zmusicTìm nhạc & soundscape

Chính sách bảo mật & Cookie

Hiệu lực: 2026-07-02 · MvMusics, Inc.

MvMusics, Inc. (“we”) operates ZMusic and is the data controller for personal data processed through the Service. This policy also covers our use of cookies (§6) and your choices (§7).

1. What we collect

Account data (email, display name, auth identifiers incl. a Google ID if you use Google sign-in, password hash — never plaintext, subscription status); usage data (plays, qualified-stream events, saved mixes, preferences, streaks); technical data (device/browser, approximate location from IP for locale/territory, IP hashed where used for security/rate-limiting); payment data (handled by Stripe; we don’t store full card numbers); advertising data (identifiers and interaction signals used to deliver/measure ads on the free tier).

2. How we use it

To provide and secure the Service; authenticate you; deliver streaming and wellness features; process subscriptions and payments; attribute royalties by territory; measure and improve; deliver advertising on the free tier (including personalized ads subject to your choices); comply with law; and prevent fraud/abuse.

3. Legal bases (GDPR/UK GDPR)

Contract (providing the Service/subscriptions); legitimate interests (security, fraud prevention, basic analytics, non-personalized ads); legal obligations; and consent where required (personalized advertising and non-essential cookies), withdrawable anytime.

4. Sharing

With processors acting for us: Stripe (payments), Google (sign-in, if used), Cloudflare (delivery/security/DNS), hosting/storage providers, and advertising/measurement partners for the free tier. With rights-holders/distributors only aggregated/territory-level royalty data — not your identity. To comply with law or protect rights/safety. Sharing data with ad partners for personalized ads may count as “sale”/“sharing” under California law — see §7.

5. Advertising & targeting

The free tier is ad-supported; ads may be personalized using approximate location, device signals, listening context, and ad identifiers, and may involve profiling to select relevant ads. Personalized ads and non-essential advertising cookies are used only with your consent where required, and you can opt out anytime (§6–§7). Premium subscribers see no advertising. We do not use your wellness/listening history to infer sensitive health conditions for ad targeting.

6. Cookies

We use cookies and similar technologies (local storage, device identifiers) in these categories: Essential (always on): session/auth, CSRF, short-lived streaming authorisation, load-balancing, security. Preferences: language, theme, volume. Analytics (consent-based): privacy-respecting usage/performance measurement. Advertising (consent-based): on the free tier, to deliver/measure ads, cap repetition, and — with consent — personalize ads (set by us and ad/measurement partners; Premium gets none).

Essential cookies are automatic; analytics and advertising cookies are used only with your consent, given or declined in our banner and changeable anytime via . We honor Global Privacy Control (GPC) — GPC users are treated as declining non-essential cookies and opting out of “sale”/“sharing”. Third parties (Stripe, Google, Cloudflare, ad/measurement partners) may set cookies under their own policies and, for non-essential purposes, your consent.

7. Your rights & choices

Subject to your location, you may access, correct, delete, port, restrict, or object, and withdraw consent — under GDPR/UK GDPR, CCPA/CPRA (incl. Do Not Sell or Share and opt-out of targeted ads), Vietnam PDPD/PDPL, and Brazil LGPD. EU/EEA/UK users may complain to their supervisory authority.

  • Cookie & ad settings: open to accept or decline analytics and advertising cookies anytime.
  • Opt out of targeted advertising / “sale” or “sharing”: use cookie settings above, or enable GPC in your browser — we honor it globally where feasible.
  • Access, delete, correct, or export data: email [email protected] from your account email, or use in-app account controls; we may verify identity first, and will not discriminate for exercising rights.

8. Retention, transfers & security

We keep account data while your account is active and as needed to provide the Service, then delete or anonymize it unless longer retention is legally required. We may process data in the US and elsewhere, relying on Standard Contractual Clauses / the Data Privacy Framework where required. We use encryption in transit, hashed credentials, access controls, and rate-limiting; no method is 100% secure and you use the Service at your own risk.

9. Children

Not directed to children under the applicable minimum age (Terms §3); we don’t knowingly collect their data. Contact [email protected] with concerns.

10. Changes & contact

Updates posted here with a new effective date; material changes notified. Data controller: MvMusics, Inc.[email protected]. The English version of this policy is authoritative; translations are convenience-only.