Privacy Policy

Wippit LLC

Effective Date: 28 October 2025

Last Updated: 28 October 2025

Version: 1.0

Introduction

This Privacy Policy explains how we collect, use, share, and protect your personal
information when you use our platform, website, and related services (collectively, the
"Service").

We comply with privacy laws such as the General Data Protection Regulation (GDPR) for
users in the European Union and European Economic Area, the California Consumer Privacy
Act (CCPA) for California residents, and other relevant privacy regulations. Your rights under
these laws are important to us, and we provide clear mechanisms for exercising those rights
throughout this policy.

This Privacy Policy applies to all users of our Service, regardless of how you access or use it,
including through our website, mobile applications, and any other platforms or services we may
offer. By using our Service, you acknowledge that you have read, understood, and agreed to this
Privacy Policy and you give your explicit agreement to our collection, use, and sharing of your
information as described herein.

Information We Collect

Information You Provide Directly

Account Registration Information

When you create a Wippit account, we collect basic information necessary to establish and
maintain your account. This includes your full name, email address, and Instagram handle. We
require this information to verify your identity as a musician or artist, personalize your
experience, and communicate with you about your account and our services.

Your email address serves as your primary account identifier and communication channel. We
use it to send you important account notifications, security alerts, subscription information, and
(optionally) marketing communications, which you can opt out of at any time. Your Instagram
handle allows us to understand your current social media presence and enables our AI to
provide relevant content suggestions.

Profile and Persona Information

During the onboarding process, you will be asked to complete a comprehensive questionnairedesigned to help our AI understand your artistic identity, content preferences, and social mediagoals. This may include information such as your music genre, artistic style preferences, content creation challenges, reference artists you admire, posting frequency preferences, and yourcomfort level with different types of social media content.

You may also choose to provide additional profile information such as your artist bio, location,career stage, and specific goals for your social media presence. This information helps us personalize content suggestions and improve the accuracy of our AI-generated recommendations. You can update this information at any time through your account settings.

Content and Creative Materials

When you use our content generation features, we collect and store the content you create,
modify, approve, or reject. This may include AI-generated text suggestions, your edits and
modifications to generated content, images or media files you upload for use in social media
posts, and any custom instructions, prompts, or feedback you provide to improve content
generation.

We also collect information relating to your content preferences, decision patterns, and platform performance. This may include the types of content you typically approve or reject, common modifications you make to generated suggestions, and feedback you provide when requesting content regeneration. This information helps us continuously improve our AI models and provide more accurate suggestions.

You retain full ownership of the original content you upload and create, subject to any licenses
you grant us under our Terms of Service. Any modifications you make to AI-generated content
become part of your own creative work, and you retain full rights to the modified content. Wippit
does not claim ownership of your creative works or artistic identity. We only use your creative
materials to operate, improve, and provide our services in accordance with this Privacy Policy.

You are responsible for ensuring that you have the necessary rights to any content you upload
to our platform, including music, images, logos, or other creative materials. If you use content
created by others, you must have proper authorization or licensing to use that content in connection with our services.

Music and Event Information

To provide relevant content suggestions, we may collect information about your musicalactivities including, but not limited to, upcoming events and performances (venue names,dates, cities, and optional ticket links), music releases (titles, release types, genres, release dates, artwork, and optional smart links), and any other promotional events such ascollaborations, awards, or special announcements you wish to highlight in your social media content.

We use this information to generate content recommendations that align with your actual promotional needs and artistic activities. You can add, edit, or remove this information at anytime, and we will adjust our content suggestions accordingly.

Information We Collect Automatically

Social Media Data Collection

We collect information from your connected social media accounts, depending on yourrelationship with our platform and your specific needs.

Initial Data Collection via APIs

During the onboarding process, we collect publicly available information from your Instagramaccount. This includes your public profile information (bio, follower count, following count, profilepicture), your last public posts (images, captions, hashtags, posting dates), engagement metrics for these posts (likes, comments, shares where publicly available), and general account activitypatterns.

