Privacy Policy

Vibular Tech Records LLC ("Dosido," "Company," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit www.dosido.app, use the Dosido website or applications, or otherwise interact with our music-collaboration and project-management platform (collectively, the "Service").

This Privacy Policy applies to individuals whose personal information may be processed by Dosido, including: (a) users and prospective users of the Service; (b) visitors to public profiles, projects, or share links; (c) participants in contests or promotions we administer; and (d) individuals who contact us for support or other business purposes, or who receive marketing communications from us.

The Service allows users to upload, organize, collaborate on, and share music projects and related content. Depending on a user's choices, profile information, projects, tracks, artwork, comments, notes, to-do items, and other content may be visible to collaborators, recipients of a share link, or the public.

Please review your project and sharing settings before making content available to others. Information made public may be viewed, copied, downloaded, or further shared by others outside Dosido's control.

Table of Contents

1. Information We Collect
2. How We Use Your Information
3. How We Disclose Your Information
4. Your Privacy Choices
5. Data Retention
6. Privacy Rights for EEA, UK, and Swiss Users
7. U.S. State Privacy Rights
8. Security
9. Children's Privacy
10. Third-Party Links
11. Email Communications
12. Changes to This Privacy Policy
13. Contact Us

Appendix I – Purposes and Legal Bases for Processing under the GDPR and UK GDPR

1. Information We Collect

We collect the following types of information, which may include personal information or personal data as defined under applicable law, in several ways depending on how you interact with our Service. The information described below may be provided directly by you, collected automatically when you interact with the Service, or obtained from third parties.

1.1. Information You Provide Directly

• Identifiers; Contact and Profile Information. If you create, access, or manage an account through the Service, sign up to receive communications, or contact us, we may process your name, username, email address, optional telephone number, date of birth, biography, pronouns, self-provided general location, profile photograph, links to music, social-media, or other third-party services, account authentication information, and support communications.
• User Content and Collaboration Information. We process the music and audio files, track or project artwork, playlists, project and track details, comments, notes, to-do items, sharing and visibility settings, contest submissions, and other content you upload or create. We may also process metadata associated with music projects or digital-audio-workstation files, such as file names, song or version titles, key, tempo, and plugins used, as well as AI-assisted file-routing results and related audit information, such as the model identifier, candidate count, and timestamp.

1.2. Information Collected About You from Third Parties or Other Sources

If you create, access, or manage an account through the Service, we may receive personal information about you from service providers and other third parties in connection with your account and use of the Service:

• Commercial and Integration Information: We may process your subscription status and limited transaction information received from our payment processor. If you connect Dropbox or use an available third-party sign-in option, we may receive connection and account information, configured files and related metadata, and authentication information from the applicable provider. Our payment processor, rather than Dosido, processes payment-card details.

1.3. Information Collected Automatically

We automatically collect, either ourselves or through third-party providers, certain types of personal information when you visit, use, or navigate the Service, whether you have an account, access the Service without an account, or otherwise interact with the Service, including through a public profile, project, or share link. This information, as described more fully below, is generally considered Internet or Other Electronic Network Activity Information under California law and may also include certain Identifiers.

