disable cookies in browser settings, but this may affect Platform functionality.

8. User Rights

In accordance with FZ-152, the User has the right to:

• Obtain information about the processing of their personal data;
• Request clarification, blocking, or destruction of data;
• Withdraw consent to personal data processing;
• File a complaint with Roskomnadzor (rkn.gov.ru).

To exercise your rights, send a request to support@glimmerai.tech. Response time: 30 days.

9. Processing of Minors' Data

9.1. The Platform is not intended for persons under 14 years of age. We do not knowingly collect children’s data.

9.2. Persons aged 14 to 18 may use the Platform with parental consent.

10. Changes to the Policy

10.1. The Operator may amend the Policy. The current version is available on this page.

10.2. Continued use of the Platform after changes constitutes acceptance of the updated Policy.