This initial data collection does not require you to provide your Instagram password or grant us access to your account. We only collect information that is already publicly visible on your Instagram profile. This data helps our AI understand your current content style,audience engagement patterns, and artistic identity to provide more relevant contentsuggestions from the very beginning of your Wippit experience.

Ongoing Data Collection via Integrations

If you choose to schedule and publish content through Wippit, you will connect your social media accounts (such as Instagram, TikTok, and potentially YouTube and SoundCloud) to grantus limited, revocable access for authorized content publishing and content upload. We never request or store your login credentials (username or password). We may also collect analytics provided by the platform APIs, including updated information about your posts such as engagement metrics (likes, comments, shares, reach, and impressions), available audiencedemographics, and overall account performance data.

This ongoing data collection helps us continuously improve our content suggestions and provide you with your performance analytics and insights into your social media growth. You can disconnect your social media integration at any time, though this will limit our ability to schedule and publish content on your behalf or to provide performance analytics.

Platform Usage and Analytics Data

We automatically collect information about how you interact with our platform in order to improve our services and your overall experience. This includes pages you visit within our platform,features you use most frequently, time spent on different sections, content generation patterns and preferences, and technical information about your device and browser.

We use analytics tools to understand user behavior and identify opportunities to improve our platform. Much of this data is aggregated and anonymized for analysis purposes, though some individual usage patterns may be retained to personalize your experience and improve our AI recommendations.

Technical and Device Information

When you access the Service, we automatically collect certain technical information which may include your IP address, browser type and version, operating system, device identifiers, screen resolution and device capabilities, language preferences, and the website or application that referred you to our platform.

This technical information helps ensure our platform works properly across different devices and browsers, supports our efforts to detect and prevent potential fraud, abuse, or security threats,enables us to comply with applicable legal requirements, and improve our overall service quality.We may also use this information to tailor your experience based on your device capabilities.

Information from Third Parties

Social Media Platform Data

In addition to the data we collect directly from your social media accounts, we may also receiveadditional information from social media platforms through their APIs and business tools. This can include updated profile information, new post data, audience insights and demographics,advertising performance data (if you choose to use our future advertising features), andplatform-specific analytics and recommendations.

We only collect this information after you have explicitly connected your accounts and grantedthe necessary permissions. Because each platform provides different categories of data, the specific information available to us will depend on the platform and the permissions you authorize. Before any connection is established, we will inform you of the type of information we may access, ensuring that you are fully aware of what data will be shared with us.

Payment and Billing Information

We use a payment processor for subscription billing. While we do not store your complete creditcard information on our servers, we do receive certain billing-related information, including billing address, payment method type (e.g., Visa, Mastercard), the last four digits of your payment method, payment transaction history, and subscription status and billing cycle information.

Your full payment details, such as complete card numbers or security codes, are never sharedwith us and remain securely handled by the payment processor in accordance with theirsecurity standards. We only receive the minimum billing information necessary to manage your subscription, provide customer support, and comply with financial regulations.

We encourage you to review our payment processor’s Privacy Policy to better understand how your payment information is safeguarded.

Integration Partners and Service Providers

As we continue to expand our platform capabilities, we may partner and integrate with additional industry tools and services. When you choose to connect these integrations, we may receive relevant information from those partners to enhance your experience. This could include music distribution data, streaming analytics, booking or event information, and other music industry-specific data that helps us provide more relevant content suggestions.

We will always inform you about these integrations and the data they provide before you authorize them. You can manage and disconnect these integrations at any time through your account settings.

How We Use Your Information

Core Service Functionality

AI-Powered Content Generation

The primary purpose of collecting your information is to provide our core AI-powered content
generation service. We use your profile information, artistic preferences, social media data, and
music industry activities to train and customize our AI models specifically for your artistic voice
and brand. This includes analyzing your existing social media content to understand your tone,
style, and audience preferences, generating personalized content suggestions that align with
your artistic identity, creating promotional content for your gigs, releases, and other musical
activities, and continuously improving suggestions based on your approval, rejection, and
modification patterns.