• Log and Usage Data: This includes your Internet Protocol (IP) address, approximate location inferred from your IP address, such as city-level location, browser type and version, operating system, referring URLs, pages visited, timestamps, session identifiers, traffic sources, UTM parameters, and user agent information. We collect this information through server logs and similar technologies when you interact with the Service. We use this information to analyze usage patterns, diagnose technical issues, improve the Service, detect spam, protect against unauthorized access, and maintain the integrity of the Service.
• Cookies and Similar Technologies: We use cookies, local storage, software development kits, PostHog, Sentry, and similar technologies to collect information about your interactions with the Service, whether you have an account or otherwise interact with the Service. This information may include page or screen views, traffic sources, UTM parameters, user agent information, feature interactions, including playback activity, diagnostic and performance data, and, where enabled, session replays. We use this information to analyze usage patterns, diagnose technical issues, improve the Service, and maintain its security and integrity. In providing these analytics and diagnostic services, the third-party providers of these technologies may collect information about your activities over time on the Service on Dosido’s behalf. We do not permit them to use these technologies to collect personally identifiable information about your online activities over time and across unaffiliated websites or online services for their own purposes. For more information about our use of cookies and similar technologies, please see Section 4 below.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain the Service: Creating and managing your account, confirming your eligibility to use the Service, creating and displaying your profile, enabling you to upload, store, play, organize and share music and related content, facilitating project collaboration, using associated metadata to tag and organize files, providing optional synchronization and sign-in integrations, administering your access to the Service, and providing functionality you request.
• To process payments: Managing subscriptions, processing billing through our payment processor, and sending payment-related communications.
• To communicate with you: Sending service-related emails, responding to support requests, notifying you of product updates or changes, sending marketing communications where permitted, and administering contests or promotions.
• To improve the Service: Analyzing usage patterns, diagnosing technical issues, developing new features, and providing AI-assisted file routing as described in Section 3.1.
• To ensure security and prevent fraud: Detecting spam, protecting against unauthorized access, and maintaining the integrity of the Service.
• To moderate content and enforce our Terms: Reviewing content and account reports, investigating potential violations, taking appropriate moderation or account actions, and protecting the rights, safety, and integrity of Dosido, its users, and others.
• To comply with legal obligations: Responding to legal requests and fulfilling our regulatory obligations.

3. How We Disclose Your Information

We do not sell your personal information for monetary consideration or share it for cross-context behavioral advertising. We may disclose your personal information in the following circumstances:

3.1. Third-Party Service Providers

We use third-party service providers that process personal information to help us provide, maintain, support, administer, and secure the Service. Our service providers include or may include:

• Payment processors: Payment processing and subscription management.
• Render and Cloudflare: Cloud hosting, file storage, content delivery, and related security services.
• PostHog and Sentry: Product analytics, session replay, and error, crash, diagnostic, and performance monitoring.
• Loops and customer-support providers: Marketing email communications and customer support.
• Dropbox and third-party sign-in providers: Optional file synchronization, integrations, and account authentication.
• Anthropic: If you enable Dropbox synchronization, Dosido sends limited text metadata—such as parsed file-name or title fragments, a parsed version fragment, and candidate existing song titles—to Anthropic’s Claude service to help route an imported file to an existing project or track. Dosido does not send the audio file itself to Anthropic for this feature, and Anthropic is not permitted to use the submitted information to train its models.
• Slack: Internal team communications.

3.2. Other Users and the Public

We disclose personal information through the Service according to the features you use and the visibility settings you select:

• Profiles and collaborations: Information included in your profile—such as your name, username, profile photograph, biography, pronouns, self-provided location, and social or music-service links—may be visible to collaborators, recipients of share links, and other Internet users. Members of a project may see and interact with the project's content and activity.
• Public projects and share links: Content designated as public or shared by link may be available to anyone with access to the relevant page or link. Activity within a private project is visible only to project members, except that, even if a project is private, another project member may share individual tracks or other content if the Service permits.

3.3. Contest and Promotion Partners

If you enter a co-sponsored contest or promotion, we may disclose the information and content needed to administer it to the identified partner. For the Femme House remix contest, this includes usernames, email addresses, and remix submissions.

3.4. Business Transfers

If Dosido is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will provide notice of any material change to the handling of your personal information as required by applicable law.

3.5. Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order, subpoena, or government agency request).

3.6. With Your Consent

We may disclose your information to third parties when you direct us to do so or otherwise provide consent.

