1. Scope and roles
This Privacy Policy is provided by Cyniical Productions LLC, doing business as ToneLink (“ToneLink,” “we,” “us,” or “our”). It applies to tone-link.com, link.tone-link.com, and the related ToneLink services (collectively, the “Service”). It covers information about account holders, workspace members, visitors to our marketing site, and visitors to public release pages.
ToneLink determines how account, billing, security, and first-party service data is handled. When an artist, label, agency, or other customer uses ToneLink to publish a release page and configure analytics or advertising integrations, that customer may separately determine why visitor information is collected. In those circumstances, the customer is responsible for its own notices and instructions, and ToneLink processes information to provide the Service.
2. Information we collect
Account and workspace information
We collect information such as your name, email address, authentication records, workspace membership and role, account preferences, and communications with us. Authentication credentials are handled through our authentication provider; ToneLink does not store readable passwords.
Content and configuration data
We process artist and release information, artwork and image URLs, destination links, campaign parameters, themes, public-page settings, domains, team settings, pixel identifiers, integration settings, and approved page-header entries that customers submit to the Service.
Billing information
Our payment processor collects payment-card and billing details. ToneLink receives related records such as customer and subscription identifiers, selected plan, billing interval, subscription status, invoices, and payment status. We do not receive full payment-card numbers.
Public-page and usage analytics
When someone visits or interacts with a ToneLink page, we may collect page views, engaged-view duration, outbound platform clicks, copy and share actions, timestamps, destination platform, referring page, campaign and UTM parameters, advertising click identifiers, approximate location derived from network information, browser and device information, user agent, and pixel-delivery status.
We use randomly generated visitor and session identifiers to distinguish visits and understand aggregate behavior. ToneLink may hash or otherwise transform network identifiers used for security or analytics. Public-page analytics are intended to identify patterns and campaign performance, not the real-world identity of individual listeners.
Cookies and local storage
We use cookies and similar storage for authentication, security, preferences, visitor and session identifiers, campaign attribution, and analytics. Public pages may also read or use identifiers associated with customer-configured providers, such as Meta, TikTok, or Google, when those integrations are enabled.
Information from third parties
We may receive data from authentication, hosting, analytics, payment, domain, music-link, and integration providers, as well as from workspace administrators who invite team members or configure content.
3. How we use information
We use information to:
- create and secure accounts and workspaces;
- build, host, publish, and route public release pages;
- measure page performance, attribution, audience patterns, and campaign activity;
- operate customer-selected pixels and integrations;
- process subscriptions and manage plan entitlements;
- provide support, service messages, and product updates;
- review reports, moderate or remove prohibited content, detect abuse, enforce our terms, and protect the Service; and
- analyze and improve features, reliability, performance, and user experience.
Where applicable, we rely on performance of a contract, legitimate interests in operating and securing the Service, consent, and compliance with legal obligations. The appropriate basis depends on the context and location.
4. How we disclose information
We may disclose information:
- To service providers that support hosting, database storage, authentication, email, analytics, payments, infrastructure, security, and customer support;
- Within a workspace according to workspace roles and permissions;
- To customer-selected integrations when a customer configures an analytics or advertising provider for a public page;
- To third-party destinations when a visitor chooses a music platform or other outbound link;
- For legal, rights-management, and safety reasons when reasonably necessary to address a content or intellectual-property complaint, comply with law, enforce agreements, or protect rights and security; and
- In a business transaction involving a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.
ToneLink does not sell personal information for money. We do not use public-page visitor information to build our own cross-customer advertising profiles. Customer-configured advertising pixels may transmit information to third parties for measurement or advertising, and customers are responsible for providing required choices and notices for those integrations.
5. Data retention
We retain information for as long as reasonably necessary to provide the Service, maintain account and business records, support analytics periods associated with a plan, resolve disputes, enforce agreements, meet legal obligations, and protect the Service. Retention periods vary by data type and context. Information may remain in restricted backups for a limited period after deletion.
When an account deletion request is verified and completed, the associated workspace, Customer Content, configurations, and workspace analytics are permanently deleted from active systems and cannot be recovered through the Service. Limited billing, transaction, fraud-prevention, security, or legal records may be retained where required or permitted by law. Residual copies may remain in restricted backups until those backups are overwritten under our normal backup cycle.
When other information is no longer reasonably needed, we take steps to delete, aggregate, or de-identify it.
6. Security
Account, content, and analytics records are logically scoped to the applicable customer workspace, with access limited through workspace permissions. We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encrypted connections, and service-provider security features. No online service is completely secure, and we cannot guarantee absolute security.
7. Your choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or portability of personal information, or to withdraw consent. You may also have the right to appeal a decision or complain to a privacy regulator. We will not discriminate against you for exercising applicable privacy rights.
Account holders can update certain profile and workspace information in the Service and can manage subscriptions through the billing portal. Until self-service account deletion is available, account deletion and other privacy requests may be submitted to support@tone-link.com. We may need to verify your identity and authority before completing a request.
If your request concerns tracking configured by an artist, label, or other ToneLink customer, identify the relevant release-page URL. We may direct the request to that customer where it is the party responsible for the processing.
8. International data transfers
ToneLink and its providers may process information in the United States and other countries where data-protection rules differ from those in your location. Where required, we use recognized safeguards for international transfers.
9. Children
The Service is not directed to children under 13, and account creation is limited to adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to ToneLink, contact us so we can review and delete it as appropriate.
10. Changes to this Policy
We may update this Policy as the Service, our practices, or legal requirements change. We will post the revised Policy with a new effective date and provide additional notice when a change is material.
11. Contact
Privacy, legal, and support questions may be sent to support@tone-link.com.