SongShift, LLC Privacy Policy

Last revised September 25, 2026.

Introduction

SongShift, LLC ("Company" or "We") respects your privacy and is committed to protecting it through our compliance with this policy.

We recognize that the privacy of your information is important to you. We seek to collect and use information that is reasonably necessary to provide, maintain, secure, improve, promote, and measure the performance of the Services, and to configure our service providers and advertising partners to limit collection and disclosure to information reasonably required for the applicable purpose.

This Privacy Policy describes the types of information we may collect from you or that you may provide when you use our websites (the "Site"), mobile application(s) (the "App"), and other online products and services, including those integrated into products and services of digital song providers or other third parties (collectively, with the Site and App, the "Services"), and our practices for collecting, using, maintaining, protecting, and disclosing that information. It also describes our use of analytics, advertising, and attribution technologies, including software development kits ("SDKs"), application programming interfaces ("APIs"), mobile measurement services, pixels, cookies, and similar technologies that may collect information about your device, your use of the Services, and your interactions with advertisements for the Services.

Specifically, this Privacy Policy addresses:

• Age Restrictions

• Information We Collect About You and Your Use of the Services

• How We Collect Information

• Analytics, Measurement, Advertising, and Other Service Providers

• Collection within the United States and Abroad

• How We Use the Information We Collect

• How We Share the Information We Collect

• How We Retain and Protect Your Information

• Third-Party Sites and Apps

• Accessing and Correcting Your Information

• Your Data Rights

• Your Advertising and Tracking Choices

• Cookies, SDKs, Pixels, APIs, and Similar Technologies

• Changes to This Privacy Policy

• Contact Us

BY USING OR ACCESSING OUR SERVICES, YOU ACKNOWLEDGE THE PRACTICES DESCRIBED IN THIS PRIVACY POLICY.

Your use of the Services, and any dispute arising out of or related to privacy, will be subject to this Privacy Policy and any other terms and conditions applicable to the Services (the "Terms"). If you do not agree to this Privacy Policy or the Terms, please do not use the Services. Questions may be directed to support@songmix.com.

Age Restrictions

The Services are not intended for persons under the age of 13 (a "Child") or persons otherwise unable to enter into a contract (a "Minor") without the consent of a parent or legal guardian ("Parent"). By creating an account or using the Services, you represent that you are not a Child or Minor unless your Parent has provided any consent required by applicable law. We do not knowingly collect personal information from a Child or Minor without required parental consent. If we learn that we have done so, we will delete the information. If you believe we may have information from or about a Child or Minor without required parental consent, contact support@songmix.com.

We do not knowingly use personal information from children under 13 for advertising attribution, targeted advertising, or audience creation. We may impose additional restrictions on advertising-related processing for users under 18 where required by law or applicable platform requirements.

Information We Collect About You and Your Use of the Services

When you use the Services, we may collect and have access to information about specific actions, such as Playlist creation details (including artist names and when a Playlist or song entry was created or changed), Shift request and completion details, purchase and subscription information, and use of the Services. We may also collect the categories described below, depending on the device, operating system, permissions, applicable law, and how we configure the Services and our providers.

Account and authentication information. We may process account identifiers, user names, access tokens, and information used to authenticate or validate your identity through SongShift, Apple, Google, digital song providers, or other authentication providers. If a digital song provider does not support access tokens, credentials may be stored locally in the secure keychain functionality of your device.

Device and technical information. We and our service providers may automatically collect device type and model, operating system and version, App version, language and regional settings, IP address, network or carrier information, application identifiers, advertising identifiers where permitted, and identifiers generated by the Services or our service providers.

Advertising and attribution information. We may collect information about advertisements you view, click, or otherwise interact with; the campaign, platform, publisher, referral source, or deep link associated with an App installation or use; timestamps for ad interactions, installation, first launch, and other events; and attribution or campaign information supplied by an advertising platform or mobile measurement partner.

App activity and conversion events. We may collect events concerning installation, first launch, session activity, trial commencement, subscription initiation, purchase, renewal, cancellation, refund, and other actions configured for measurement. Depending on our configuration, purchase-event information may include the type of purchase, an event or transaction identifier, date and time, currency, and value. We do not intend to provide payment-card numbers or bank-account credentials to advertising platforms through these technologies.

Consent and privacy signals. We may collect your consent status, advertising preferences, opt-out selections, and signals made available through your device, operating system, browser, or applicable consent-management tools.

We use purchase receipts and related information to validate and administer subscriptions, payments, refunds, and purchases. As described below, limited purchase or conversion-event information may also be processed by our analytics, attribution, and advertising partners to measure and optimize advertising performance.

When you connect a digital song provider ("DSP"), credentials may be exchanged for access tokens used to access your DSP account. We read your connected media library to perform requested Services, such as transferring music. We may store applicable information on cloud-based servers and, for SongShift, use the QuickMatching service to retain match results for a limited period. When we download a Playlist, we may also download related information such as artist information and timestamps showing when a Playlist or song entry was created or added.