4. Your Privacy Choices

• Manage Visibility and Sharing. You may review, add, change, or remove your profile information through your profile settings. Any profile information you include in your profile is visible to collaborators, recipients of share links and other Internet users. If you own a project, you may use the Service’s project and sharing settings to control whether project content is private, available to collaborators or share-link recipients, or public. Content already copied or reshared by others may remain outside our control.
• Manage Cookie Preferences. You may manage cookies and similar technologies used by Dosido through Cookiebot. Most browsers also allow you to remove or reject cookies through your browser settings. Please note that disabling cookies or similar technologies may affect the functionality of the Service. For users in the European Economic Area and United Kingdom, Dosido will obtain any consent required by applicable law before activating non-essential cookies or similar technologies.
• Manage Connected Services. You may disconnect an integration, such as Dropbox, through the applicable account or integration settings. Disconnecting an integration stops new access but may not automatically delete information previously imported into the Service.
• Marketing Communications. You may manage your receipt of marketing and non-transactional communications by clicking on the “unsubscribe” link located at the bottom of any of our marketing emails, through available preferences in our web or iOS app, or by contacting us as set forth in Section 13.
• Do Not Track. We do not respond to “Do Not Track” settings at this time.
• Universal Opt-Out Mechanisms. Where required by applicable U.S. law, we recognize legally valid browser- or device-based opt-out preference signals as requests to opt out of the sale of personal information or targeted advertising.
• Exercising Your Privacy Rights; Questions or Concerns. You may contact us to exercise your privacy rights or to relay any questions or concerns as set forth in Section 13.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account and Profile Data: Retained for the duration of your account and deleted or de-identified within a reasonable period after account deletion, except where we are required or permitted to retain it for legal, tax, audit, security, fraud-prevention, or dispute-resolution purposes.
• User Content: Projects owned or controlled by you will be deleted within a commercially reasonable period following closure of your account. Content contributed to another user's project may remain to preserve the project and collaboration history, but we may remove or de-identify the deleted user's profile information or attribution where reasonably practicable.
• Billing and Transaction Data: Retained for as long as reasonably necessary to administer subscriptions and billing and satisfy applicable tax, accounting, fraud-prevention, recordkeeping, and dispute-resolution requirements.
• Analytics and Diagnostic Data: Retained for as long as reasonably necessary to analyze use of, diagnose problems with, secure, and improve the Service, taking into account whether the information remains identifiable and useful for those purposes.
• Security, AI-Audit, and Backup Data: Retained for as long as reasonably necessary for security, abuse prevention, auditability, legal compliance, and backup and disaster-recovery purposes.

6. Privacy Rights for EEA, UK, and Swiss Users

6.1. Data Controller Contact and Status

• Vibular Tech Records LLC d/b/a Dosido (“Dosido”) is the controller of the personal information described in this Privacy Policy. You may contact Dosido at 100 Pine St #2600, San Francisco, CA 94111, or [email protected].
• European Representatives: Dosido’s representative in the European Economic Area is Henry Mason, 217 South Circular Road, Dublin, D08 RW1A, Ireland [email protected]. Dosido’s representative in the United Kingdom is Bryan Mason 332 Devonia Road, London N1 8JH [email protected]. You may contact the applicable representative regarding Dosido’s processing of personal information or the exercise of your data-protection rights.

6.2. Legal Bases for Processing Your Personal Information

Please visit Appendix I for a description of the legal bases on which we process your personal information.

• Please note that when we process your personal information on the basis of your consent, you have the right to withdraw your consent to such processing at any time—including where we use non-essential cookies or electronic marketing communications directed to European users.
• Additionally, for processing done on the basis of contractual necessity, if you choose not to provide this information, we may be unable to create your account, process requests or transactions, or deliver the services you request, as applicable.
• Where we rely on our legitimate interests, you may have the right to object to that processing as described below.

6.3. Your Privacy Rights

If you are located in the EEA, UK, or Switzerland, subject to applicable law, you may have the right to:

• Request a copy of the personal information we hold about you,
• Request that we transmit your personal information to another controller (where applicable under the right of data portability),
• Request that we correct inaccurate or incomplete data,
• Request that your data be deleted,
• Withdraw your consent, if you have consented to our use of personal information for a specific purpose,
• Request that your data be restricted, and
• Object to certain processing of your personal information, including processing based on our legitimate interests, and, at any time, processing for direct marketing purposes.

6.4. How to Submit Privacy Rights Requests

• Contact Us. If you wish to exercise your rights enumerated above, please submit a request to us as set forth in Section 13. We may request additional information where reasonably necessary to confirm your identity and process your request.
• Contact Your Data Protection Authority.
  • If you are in the EEA and have a concern about our processing of personal information that we are not able to resolve, you have the right to lodge a complaint with a competent data protection authority, including the authority in the Member State or EEA country of your habitual residence, place of work, or the alleged infringement. For contact details of your local Data Protection Authority, please see: https://edpb.europa.eu/about-edpb/board/members_en.
  • If you are in Switzerland and have such concerns, please see the Federal Data Protection and Information Commissioner website at https://www.edoeb.admin.ch/edoeb/en/home.html.
  • If you are in the UK and have such concerns, please see the Information Commissioner’s Office website at https://ico.org.uk/.

