Privacy Policy

1.Scope

This Privacy Policy describes how Vamonos Music Corp. collects and processes personal information when you use Vamonos Play. It applies to information collected through the platform, account creation and authentication flows, campaign activity, communications, and related support interactions.

Vamonos will apply this Policy in accordance with applicable privacy laws, including the Brazilian Lei Geral de Proteção de Dados Pessoais (LGPD) where applicable, and other data-protection laws that apply to our processing activities.

2.Information We Collect

The exact data collected depends on the features you use and the permissions you grant. Categories may include:

• Account and identity information: name, email address, account identifiers, profile information, and information required to administer an approved account.
• Google and YouTube information: identifiers associated with your Google account and selected YouTube channel, channel name and URL, playlist information, video or music metadata, and other YouTube data made available through the permissions you authorize.
• Analytics and performance information: views, reach, engagement, and other channel, video, or playlist metrics used to validate campaign participation and calculate tokens, as applicable.
• Platform activity: campaigns created or joined, playlists selected for campaigns, token balances and transactions, referrals, invitations, and other actions taken in the Service.
• Technical and usage information: IP address, device or browser information, timestamps, log data, security events, and similar technical information where collected.
• Communications: information you provide when contacting support or communicating with Vamonos.

We do not intentionally request sensitive personal information unless necessary for a specific lawful purpose and disclosed to you.

3.How We Use Information

• To create, approve, authenticate, secure, and manage user accounts.
• To connect and operate the YouTube features you authorize.
• To monitor eligible campaign playlists and validate participation.
• To calculate and distribute tokens and promotional rewards.
• To operate, maintain, troubleshoot, and improve the platform.
• To detect and prevent fraud, abuse, security incidents, and unauthorized activity.
• To communicate with you about the Service, account matters, updates, and support.
• To comply with legal obligations and protect the rights, safety, and property of Vamonos, users, and third parties.

4.YouTube and Google Data

Vamonos Play uses Google and YouTube authorization to provide its core features. When you connect your account, Google displays the permissions requested by the application. Vamonos will request only the access reasonably necessary for the applicable features, and the exact scopes should be maintained in our technical records and privacy notice.

YouTube API data is used for the purposes disclosed to you, including operating authorized channel and playlist features, monitoring eligible campaign activity, and obtaining the metrics necessary for token calculations. Vamonos does not treat YouTube API data as a general-purpose advertising database.

You may revoke Vamonos access through your Google account controls. Because revoked access can prevent the platform from accessing the channel information and metrics required for campaign validation, some features may stop working until authorization is restored.

Vamonos also complies with applicable YouTube API Services terms and developer policies. Those requirements may impose additional restrictions on how API data is stored, refreshed, displayed, deleted, or used.

5.Legal Bases

Depending on the jurisdiction and processing activity, Vamonos may process personal information on one or more lawful bases, including performance of a contract or provision of requested services, consent, legitimate interests, compliance with legal obligations, and protection of rights and security. The applicable lawful basis will depend on the context and the law governing the processing.

Where consent is the legal basis, you may withdraw consent, subject to the consequences explained at the time of collection and any legal exceptions to deletion or continued processing.

6.Sharing and Service Providers

Vamonos may share personal information with vendors that help operate the Service, such as cloud hosting, databases, security and logging, analytics, communications, email, customer support, and infrastructure providers. Those providers receive only the information reasonably necessary for the services they perform and are subject to appropriate contractual or legal safeguards where required.

We may also disclose information where required by law, legal process, government request, fraud or security investigation, or to protect the rights, safety, and property of Vamonos or others.

We do not sell personal information as part of the core Vamonos Play service.

7.Data Retention and Deletion

Our default approach is data minimization and retention only for as long as reasonably necessary for the purpose for which the information was collected. When you delete your Vamonos Play account, we will initiate deletion of the personal information associated with the account, subject to applicable exceptions.

We may retain limited information for a longer period where necessary to comply with law, establish or defend legal claims, prevent fraud or abuse, maintain security, resolve disputes, enforce our Terms, or meet legitimate record-keeping requirements. Where data is retained for these purposes, access and use will be limited to the relevant purpose.

Because YouTube API requirements can impose additional deletion or retention rules on API data, Vamonos will apply the stricter applicable requirement where appropriate. The final retention schedule should be documented internally by data category before public launch.

8.International Transfers

Vamonos Music Corp. is organized in the United States. Depending on where you are located and where our service providers operate, your personal information may be transferred to, processed in, or accessed from countries other than your country of residence. Where required by applicable law, Vamonos will use appropriate safeguards for international transfers.

9.Security

Vamonos uses reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. Measures may include access controls, encryption in transit and at rest where appropriate, logging, least-privilege practices, authentication safeguards, and security monitoring.

No security system can guarantee absolute security. You are responsible for maintaining the security of your Google account and promptly reporting suspected unauthorized access.

10.Cookies and Similar Technologies

Vamonos may use cookies, local storage, session identifiers, and similar technologies necessary for authentication, security, preferences, performance, and platform analytics. The specific technologies used should be documented in our Cookie Policy and configured to match applicable consent requirements.

11.Your Privacy Rights

Depending on the law that applies to you, you may have rights including access, confirmation of processing, correction, deletion, anonymization or restriction where applicable, portability where applicable, information about sharing, objection or withdrawal of consent where legally available, and other rights provided by law.

To make a privacy request, contact info@vamonosmusic.co. We may need to verify your identity before fulfilling a request. Requests will be handled within the timeframes required by applicable law.

For Brazil, the LGPD provides, among other rights, access, correction, certain deletion or blocking rights, information about sharing, portability subject to regulation, and revocation of consent where applicable. The applicable exceptions to deletion and retention will be observed.

12.Children

Vamonos Play is intended for professional or aspiring music-industry users and is not directed to children. You may not use the Service if you are under the minimum age required to lawfully provide the required consents in your jurisdiction. If we learn that we have collected personal information from a child in violation of applicable law, we will take appropriate steps to delete it.

13.Changes

We may update this Privacy Policy as the Service, our processing activities, or applicable laws change. We will publish the updated version with a revised effective date and provide additional notice where required.