Privacy Policy

1. Who handles your information

ONDECK is operated by Emilio Lorenzo. For privacy questions or requests, email mbproduction916@gmail.com. This draft describes the current service and must be reviewed before public launch.

2. Information used by ONDECK

• Account information, such as email, sign-in details and information provided by a sign-in provider.
• Creator profile details, including display name, biography, genres, photos, social links and submission prices.
• Artist submissions, including artist name, song title, music link, email, messages, selected tier, queue status and review information.
• Payment records, including Stripe references, amounts, payment status, commission, processing fees and membership subscription status.
• Technical and security information generated when operating and protecting the service, such as error records and connection information.

3. Why information is used

ONDECK uses information to provide sign-in, display creator pages, organize submissions, support reviews, verify payments and membership access, calculate earnings, answer support requests and protect against fraud or unauthorized access. It may also preserve records required for accounting, disputes or legal obligations.

4. Public pages and creator access

Creator profile information and social links are public when included on a creator page. Submission information is shared with the creator receiving it. Song titles and artist names may appear in creator queues or livestream overlays where that creator uses those views; do not submit information you do not want included in the requested review context. Artist email is not intended as public profile content.

Creators must use submission information only for legitimate review, support and payment purposes. Other creators should not have access to your private submissions or account information.

5. Service providers and payments

ONDECK uses Lovable Cloud for application hosting services, authentication, data and profile photo storage. Stripe processes membership and submission payments and handles connected-account verification and payouts. Full card numbers and bank verification details are entered with Stripe, not stored in ONDECK’s payment ledger. Google or other enabled sign-in providers process information under their own policies.

Information may be disclosed when required by law or necessary to address fraud, security issues or payment disputes. The final provider, hosting-location and international-transfer disclosures must be confirmed before launch.

6. Session storage and security

The service uses browser storage and session information to keep you signed in and support account access. ONDECK uses access controls to separate creator data and restrict payment updates. No internet service can guarantee absolute security. A complete cookie, analytics and tracking inventory still needs review before launch; this draft does not claim that optional tracking is absent.

7. Retention and your requests

Information is retained as needed to operate the service and meet legitimate security, accounting and legal requirements. Exact retention periods and deletion procedures have not been finalized. You may request access, correction or deletion by emailing support. Identity verification may be required, and some payment or legal records may need to be retained. Available rights depend on applicable law.

8. Items still under review

Before launch, ONDECK must finalize age eligibility, regional privacy rights, retention schedules, request handling and any required consent or international-transfer arrangements. This draft is not a certification of compliance.