6.5. International Data Transfers

Dosido is based in the United States. If you are accessing the Service from the EEA, UK, or Switzerland, your personal information may be transferred to and processed in the United States. Where required, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and other lawful transfer mechanisms to ensure adequate protection of your data. You may request additional information about the applicable transfer safeguards by contacting us as described in Section 13.

7. U.S. State Privacy Rights

This section summarizes certain privacy rights that may apply to residents of California and other U.S. states that have enacted comprehensive privacy laws.

Depending on your state of residence, our relationship with you, and subject to applicable law, you may have certain rights regarding our collection, use, disclosure, sharing, and other processing of your personal information. To request to exercise such rights, contact us as set forth in Section 13. Please be aware that these rights may be subject to applicable definitions, limitations, verification requirements, and exceptions and may vary based on your jurisdiction.

Subject to applicable law, these rights may include:

• The right to confirm whether we process your personal information and to access such personal information.
• The right to request correction of inaccuracies in your personal information.
• The right to request deletion of your personal information.
• The right to request a copy of certain personal information you have provided to us, where required by law.
• The right to opt out of certain types of processing, including processing for targeted advertising purposes, where applicable.
• The right to opt out of profiling or automated decision-making in furtherance of decisions that produce legal or similarly significant effects, where provided by law.
• The right to opt out of the sale or sharing of personal information, as defined under applicable law.
• The right, where provided by applicable law, to limit, opt out of, or otherwise control the use and disclosure of sensitive personal information or sensitive data, as defined under applicable law.
• The right to designate an authorized agent to submit a request on your behalf, where permitted by law.
• The right to appeal a decision regarding your privacy rights request, where required by applicable law.
• The right not to receive unlawful discriminatory treatment for exercising your privacy rights.

Verification. We may take reasonable steps to verify your identity and authority to make a request before processing it. We may request additional information where reasonably necessary to verify or respond to your request. If we cannot reasonably verify your identity or authority, we may be unable to fulfill the request.

Appeals Process. If we deny your privacy rights request in whole or in part, we will inform you of the reasons for our decision. Where applicable law provides a right to appeal, you may appeal that decision by contacting us as set forth in Section 13 with "Privacy Appeal" in the subject line. Please include a description of the request that was denied and the basis for your appeal. We will respond to your appeal within the timeframe required by applicable law. If your appeal is denied, we will provide information on how to contact your state Attorney General or other applicable regulatory authority, where required by law.

Response Timeframes. We will respond to privacy rights requests within the timeframes required by applicable law. Where permitted, we may extend the applicable response period and will notify you as required by law.

8. Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, acquisition, loss, misuse, alteration, or disclosure. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

9. Children's Privacy

The Service is not directed to individuals under the age of 16, and users must be at least 16 to create an account or use interactive features. Users under the age of majority where they live must have permission from a parent or legal guardian, who must review the Terms with them. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe that a child under 16 has provided us with personal information, please contact us at [email protected].

If you are a California resident under 18 and a registered user, you may remove, or request removal of, content or information you posted through available account or content-management tools or by contacting us as described in Section 13. Removal does not ensure complete or comprehensive removal, including where another person has copied or reposted the content or information.

10. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites you visit.

11. Email Communications

If you have an account with Dosido, we may send you service-related emails (e.g., account verification, billing notices, security alerts). These are transactional and cannot be opted out of while you maintain an account. We may also send marketing emails. You can unsubscribe from marketing emails using the link provided in the email or through available account preferences.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Each revised version will state a 'Last Updated' date at the top, which is the date on which that version applies. If required by applicable law, we will provide additional notice of material changes. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Vibular Tech Records LLC
100 Pine St #2600
San Francisco, CA 94111
Email: [email protected]

Appendix I – Purposes and Legal Bases for Processing under the GDPR and UK GDPR

The table below summarizes the categories of personal information described in this Privacy Policy, examples of information within each category, and the principal purposes and legal bases for processing that information under the GDPR and UK GDPR.