Our AI models also learn continuously from your interactions to become more accurate over
time. When you approve content, reject suggestions, or provide specific feedback, this
information helps our system understand your preferences better and generate more relevant
suggestions in the future.

Social Media Management and Publishing

When you connect your social media account, we use secure access to publish content you have approved according to your chosen schedule. This connection also allows us to monitor how your published content performs, provide analytics and insights about your social media growth, and suggest optimal posting times based on your audience engagement patterns.

We never publish content automatically without your authorization. Every piece of content
you see on your connected accounts has been approved and scheduled by you. You
maintain complete control over what gets published to your social media accounts.

Account Management and User Experience

We use your account information to maintain your Wippit profile, manage your subscription andbilling through our payment processor, and provide customer support and technical assistance.We also use this information to send important account notifications and security alerts. Beyond account basics, we use your preferences and activity within the platform to customize yourexperience. This includes personalizing your dashboard, organizing your content suggestions byrelevance, providing usage analytics and insights about your Wippit activity, and ensuring thatour platform interface works optimally for your specific needs and workflow.

Platform and AI Improvement

We use your account information to maintain your Wippit profile, manage your subscription andbilling through our payment processor, and provide customer support and technical assistance.We also use this information to send important account notifications and security alerts. Beyondaccount basics, we use your preferences and activity within the platform to customize yourexperience. This includes personalizing your dashboard, organizing your content suggestions byrelevance, providing usage analytics and insights about your Wippit activity, and ensuring thatour platform interface works optimally for your specific needs and workflow.

Communication and Marketing

Service-Related Communications

We use your contact information to send essential communications about your Wippit account,including onboarding guidance, billing notifications, important platform updates or changes,security alerts and account protection notifications, and customer support responses. These messages are necessary to maintain your account and cannot be opted out of while you remain a user.

Marketing and Promotional Communications

With your consent, we may send you marketing communications about Wippit features,
updates, and music industry insights. This includes newsletters with social media tips and
music marketing advice, announcements about new platform features or integrations,
invitations to webinars, events, or educational content, and promotional offers or subscription discounts.

You can opt out of marketing communications at any time by using the unsubscribe link in any
marketing email, updating your communication preferences in your account settings, or
contacting our support team.

Community Building and User Success

We may use anonymized examples of successful content or user achievements to inspire and
educate our community. This may include case studies of successful social media campaigns,
general insights about effective content strategies, platform success stories.When we share
user success stories or examples, we will always obtain explicit permission before sharing their
story. To safeguard individual privacy, we usually anonymize or aggregate information before
sharing it as community insights.

Legal and Compliance Purposes

Legal Obligations and Regulatory Compliance

We may use your information to comply with applicable laws, regulations, and legal
obligations. This includes responding to lawful requests from government authorities,
complying with court orders, subpoenas, or other legal processes, meeting regulatory
requirements for financial services and data protection, and cooperating with law enforcement investigations when legally required.

When possible and legally permitted, we will notify users about legal requests for their
information.

Security and Fraud Prevention

We use your information to protect our platform, our users, and our business from securitythreats and fraudulent activity. This includes detecting and preventing unauthorized access toaccounts, identifying and blocking suspicious or abusive behavior, protecting against spam,harassment, or other policy violations, and maintaining the security and integrity of our platformand user data.

Business Operations and Analytics

We use aggregated and anonymized user data for business analytics and operational
purposes. This includes understanding user demographics and market trends, measuring the
effectiveness of our marketing and user acquisition efforts, analyzing subscription patterns
and revenue metrics, and making informed business decisions about platform development
and growth strategies.

