MUSIC VOLUME (MV.ICU) — Privacy Policy

Effective Date: March 1, 2026

Last Updated: February 16, 2026

1. Data Controller

Music Volume Ltd ("we", "us", "our"), operated at mv.icu, is the data controller for personal data processed through this Platform. Contact: contact@mv.icu

2. Data We Collect

2.1. Data You Provide

Account data: name, email address, password (hashed)
Channel data: YouTube channel ID, channel name
Payment data: PayPal email, Skrill ID, USDT wallet address, IBAN, bank name
Tax data: tax identification number, W-8BEN/W-9 forms (if applicable)
Uploaded content: audio files, track metadata, cover art

2.2. Data Collected Automatically

Usage data: pages visited, features used, timestamp of actions
Device data: IP address, browser type, operating system, screen resolution
Download data: which tracks downloaded, when, from which IP
Cookies: session cookies (required), analytics cookies (optional)

2.3. Data from Third Parties

YouTube Data API: public channel information (title, country, subscriber count, video titles, view counts, descriptions). We access ONLY public data. We do not access your YouTube Analytics unless you explicitly grant OAuth access.
Content ID Partner: Content ID claim data (video IDs, view counts, revenue figures)

3. Legal Basis for Processing (GDPR Art. 6)

Purpose	Legal Basis
Account creation & authentication	Contract performance (Art. 6(1)(b))
Revenue calculation & payouts	Contract performance (Art. 6(1)(b))
Channel verification via YouTube API	Legitimate interest (Art. 6(1)(f))
Abuse prevention & fraud detection	Legitimate interest (Art. 6(1)(f))
Analytics & service improvement	Legitimate interest (Art. 6(1)(f))
Tax compliance & financial reporting	Legal obligation (Art. 6(1)(c))
Marketing emails (if opted in)	Consent (Art. 6(1)(a))

4. How We Use Your Data

Authenticate your identity and manage your account
Verify ownership of YouTube channels
Track Content ID claims and calculate payouts
Process payments to your chosen payment method
Send dashboard notifications about earnings, claims, and system events
Detect and prevent fraud, abuse, and unauthorized access
Comply with legal obligations (tax reporting, law enforcement requests)
Improve the Platform based on aggregated, anonymized usage data

5. Data Sharing

We share personal data ONLY with:

Recipient	Data Shared	Purpose
our Content ID distribution partner	Track metadata, channel IDs	Content ID registration & claims
YouTube (Google)	Channel IDs (public API calls)	Channel verification & video scanning
Payment processors (PayPal, Skrill)	Email, name, payout amount	Processing payments
Blockchain (USDT TRC-20)	Wallet address, transaction amount	Crypto payments
Tax authorities	Name, tax ID, earnings	Legal compliance
Law enforcement	As required by court order	Legal obligation

We do NOT sell, rent, or trade your personal data to third parties for marketing purposes.

6. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States (Google/YouTube). Such transfers are protected by Standard Contractual Clauses (SCCs) or the transferee's participation in an approved framework.

7. Data Retention

Data Type	Retention Period
Account data	Until account deletion + 30 days
Payment records	7 years (tax/legal compliance)
Download logs	12 months
Analytics data	24 months (aggregated)
Tax documents	7 years
Uploaded tracks	Until removal requested + 30 days
Cookies	Session: until browser close; Analytics: 12 months

8. Your Rights (GDPR Art. 15-22)

You have the right to:

Access your personal data (Art. 15)
Rectify inaccurate data (Art. 16)
Erase your data ("right to be forgotten") (Art. 17)
Restrict processing (Art. 18)
Data portability — receive your data in machine-readable format (Art. 20)
Object to processing based on legitimate interest (Art. 21)
Withdraw consent at any time (Art. 7(3))
Lodge a complaint with a supervisory authority (UODO in Poland)

To exercise any right, email: contact@mv.icu. We respond within 30 days.

9. Cookies

Cookie	Type	Purpose	Duration
mv_session	Essential	Authentication	Session
mv_locale	Essential	Language preference	1 year
mv_theme	Essential	Dark/light theme	1 year
mv_ref	Functional	Referral tracking	30 days
_ga, _gid	Analytics (optional)	Usage statistics	12 months

You can disable non-essential cookies via the cookie banner or browser settings.

10. Security

We implement appropriate technical and organizational measures:

Passwords hashed with bcrypt (Laravel default)
HTTPS/TLS encryption for all connections
API keys hashed in database (only shown once at creation)
Database backups encrypted at rest
Access controls based on principle of least privilege
Regular security reviews

Despite these measures, no system is completely secure. We cannot guarantee absolute security.

11. Children

The Platform is not intended for persons under 18. We do not knowingly collect data from minors. If we learn we have collected data from a person under 18, we will delete it promptly.

12. Changes

We may update this Privacy Policy. Material changes will be communicated via email and/or dashboard notification 30 days before taking effect.

13. Contact

Data Protection inquiries: contact@mv.icu

General: support@mv.icu

Address: ul. Marsz. Jozefa Pilsudskiego 74 lok. 320, 50-020 Wroclaw, Poland

EU Representative (Art. 27 GDPR): WEEXPERT SP. Z O.O., ul. Marsz. Jozefa Pilsudskiego 74 lok. 320, 50-020 Wroclaw, Poland, NIP 9671458021

Supervisory Authority: UODO (Urząd Ochrony Danych Osobowych), Warsaw, Poland