Privacy Policy
1. Who We Are
Ringo B.V., registered with the Dutch Chamber of Commerce under number 83776362, located at Blankenstraat 404–406, 1018 SK Amsterdam, The Netherlands. Contact: support@thisisringo.com
2. What Ringo Lookup Does
Ringo Lookup is a rights research tool for sync licensing professionals. You paste a Spotify link, select a territory, and receive structured publishing and master ownership data compiled from public sources.
3. What Data We Collect
- Account Information. Email address, password, company name, and role when you register or redeem an invite code.
- Waitlist Information. If you request early access, we store your email address solely to notify you when a spot opens.
- Lookup Data. Spotify URLs you submit, territories you select, and the rights data returned. Track metadata (title, artist, ISRC, label, album art) is retrieved from the Spotify API and cached for up to 90 days.
- Technical Data. IP address (hashed and anonymised), browser type, device type, and timestamps to maintain security and analyse usage patterns.
- Feedback. Any corrections, suggestions, or messages you submit through the platform.
4. What We Do Not Collect
We do not collect payment information, location data, or personal data beyond what is listed above. We do not use tracking cookies for advertising. We do not sell your data.
5. How We Use Your Data
- Provide and operate the Lookup service
- Cache track data so repeated lookups are instant
- Send you access notifications if you joined the waitlist
- Detect abuse, fraud, and unauthorised access
- Improve the platform based on aggregated, anonymised usage patterns
- Comply with legal obligations
Legal bases: contractual necessity (Art. 6(1)(b) GDPR), legitimate interest (Art. 6(1)(f) GDPR), and consent where applicable (Art. 6(1)(a) GDPR).
6. Third-Party Data Sources
To compile rights information, we query the following public databases on your behalf: Buma/Stemra (NL), GEMA (DE), SACEM (FR), The MLC (US), ASCAP (US), BMI (US), SIAE (IT), SABAM (BE), SUISA (CH), JASRAC (JP), SGAE (ES), KOMCA (KR), MusicBrainz, Spotify Web API, Discogs, and AllMusic.
We do not share your personal data with these organisations. Queries are made using track metadata only.
7. Who We Share Data With
- Service providers that support our infrastructure (hosting, database, email delivery), bound by data processing agreements.
- Legal authorities when required by Dutch or EU law.
- Successors in the event of a merger, acquisition, or asset sale, subject to confidentiality obligations.
We do not sell, rent, or trade your personal data.
8. International Data Transfers
Your data is processed within the EU. Where transfers outside the EEA are necessary (e.g. infrastructure providers), we rely on Standard Contractual Clauses approved by the European Commission.
9. Data Retention
- Account data: retained while your account is active, deleted within 30 days of account closure.
- Waitlist emails: retained until you gain access or request deletion.
- Cached track data: automatically purged after 90 days of inactivity.
- Anonymised analytics: retained indefinitely (not linked to you).
10. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
Contact support@thisisringo.com to exercise any of these rights. We respond within 30 days. You may also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
11. Security
We use encryption in transit (TLS), hashed IP addresses, secure password storage (bcrypt), and access controls to protect your data.
12. Changes to This Policy
We may update this policy periodically. Significant changes will be communicated via email or a notice on the platform. Continued use after changes constitutes acceptance.