Business Transfers and Corporate Changes

In the event of a merger, acquisition, sale of assets, or other corporate transaction involving
Wippit, your information may be transferred to the acquiring entity as part of the transaction. We
will provide notice of any such transfer.

If such a transfer occurs, we will take reasonable steps to ensure that your information continues
to be protected according to the standards outlined in this Privacy Policy, and we will provide
you with notice and choices about how your information is handled by the new entity.

Information We Do Not Share

We do not sell, rent, or otherwise share your creative content, AI-generated suggestions, orpersonal artistic materials with third parties for their commercial purposes. Your creative work remains your intellectual property, and we respect the confidential and personal nature of your artistic expression. While we may use your content interactions to improve our AI models and platform functionality, we do not share your specific content with other users or external parties without your explicit permission.

We also do not sell or rent your contact information, such as email addresses, names, or other
identifying details, to third parties for their marketing purposes. While we may use your information for Wippit’s own marketing communications (with your consent), we do not provide your contact information to outside companies for their promotional activities. Any sharing of contact information occurs only in the specific contexts described in this Privacy Policy, such as with trusted service providers who help deliver our Service or in response to valid legal requirements.

Data Security and Protection

Questions, comments, or requests concerning this Privacy Policy are welcomed via the contact page or in writing to our Head Office Team:

Wippit International Head Office, WeWork, No.1 Spinningfields, Quay Street, Manchester, M3 3JE

How to contact us

Security Measures and Safeguards

Technical and Infrastructure Security

We implement comprehensive technical security measures to protect your information from
unauthorized access, disclosure, alteration, and destruction. These measures include
industry-standard encryption for data transmission, secure cloud hosting infrastructure with
multiple layers of security controls, and regular security monitoring and threat detection systems.We also follow industry best practices such as regular security testing, vulnerability assessments,and multi-factor authentication options for user accounts.

Access Controls and Authentication

Access to personal data is strictly limited to authorized personnel who need it to perform their job duties. We use role-based access controls, secure authentication systems, regular audits of
permissions, and detailed logging of access activity.

Data Storage and Retention

Data Storage Locations and Transfers

Your information is primarily stored on secure servers located in the United States. Where data is transferred internationally, we apply appropriate safeguards in line with applicable privacy laws. For users in the European Union and European Economic Area, this includes reliance on Standard Contractual Clauses (SCCs) approved by the European Commission and ongoing reviews of data transfer practices to ensure compliance with evolving legal standards.

Data Retention Policies

We retain your information only for as long as necessary to provide our Service, comply with
legal or regulatory obligations, and achieve the purposes outlined in this Privacy Policy.
Retention periods may vary depending on the type of data and the purposes for which it was
collected. When you delete individual pieces of content from your Wippit dashboard, the content is removed from your view but may be retained in our systems for AI training and platform improvement purposes until you delete your entire account. Upon full account deletion, all your personal information and content is permanently deleted except for information we are legally required to retain for compliance purposes.

Incident Response and Breach Notification

We maintain incident response procedures designed to detect, investigate, and respond to potential security incidents or data breaches. These procedures include immediate containment,assessment of scope and impact, investigation of root causes, and corrective actions to prevent recurrence.

If a data breach occurs that may affect your personal information, we will notify you and the appropriate regulatory authorities in accordance with applicable laws, including the GDPR,CCPA, and other applicable laws. Notifications will include information about the nature of theincident, the data potentially affected, steps we are taking to address the situation, and guidance on how you can protect yourself. We are committed to transparency and will keep affected users informed as our investigation and remediation efforts progress.

User Security Responsibilities

Account Security Best Practices

While we implement strong security measures to protect your information, account security alsodepends on your own practices. We recommend that you:

  • Use a strong, unique password and enable two-factor authentication when available for
    your Wippit account and all connected social media accounts.

  • Keep your contact details up to date so we can reach you about security issues, and log
    out of your account when using shared or public computers.

