Effective 2026-04-29

Privacy Policy

This policy describes how MoryAudio collects and uses personal data. We comply with the GDPR (EU), KISA Personal Information Protection Act (Korea), and CCPA (California) where applicable.

What we collect

Account data: email + provider ID from Google, Apple, or Kakao at sign-in.
Wallet: the public address you link via SIWE. We never see your private key.
Playback: track ID, timestamp, device type, hashed IP (SHA-256 + salt). Raw IP is never stored.
Library & playlists: what you save and share.
KYC (if applicable): identity documents reviewed by a third-party processor; we keep only a verified flag and the timestamp.

What we do not collect

Browser fingerprints beyond what is needed for authentication.
Microphone or camera access.
Contacts or address book.

How we use your data

To run the Service (sign-in, playback, library, billing).
To detect fraud, bots, and content violations (IP-hash + device-type aggregates).
To compute royalties and stream counts shared with artists and DSPs.
To send transactional notifications (release alerts, payouts) — only those you have not unsubscribed from.

Sharing

We share aggregated, anonymized streaming data with rights holders and with our DSP distribution partner (FUGA). We do not sell personal data.

Retention

Account data is kept for as long as your account is active, plus 30 days after closure. Playback session rows are aggregated to monthly buckets after 12 months and the originals are deleted.

Your rights

You may request a data export, correction, or deletion at privacy@moryaudio.com. On-chain records (royalty events, NFT mints) cannot be erased but are always pseudonymous.

Security

Passwords (when used) are hashed with bcrypt. Database connections use TLS. Backups are encrypted at rest. We will notify affected users within 72 hours of a confirmed breach.

Contact

Data Protection Officer: privacy@moryaudio.com
EU representative: privacy-eu@moryaudio.com
KR (Chief Privacy Officer): privacy-kr@moryaudio.com