How we collect, store, use, and protect your personal data — including data processed through advertising platform integrations such as the Google Ads API.
ŌTOCRACY (“ŌTOCRACY”, “we”, “us”, or “our”) operates this website and provides music marketing and advertising-campaign management services for recording artists and labels. This Privacy Policy explains what personal data we collect, why we collect it, how we store and manage it, and the rights you have over it.
The service is operated by Otocracy Group OÜ, a private limited company registered in Estonia (registry code 17554151), with its registered office at Sepapaja tn 6, Lasnamäe linnaosa, 15551 Tallinn, Harju maakond, Estonia. See our company details page for full registration information.
We are the data controller for the personal data described here, with one important exception: fan data collected through an artist’s smartlink or download gate belongs to that artist. The artist is the data controller; we process it on their behalf — see section 5 and our data processing terms. If you have any questions about this policy or how we handle your data, contact us at office@otocracy.com.
We collect the following categories of personal data:
We use personal data to:
Our legal bases for processing are the performance of our contract with you, your consent (which you may withdraw at any time), our legitimate interests in operating and securing the service, and compliance with applicable law.
When you connect an advertising account, we use the official APIs provided by those platforms — including the Google Ads API, Meta Marketing API, TikTok Marketing API, and YouTube/Google APIs — strictly to manage the campaigns you have authorized.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell platform data, use it for advertising unrelated to your campaigns, or allow humans to read it except where necessary to operate the service, for security purposes, or as required by law. You can revoke our access to any connected account at any time from within that platform’s own settings.
Artists and labels use our smartlink and download-gate pages to collect fan email addresses. For that data, the artist (or label) is the data controller and we are the processor: the list belongs to them, we store and handle it only to provide the service they asked for, and we never use it for our own marketing, never sell it, and never share it with other artists. The full terms are in our data processing terms.
We do not sell your personal data. We share it only with service providers who help us run the service, and only to the extent necessary:
These providers process data under contract and are not permitted to use it for their own purposes.
Personal data is stored on secured, access-controlled infrastructure. We apply encryption in transit, restrict access to authorized personnel, and retain data only for as long as needed to provide the service, meet legal and accounting obligations, and resolve disputes. When data is no longer needed, we delete or anonymize it. No method of transmission or storage is perfectly secure, but we take reasonable technical and organizational measures to protect your information.
We use cookies and similar technologies to keep the site working, to understand how it is used, and to measure our own advertising. When you first visit, a banner asks for your choice. Nothing beyond essential cookies runs until you choose, and you can change or withdraw your choice at any time through Cookie Settings in the footer of every page. Your choice is kept for six months, then we ask again.
oto_consent cookie that remembers your cookie choice (six months)._ga and _ga_*, up to two years) and Microsoft Clarity (Microsoft Ireland Operations Ltd., cookies _clck and _clsk, up to one year), which show us which pages work and which don’t. With Google signals turned on, Google may add aggregated age, gender and interest estimates for visitors signed in to a Google account who allow ad personalization; we only ever see these as totals, never per person. If you decline, Google Analytics receives only cookieless signals without identifiers (Google Consent Mode), and Clarity does not run._fbp and _fbc, 90 days). They tell Meta which of our pages you viewed and whether you requested a Signal Audit, created an account, started a checkout, or paid, together with your IP address and browser details. When you give us your email address in one of our forms (for example to receive a Signal Audit) or complete a purchase, we also send that address, hashed so Meta can only match it to an account it already knows. We use this to measure our Instagram and Facebook ads and to show our ads to people who have visited our site. For the collection and transmission of this data we and Meta are joint controllers; Meta’s own processing is governed by its privacy policy. If you decline, none of this is sent.Depending on your location, you have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority.
To exercise any of these rights, email us at office@otocracy.com. We will respond within the timeframe required by applicable law.
Some of our providers may process data in countries other than your own. Where personal data is transferred internationally, we rely on appropriate safeguards, such as standard contractual clauses, to ensure it remains protected.
Our services are intended for users aged 18 and over and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you. Your continued use of the service after an update means you accept the revised policy.
For any question about this policy, your data, or to exercise your rights, contact us at office@otocracy.com.