  • Be cautious about phishing attempts or suspicious communications claiming to be
    from Wippit. We will never ask you to provide your password or other sensitive information
    via email or other unsecured communications.

  • Monitor your connected social media accounts for unauthorized activity and revoke
    access to suspicious applications if needed. If you suspect your accounts have been
    compromised, change your passwords immediately.

If you discover a security issue with your Wippit account or our platform, please report it to
us immediately at our official channels stated on our website. We take all security concerns
seriously, investigate legitimate reports promptly, and work with users and security
researchers to resolve issues responsibly

Your Privacy Rights

General Privacy Rights

You have the right to know what personal information we collect about you, how we use it, and
with whom it is shared. Most of your information is accessible through your Wippit dashboard,
and you may also request a copy of the personal information we hold, request corrections or
updates, and request deletion where appropriate. You may also request your information in a
portable format. We will verify your identity before processing such requests and respond within
legally required timeframes.

European Union (GDPR) Rights

For users in the European Union and European Economic Area, we process your personal
information under the legal bases set out in the General Data Protection Regulation (GDPR).
We rely on contractual necessity when processing is required to provide the services you
subscribe to and manage your account. We also rely on our legitimate interests, such as
improving the Service, preventing fraud and abuse, protecting security, and operating our
business in a sustainable manner. In certain cases, we process your information based on
your consent, for example when sending you marketing communications. You may withdraw
this consent at any time without affecting the lawfulness of processing already carried out.
Finally, we process your information where necessary to comply with legal obligations,
including applicable laws, valid legal requests, and regulatory requirements.

Enhanced Rights Under GDPR

In addition to the general rights available to all users, you also have specific GDPR rights, including:

  • The right to object to processing of your personal information, including processing for
    direct marketing.

  • The right to restrict processing in certain circumstances.

  • The right to request portability of your data in a structured, commonly used,
    machine-readable format.

  • The right to lodge a complaint with your local data protection authority.

  • The right to request erasure of your personal information (“right to be forgotten”) when
    applicable, such as where the data is no longer necessary, consent has been withdrawn, or the information has been unlawfully processed.

We will respond to GDPR rights requests without undue delay and in accordance with
applicable legal requirements

California (CCPA) Rights

If you are a California resident, you have specific rights under the California Consumer PrivacyAct (CCPA), as amended by the CPRA. These include the right to know what personalinformation we collect, use, and disclose about you, the right to request deletion of your personalinformation, the right to opt-out of the “sale” or “sharing” of your personal information, and theright to non-discrimination for exercising these rights.

We do not sell personal information as traditionally defined. However, we may share certain information with advertising partners for marketing purposes, which may be considered a“sale” under the CCPA's broad definition. You may opt-out of this type of sharing by contacting our support team or using the opt-out options in your account settings.

In addition, under California’s “Shine the Light” law, you may request details about our disclosure of personal information to third parties for their direct marketing purposes. As explained in this Privacy Policy, we do not share your personal information with third parties for direct marketing without your consent.

Exercising Your Rights

How to Submit Privacy Requests

You may exercise your privacy rights through your account settings, where you can update your information, adjust privacy preferences, or download a copy of your data. If you wish tomake a request that is not available through your account, you may contact us directly via our Support team.

For your protection, we will verify your identity before processing requests that involve access toor deletion of personal information. Verification methods may include confirming information associated with your account or other reasonable steps permitted by law.

We will respond to privacy requests within the timeframes required by applicable laws. If you are dissatisfied with our response, you may appeal by contacting us with details of your request, and we will review your appeal promptly. You also have the right to lodge a complaint with your local data protection authority or other applicable regulator.

Cookies and Tracking Technologies

Types of Cookies and Technologies We Use

Essential Cookies

These cookies are necessary for Wippit to function properly. They enable core features such as user authentication and session management, secure login and account access, fraud prevention and security monitoring, and payment processing through our subscription system.Without these cookies, many parts of the Service will not work as intended. Because they arestrictly necessary, you cannot disable essential cookies without significantly affecting your ability to use the platform. Importantly, these cookies do not track your activity across third-party websites.