How We Collect Information

We collect information directly from you; automatically when you access or use the Services; from your device, operating system, application store, and connected DSPs; through SDKs, APIs, cookies, pixels, mobile advertising identifiers, and similar technologies; and from service providers, analytics providers, mobile measurement partners, and advertising platforms. Information collected automatically may constitute personal information under applicable law.

We use a mobile measurement and attribution provider to assists us in determining whether installation, purchase, subscription, or other in-app event may be associated with an advertisement or advertising campaign. Depending on device settings, permissions, applicable law, and our configuration, this process may use device or advertising identifiers, application identifiers, IP address, device and operating-system information, timestamps, advertising-interaction information, installation information, and in-app event information.

Attribution may be performed at the device or user level where permitted, or through aggregated, modeled, probabilistic, or other privacy-preserving methods where user-level attribution is unavailable or restricted. Attribution results may not always be exact.

Analytics, Measurement, Advertising, and Other Service Providers

RevenueCat. We use RevenueCat, Inc. ("RevenueCat") to assist with subscriptions, payments, refunds, and related activities. RevenueCat may have access to information relating to users of the Services and may provide some information to us. In some circumstances, such as a refund request, RevenueCat may share information with third parties such as Apple. Information we receive from RevenueCat is treated in accordance with this Privacy Policy. RevenueCat's privacy policy is available at https://www.revenuecat.com/privacy/.

AppsFlyer. We use AppsFlyer Inc. as a mobile measurement, analytics, and attribution service provider. AppsFlyer may process device, technical, network, advertising-interaction, installation, and in-app event information on our behalf to measure advertising campaigns, attribute installations and other events to advertising sources, generate reports, assist with campaign optimization, and help detect fraudulent or invalid activity. The information processed depends on how we configure the service, your device and operating-system settings, your permissions, and applicable law.

Advertising platforms. We may advertise the Services through platforms such as TikTok, Facebook and Instagram, Snapchat, and ChatGPT. We or AppsFlyer may provide those platforms with advertising-attribution and conversion information, such as whether an advertisement was associated with an App installation, subscription, purchase, or other configured event. The information disclosed may include campaign information, event type and time, device or advertising identifiers where permitted, application identifiers, technical information, event or transaction identifiers, and limited purchase information such as currency and value.

Advertising platforms may use information they receive to measure campaign performance, report conversions, optimize ad delivery, prevent fraud, and engage in other activities described in their own terms and privacy notices. If enabled by SongShift and permitted by applicable law, a platform may also use event information for audience creation, retargeting, or similar advertising functions. These platforms may act as independent businesses for some processing activities, and their handling of information is governed by their own privacy notices.

Collection within the United States and Abroad

The Company is based in the United States. We and our service providers and advertising partners may process, store, transfer, or access information in the United States and other jurisdictions in which they or their subprocessors operate, which may not provide the same level of data protection as your home jurisdiction. Where required, we use contractual, organizational, or other legally recognized safeguards for cross-border transfers.

For personal information protection purposes, the Company is the controller of personal information it determines how and why to process. Certain providers may process information on our behalf, while some advertising platforms may independently determine aspects of their processing. Users outside the United States may have rights under the laws of the jurisdiction in which they are located.

How We Use the Information We Collect

We use information to provide, maintain, secure, and improve the Services and, in some cases, to create new products or services. We may also use information to:

• administer your account and provide notices, updates, security alerts, support, and customer service;

• perform and enforce contracts, including billing, refunds, and collection;

• communicate about the Services and, subject to applicable choices, products, offers, and events;

• monitor and analyze trends, use, Playlist activity, and performance of the Services;

• advertise and promote the Services;

• determine whether an advertisement or campaign was associated with an installation, subscription, purchase, or other action;

• measure campaign reach, engagement, conversions, advertising return, and other performance indicators;

• compare and improve advertising campaigns and allocate advertising expenditures;

• send conversion or event information to the advertising platform associated with an advertisement;

• optimize advertisement delivery and, if enabled and legally permitted, create or use advertising audiences or conduct retargeting;

• detect, investigate, and prevent fraudulent or invalid transactions, advertising activity, duplicate events, and traffic;

• comply with device, operating-system, advertising-platform, and legal consent requirements;

• enforce our Terms and protect the rights, property, and safety of the Company and others;

• personalize and improve the Services; and

• create and retain de-identified, anonymized, aggregated, or modeled information.

