Privacy
Policy.

How we collect, store, use, and protect your personal data — including data processed through advertising platform integrations such as the Google Ads API.

1. Who we are

ŌTOCRACY (“ŌTOCRACY”, “we”, “us”, or “our”) operates this website and provides music marketing and advertising-campaign management services for recording artists and labels. This Privacy Policy explains what personal data we collect, why we collect it, how we store and manage it, and the rights you have over it.

The service is operated by Otocracy Group OÜ, a private limited company registered in Estonia (registry code 17554151), with its registered office at Sepapaja tn 6, Lasnamäe linnaosa, 15551 Tallinn, Harju maakond, Estonia. See our company details page for full registration information.

We are the data controller for the personal data described here. If you have any questions about this policy or how we handle your data, contact us at office@otocracy.com.

2. Data we collect

We collect the following categories of personal data:

• Account & contact data — name, email address, and any details you submit through our forms, audits, or checkout (for example when requesting a campaign or creating a client account).
• Campaign & artist data — links to your music, release information, artist or label profile details, and the goals you share with us so we can run your campaigns.
• WhatsApp messages — if you contact us via the WhatsApp link on our site, we receive your phone number, your WhatsApp profile name, and the messages you send. That conversation is carried and stored by WhatsApp Ireland Ltd. (Meta) under their own privacy terms, which we do not control. We keep these chats only to answer you and to follow up on what we discussed. If you would rather not use WhatsApp, email works just as well and shares no phone number.
• Advertising-platform data — where you authorize us to manage advertising on your behalf, we access connected accounts (such as Google Ads, Meta, TikTok, and YouTube) through their official APIs. This may include campaign configuration, performance metrics, and aggregated reporting. We only access what is required to operate the campaigns you have asked us to run.
• Payment data — transactions are handled by our payment processor. We receive confirmation and order details but do not store full card numbers on our servers.
• Usage & technical data — IP address, browser type, device information, and pages visited, collected through cookies and similar technologies to keep the site secure and improve it.

3. How we use your data

We use personal data to:

• Provide, operate, and manage the services you request;
• Set up, run, optimize, and report on advertising campaigns across connected platforms;
• Communicate with you about your account, campaigns, and support requests;
• Process payments and issue receipts;
• Maintain security, prevent fraud, and comply with our legal obligations;
• Improve the performance and content of our website.

Our legal bases for processing are the performance of our contract with you, your consent (which you may withdraw at any time), our legitimate interests in operating and securing the service, and compliance with applicable law.

4. Advertising platform integrations

When you connect an advertising account, we use the official APIs provided by those platforms — including the Google Ads API, Meta Marketing API, TikTok Marketing API, and YouTube/Google APIs — strictly to manage the campaigns you have authorized.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell platform data, use it for advertising unrelated to your campaigns, or allow humans to read it except where necessary to operate the service, for security purposes, or as required by law. You can revoke our access to any connected account at any time from within that platform’s own settings.

5. How we share data

We do not sell your personal data. We share it only with service providers who help us run the service, and only to the extent necessary:

• Advertising platforms (Google, Meta, TikTok, YouTube) to deliver your campaigns;
• Infrastructure & hosting providers that store data and run our application on our behalf;
• Payment processors to complete transactions;
• Authorities where disclosure is required by law.

These providers process data under contract and are not permitted to use it for their own purposes.

6. How we store and protect data

Personal data is stored on secured, access-controlled infrastructure. We apply encryption in transit, restrict access to authorized personnel, and retain data only for as long as needed to provide the service, meet legal and accounting obligations, and resolve disputes. When data is no longer needed, we delete or anonymize it. No method of transmission or storage is perfectly secure, but we take reasonable technical and organizational measures to protect your information.

7. Cookies

We use cookies and similar technologies to keep the site functioning, to remember your preferences, and to understand how the site is used. Essential cookies are required for the site to work. You can control or disable non-essential cookies through your browser settings; doing so may affect some features.

8. Your rights

Depending on your location, you have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at office@otocracy.com. We will respond within the timeframe required by applicable law.

9. International transfers

Some of our providers may process data in countries other than your own. Where personal data is transferred internationally, we rely on appropriate safeguards, such as standard contractual clauses, to ensure it remains protected.

10. Children

Our services are intended for users aged 18 and over and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you. Your continued use of the service after an update means you accept the revised policy.

12. Contact us

For any question about this policy, your data, or to exercise your rights, contact us at office@otocracy.com.