Analytics Cookies

We use analytics cookies to understand how users interact with our platform and to identify opportunities for improvement. Our analytics tools help us understand user behavior, traffic sources, and platform performance and behaviour to help us improve user experience, and internal analytics tools track feature usage and platform performance metrics.

These analytics cookies help us make data-driven decisions about platform improvements,identify and fix usability issues, understand which features are most valuable to users, and optimize our platform performance and reliability. You can opt-out of analytics tracking through your browser settings or by using opt-out tools provided by the analytics services.

Marketing Cookies

We use marketing cookies to deliver relevant advertising and measure the effectiveness of our marketing campaigns. These cookies include social media pixels from platforms like Facebook, Instagram, and Google that help us reach potential users with relevant advertising,retargeting cookies that allow us to show ads to people who have visited our website, and conversion tracking cookies that help us understand which marketing efforts are most effective. These cookies also allow us to build lookalike audiences based on our existing users, helping us reach other musicians who may benefit from our platform. You can control oropt out of marketing cookies through your browser settings or through the cookie consentbanner presented when you visit our site.

Preference Cookies

We use preference cookies to remember your choices and customize your experience on ourplatform. These cookies remember your language and region preferences, interface customization settings, notification preferences, and other user experience preferences that make our platform more convenient and personalized for you.

Third-Party Cookies and Integrations

In addition to the cookies we set directly, certain third parties may place cookies or similar technologies when you use Wippit. These cookies support integrations, secure payments, analytics, and marketing activities, and are governed by the respective providers’ privacy and cookie policies.

Social Media Cookies

When you connect your social media accounts or interact with social media features on our platform, those platforms may set their own cookies on your device. This includes cookies from Instagram, TikTok, YouTube, SoundCloud, and other platforms we integrate with. These cookiesare governed by the respective platforms' privacy policies and cookie policies. These cookies help enable integrations and analytics related to your connected accounts but are managed under each platform’s privacy and cookie policies. You can manage or disable these cookies using your browser settings or through each platform’s privacy controls.

Payment Processing Cookies

Our payment processor may set cookies to ensure secure payment processing and to prevent fraud. These cookies are required for subscription billing and cannot be disabled without affecting your ability to maintain a paid account.

Analytics and Marketing Cookies

We work with analytics and marketing partners, including Google Analytics, Google Ads, and
Hotjar, which may set their own cookies to collect aggregated data about user behavior and
platform performance. These partners help us understand how users engage with Wippit,
measure campaign effectiveness, and improve our services. We only work with providers that
maintain appropriate privacy and security safeguards. While we carefully select our third-party
partners, each provider manages its own data practices. We encourage you to review their
respective privacy policies to understand how your data may be used.

Managing Your Cookie Preferences

You can manage your cookie preferences through your web browser or device settings, as wellas through the cookie consent tools we provide.

Browser-Based Cookie Controls

Most web browsers allow you to view, delete, or block cookies, set preferences for specific websites, and receive notifications when new cookies are placed.

Please note that disabling certain cookies may impact how our platform functions. Essential cookies are necessary for core functionality and cannot be disabled, but you may choose torestrict analytics and marketing cookies while still accessing our core services.

Cookie Consent and Opt-Out Options

When you first visit our website, you will see a cookie consent banner that allows you to choose which categories of cookies to accept. You can modify your cookie preferences at any time by accessing the cookie settings link in our website footer or by contacting our support team.

Mobile App Controls

If you access Wippit through a mobile device, you can manage similar tracking technologies through your device’s privacy settings. Most devices allow you to limit ad tracking, control location sharing, and manage app permissions. We respect your device-level privacy preferences and will provide additional in-app options for managing data collection when our mobile applications become available.

