Privacy Policy

1. Who We Are

The PopRecord ("PopRecord," "we," "us," or "our") is operated by PopDrop LLC, a Washington State limited liability company. PopRecord is a public transparency database that analyzes Spotify artists for signals associated with AI-generated music. We are not affiliated with, sponsored by, or endorsed by Spotify AB.

Our website is located at thepoprecord.com. You can contact us at privacy@thepoprecord.com.

2. Information We Collect

2.1 Information You Provide Voluntarily

We collect the following information only when you choose to provide it:

• Email address — when you choose to be notified when an artist analysis is complete. This is entirely optional. You can use PopRecord without providing an email address.
• Community input submissions — when you submit information through our "I know this is a real person," "I have additional concerns," or "I am this artist" forms. This may include your name, your relationship to an artist, evidence links, and optionally your email address for follow-up.
• Appeal submissions — when an artist submits identity verification through our appeal pathway. This includes contact information and verification evidence you choose to provide.

2.2 Information Collected Automatically

When you use PopRecord, we may collect standard web server logs including:

• Your IP address (not stored permanently — used only for rate limiting and security)
• Browser type and version
• Pages visited and search queries on PopRecord (artist names searched)
• Date and time of access

We do not use advertising trackers, cross-site tracking pixels, or behavioral analytics platforms. We do not use Google Analytics.

2.3 Artist Data — Third Party Public Sources

PopRecord collects publicly available data about artists from third-party platforms including the Spotify Web API, MusicBrainz, and Last.fm. This data includes artist names, profile images, genre tags, follower counts, release histories, and other publicly available metadata. We do not collect or store any private or non-public data about artists.

If you are an artist and wish to have your data reviewed or corrected, please use the appeal pathway on your artist profile page.

3. How We Use Information

3.1 Email Addresses

• Used solely to send a one-time notification when an artist analysis you requested is complete
• Not added to any marketing list
• Not shared with any third party
• Deleted from our active queue records after the notification is sent

3.2 Community Input and Appeals

• Reviewed by PopRecord administrators and our AI triage system
• Used solely to improve the accuracy of artist assessments
• Never published publicly
• Contact information used only for follow-up on your specific submission

3.3 Search Log Data

• Used to understand which artists users are curious about
• Used to prioritize our analysis queue
• Not linked to individual users or sold

3.4 AI Analysis

PopRecord uses the Anthropic Claude API to analyze artist signal data. We pass only derived signal data — never raw artist biography text, track titles, or other raw content from Spotify — to the Claude API. Signal data passed to Claude does not include any personal information about our users. See our Spotify compliance note in Section 7.

4. Information We Do Not Collect

• We do not require user accounts or registration
• We do not collect payment information
• We do not collect social media credentials
• We do not access your Spotify account or listening history
• We do not collect information from children — PopRecord is intended for users 13 and older

5. How We Share Information

We do not sell, rent, or trade your personal information. We share information only in the following limited circumstances:

5.1 Service Providers

We use the following third-party services to operate PopRecord:

• Supabase — database and backend infrastructure (data stored in the United States)
• Lovable — hosting and deployment platform
• Brevo — transactional email delivery for analysis completion notifications
• Anthropic — AI analysis via the Claude API (signal data only, no user personal information)
• Spotify AB — public artist data via the Spotify Web API
• SerpAPI — reverse image search for artist profile images

Each of these providers has its own privacy policy governing their handling of data.

5.2 Legal Requirements

We may disclose information if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of PopRecord, our users, or the public.

5.3 Business Transfers

If PopDrop LLC is acquired, merges with another company, or transfers its assets, your information may be transferred as part of that transaction. We will notify you of any such change via a notice on this page.

6. Data Retention

• Notification email addresses — deleted from scan queue records immediately after the notification email is sent
• Community input submissions — retained for as long as the associated artist profile exists in our database, or until you request deletion
• Appeal submissions — retained permanently as part of the artist's record history
• Search log data — retained for 90 days then deleted
• Artist signal data — retained indefinitely as part of the public database, subject to updates and corrections

7. Spotify API Compliance

PopRecord accesses publicly available artist data through the Spotify Web API under Spotify's Developer Terms. We use client credentials flow only — we never access any Spotify user's personal account data or listening history. PopRecord is not affiliated with, sponsored by, or endorsed by Spotify AB. Spotify is a registered trademark of Spotify AB.

In compliance with Spotify's Developer Terms, we do not pass raw Spotify Content into AI models. We derive signal data from Spotify's public artist metadata and pass only those derived signals to our AI analysis pipeline.

8. Your Rights

You have the right to:

• Access — request a copy of personal information we hold about you
• Correction — request correction of inaccurate personal information
• Deletion — request deletion of your personal information (note: artist profile data derived from public sources is not personal information under this provision)
• Opt-out — you can decline to provide an email address at any time and use PopRecord without any personal data collection

To exercise any of these rights, contact us at privacy@thepoprecord.com. We will respond within 30 days.

If you are a resident of the European Economic Area, you have additional rights under GDPR including the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have additional rights under the CCPA including the right to know what personal information is collected and the right to non-discrimination for exercising your rights.

9. Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (HTTPS), access controls on our database, and limiting access to personal information to authorized personnel only. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

10. Cookies

PopRecord uses minimal cookies necessary for the site to function — specifically session cookies to maintain your search state. We do not use advertising cookies, tracking cookies, or third-party analytics cookies. You can disable cookies in your browser settings, though this may affect site functionality.

11. Children's Privacy

PopRecord is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us at privacy@thepoprecord.com and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date at the top of this page and, where appropriate, posting a notice on the site. Your continued use of PopRecord after changes are posted constitutes your acceptance of the updated policy.