How We Share the Information We Collect

We may disclose aggregated or de-identified information that does not reasonably identify an individual, subject to applicable law. We may disclose personal information as described in this Privacy Policy:

• with service providers and partners that need access to provide services to us, including hosting, payment processing, subscription management, refunds, authentication, fraud prevention, and customer service;

• with analytics and mobile measurement providers that process information to measure use of the Services and advertising performance;

• with advertising platforms on which we advertise the Services, including to report installations, subscriptions, purchases, and other conversion events and to measure or optimize campaigns;

• with technology providers that facilitate consent management, privacy-preserving attribution, fraud detection, data matching, or campaign reporting;

• between the Company and its current and future parents, subsidiaries, and other companies under common control;

• in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale or transfer of all or part of the business or assets;

• when disclosed to you at collection or with your consent; and

• as necessary to comply with law or legal process, enforce agreements, prevent fraud, or protect rights, property, or safety.

Information disclosed for advertising measurement may be associated with a device, application, advertising identifier, campaign, or event and therefore may constitute personal information under applicable law even if it does not identify you by name.

How We Retain and Protect Your Information

We retain account and other personal information for as long as reasonably necessary to carry out the purposes for which it was collected, provide the Services, comply with legal and contractual obligations, resolve disputes, enforce agreements, and maintain appropriate business records. We may retain anonymized or aggregated Playlist information after an account is inactive or deleted.

We retain advertising, attribution, and conversion information for the period reasonably necessary to measure campaign performance, reconcile attribution, detect fraud, comply with legal and contractual obligations, and maintain appropriate business records. Our service providers and advertising partners may retain information under their own agreements, documented instructions, and retention practices. Where feasible, we configure retention periods and access controls based on the nature and sensitivity of the information and the purposes for which it is processed.

We have implemented measures designed to protect personal information from accidental loss and unauthorized access, use, alteration, and disclosure. No transmission or storage system is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of credentials associated with your account.

Third-Party Sites and Apps

The Services may contain links to third-party websites or applications. Those third parties have their own privacy practices, and this Privacy Policy does not govern their independent processing. Review their privacy notices before providing personal information.

The Services use YouTube API services where applicable. When using YouTube API services through SongShift, refer to YouTube's Terms of Service and Google's Privacy Policy. You may revoke YouTube API access through the Google security settings for your account.

Accessing and Correcting Your Information

You may review and change certain information through the Services. You may also contact support@songmix.com to request access to, correction of, or deletion of personal information. We may need to verify your request and may decline or limit it where permitted by law. Deletion of some information may require deletion of the associated account. Certain users may have additional rights based on where they live, as described below.

Your Data Rights

Depending on where you live and subject to applicable limitations and exceptions, you may have rights to know or access personal information; receive a portable copy; correct inaccurate information; delete information; restrict or object to processing; withdraw consent; and appeal a decision regarding a request. You may also have the right to lodge a complaint with a competent supervisory authority.

Some privacy laws may define "sale," "sharing," or "targeted advertising" broadly enough to include certain disclosures of identifiers, device information, or activity information to advertising or analytics partners, even when no money is exchanged. Depending on the jurisdiction and our configuration, disclosures of advertising-attribution or conversion information may be treated as a sale, sharing, or use for targeted advertising. Where applicable, you may opt out as described under "Your Advertising and Tracking Choices."

To exercise an applicable right, contact support@songmix.com. We may verify your identity and authority to make the request. We will respond as required by applicable law. We may retain information where permitted or required for legal compliance, security, fraud prevention, dispute resolution, or other lawful purposes. Authorized agents may submit requests where permitted by law, subject to verification.

Your Advertising and Tracking Choices

Your device or operating system may provide controls for advertising identifiers, cross-app tracking, personalized advertising, and similar activities. Where required, the App will request permission before accessing certain information used to track activity across applications or services owned by different companies. If you decline permission, we may use aggregated, modeled, or privacy-preserving attribution methods where available.

You may be able to limit personalized advertising or clear or reset advertising identifiers through your device settings. Advertising platforms may provide additional controls through their respective accounts and privacy settings.

Where applicable law provides a right to opt out of the sale or sharing of personal information, targeted advertising, profiling, or certain automated processing, you may exercise that right by contacting support@songmix.com or by using any privacy-choice mechanism made available through the Services. We will process legally recognized opt-out preference signals where required by applicable law.

Exercising these choices will not prevent use of the core functions of the Services, but it may reduce our ability to attribute installations or other events to particular campaigns and may affect the relevance of advertisements.

Cookies, SDKs, Pixels, APIs, and Similar Technologies

We and our service providers may use cookies, SDKs, pixels, APIs, local storage, mobile advertising identifiers, and similar technologies to authenticate users, operate the Services, remember preferences, collect analytics, measure advertisements, attribute installations and purchases, detect fraud, and perform the other activities described in this Privacy Policy. Our integration with some DSPs requires first-party cookies for authentication. Deleting or blocking required technologies may interfere with portions of the Services.

Changes to This Privacy Policy

We may change this Privacy Policy from time to time. We will indicate changes by revising the date at the top and, where required, provide additional notice or obtain consent. Changes will apply when stated in the notice or updated policy. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, wish to exercise a privacy right, or would like to make a complaint, contact us at support@songmix.com.