Cookie Policy Updates and Notifications

Changes to Cookie Usage

We may update our use of cookies and similar tracking technologies as we introduce new features, integrate with additional partners, or improve our platform. When significant changes are made, we will update this Privacy Policy and if applicable, our separate Cookie Policy. If those changes materially affect your privacy choices, we will seek your renewed consent orprovide updated opt-out options.

Our cookie practices are designed to comply with applicable privacy and electronic communications laws, including the EU’s ePrivacy Directive and GDPR requirements for consent, as well as California’s online tracking and consumer privacy laws.

Children's Privacy

Age Restrictions and Compliance

Minimum Age Requirements

Wippit is intended for use only by individuals who meet the minimum legal age to use socialmedia in their jurisdiction. Our Service is not intended for use by individuals who do not meet the minimum legal age in their jurisdiction, unless they are represented by a parent, guardian, or authorized representative as permitted under our Terms of Service. By creating an account and using our Service, you represent and warrant that you either (a) meet the minimum legal age inyour jurisdiction, or (b) are using the Service with the involvement of a parent, guardian, or authorized representative until you reach that age, as permitted under our Terms of Service. We do not knowingly collect personal information from individuals who do not meet theserequirements.

This age restriction helps us comply with various privacy laws including the Children's Online Privacy Protection Act (COPPA) in the United States, the General Data Protection Regulation(GDPR) requirements for children's consent in the European Union, and similar privacy laws inother jurisdictions that provide special protections for minors.

Verification and Enforcement

While we do not actively verify the age of our users during account creation, we rely on users to provide accurate information about their eligibility to use our Service. If we become aware thatwe have collected personal information from someone who does not meet the minimum legalage in their jurisdiction (and is not represented by a parent, guardian, or authorized representative), we will take immediate steps to delete that information and terminate the associated account.

We encourage parents and guardians to monitor their children's internet usage and to contactus if they believe their child has provided personal information to Wippit without consent. We take children's privacy seriously and will cooperate with parents and guardians to address any concerns about underage use of our platform.

Reporting Underage Users

If you become aware of any users who appear not to meet the minimum legal age requirement in their jurisdiction (and who are not represented by a parent, guardian, or authorized representative as permitted under our Terms of Service), please report this to our support team immediately. We will investigate all reports of underage users and take appropriate action,including account termination and deletion of any personal data, when necessary.

We also encourage users to report any content or behavior that appears to target, endanger, or exploit minors, as this violates our Terms of Service and community guidelines in addition to potentially violating laws designed to protect children online.

Parental Rights and Responsibilities

Parental Notification and Consent

If we discover that we have inadvertently collected personal information from an individual whodoes not meet the minimum legal age in their jurisdiction (and is not represented by a parent,guardian, or authorized representative as permitted under our Terms of Service), we will notify the parent or guardian (if contact information is available) and provide details about the information collected and how it was used. Parents will also be given the opportunity to review and request deletion of their child’s information.Parents have the right to review any personal information we have collected about their child, request that we stop collecting or using their child's information, and request that we delete any information we have collected about theirchild.

International Data Transfers

Cross-Border Data Processing

Global Service Delivery

Wippit operates as a global platform serving musicians and artists around the world. To provide our Service effectively, your personal information may be transferred to and processed in countries other than your own, including the United States, where our primaryservers and infrastructure are located. These transfers are necessary for the delivery of our core services, platform maintenance, and customer support.

We ensure that all international data transfers comply with applicable data protection laws and that your personal information receives an adequate and consistent level of protection,regardless of where it is processed.

Legal Frameworks for International Transfers

For users in the European Union and European Economic Area, we rely on established legal mechanisms to ensure the lawful transfer of personal information outside the EEA. These mechanisms include Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions issued by the European Commission for countries recognized as providing adequate protection, and other appropriate safeguards as recognized under GDPR and applicable data protection laws.

We regularly review our international transfer practices to ensure ongoing compliance with evolving privacy laws and regulatory guidance.

Safeguards for International Transfers

When transferring personal information to recipients in countries without an adequacy decision,we implement robust contractual and technical safeguards, including:

  • Data processing agreements and SCCs requiring recipients to protect personal data toEU-equivalent standards;

  • Encryption of data in transit and at rest;

  • Access controls and authentication measures limiting who can access transferred data;

  • Ongoing monitoring, audits, and incident response procedures across all processing locations.

These measures ensure that your personal information remains secure, private, and protected regardless of where it is processed.

Changes to This Privacy Policy

Policy Updates and Modifications

How We Handle Privacy Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices,services, legal requirements, or business operations. When we make changes, we will revise the "Last Updated" date at the top of this document and, where appropriate, provideadditional notice through our website, email, or in-app notifications.

We are committed to transparency regarding any updates to our privacy practices. Minor changes, such as clarifications or corrections that do not materially affect your rights, maybe made without prior notice; however, we will still update this policy date and maintain arecord of all revisions.. For material updates that significantly affect how we collect, use, orshare your personal information, we will provide advance notice. This may include directemail notifications, prominent announcements on our website or platform, and notices withinyour account dashboard. If a change requires your consent under applicable law, we willclearly explain the modification and seek your explicit consent before applying it.

Your Choices Regarding Policy Changes

Reviewing and Understanding Changes

When we notify you of changes to this Privacy Policy, we encourage you to review the updatedpolicy carefully to understand how the changes may affect you. For significant updates, we will provide a summary of the key modifications along with access to the full policy.If you have questions about any changes or need clarification about how they affect your account or information, please contact our support team.

If You Disagree with Changes

If you do not agree with the updated Privacy Policy, you may choose not to accept the changes where consent is required, although this may limit access to certain features or services. In other cases, you can adjust your account settings to manage data collection and sharing, exercise your privacy rights (including deletion or restriction of processing), or discontinue use of our Service. We will respect your choices and work with you to address any concerns regarding how policy changes affect your personal information.

Maintaining Historical Records

Policy Version Control

We maintain records of previous versions of our Privacy Policy so that you can review how our practices have evolved over time. If you would like to access a prior version of the Privacy Policy for any reason, please contact our support team, and we will provide the relevant document upon request.

Contact Information and Support

Privacy-Related Inquiries and Requests

Primary Contact Methods

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need assistance with privacy-related concerns, please contact our support team at the official channels stated on our website For urgent privacy concerns, such as suspected unauthorized access to your account or potential security incidents, please contact us immediately.

Support Process

We aim to respond to all privacy inquiries promptly and transparently. We review each request carefully to ensure compliance with applicable legal requirements and to protect the privacy and security of all users. You may be asked to verify your identity before we can process certain requests related to your personal information

Escalation and Appeals Process

If you are not satisfied with our initial response to your privacy inquiry or request, you may request escalation. We are committed to resolving privacy concerns fairly and thoroughly, and we will work with you to address any issues or misunderstandings.

For users in the European Union or European Economic Area, you also have the right to lodge a complaint with your local data protection authority if you believe we have not adequately addressed your privacy concerns. We encourage you to contact us first so wecan attempt to resolve any issues directly, but we respect your right to seek assistance from regulatory authorities when necessary.

Business and Legal Contact Information

Company Information

This Privacy Policy is issued by Wippit LLC., which is the data controller for your personal information under applicable privacy laws.

Legal and Regulatory Compliance

For legal matters, regulatory inquiries, or law enforcement requests, please contact us at legal@wippit.ai. All legal requests must be submitted in writing and include appropriate documentation of authority and legal basis for the request.

We cooperate with law enforcement and regulatory authorities in accordance with applicable laws, but we carefully review all requests to ensure they are valid and legally binding before disclosing any user information.

Conclusion

This Privacy Policy represents our commitment to protecting your privacy and being transparent about our data practices.

We encourage you to review this Privacy Policy periodically and to contact us with any questions or concerns.