Privacy Policy

SongCode Finder is owned and operated by:

GALAXYWAY AI LTD
Company number: 15966090
Registered in: England & Wales
Registered address: 18 Holly Hill Road, Belvedere, Kent DA8 1QD, United Kingdom
Email: info@galaxyway.ai
Phone: +44 7922 955 455

For the purposes of UK data protection law, GALAXYWAY AI LTD is the data controller for the personal information we collect and use through SongCode Finder.

In this Privacy Policy, "SongCode Finder", "we", "us" and "our" refer to GALAXYWAY AI LTD.

SongCode Finder provides a music metadata lookup assistance service.

The service helps artists, labels, managers, producers, rights holders and authorised representatives retrieve available catalogue metadata from music platform data, including Spotify track and album information.

This may include, where available:

• - ISRC
• - UPC
• - EAN
• - Spotify Track ID
• - Spotify Album ID
• - song title
• - release title
• - artist name
• - original release date
• - track length
• - copyright information
• - phonographic copyright information
• - label information

SongCode Finder does not distribute, register, claim, monetise or administer your music. It only helps retrieve available catalogue metadata where it can be found.

3.1 Information you provide when using the search or lookup service

When you use SongCode Finder, you may provide:

• - your name
• - artist name
• - email address
• - song title
• - release title
• - album title
• - Spotify track URL
• - Spotify album URL
• - distributor name, if you choose to provide it
• - notes about your release or catalogue issue
• - whether a song was previously released
• - whether a song was taken down
• - any message or explanation you submit

3.2 Payment and order information

When you purchase a paid metadata lookup, we may collect and store:

• - order number
• - email address
• - customer name, where provided
• - purchased service type
• - submitted Spotify URLs
• - payment status
• - payment amount
• - currency
• - Stripe checkout session ID
• - Stripe payment reference
• - date and time of purchase
• - report delivery status

We do not store your full card number or full payment card details. Payments are handled by a third-party payment provider, such as Stripe.

3.3 Metadata lookup results

When we process a lookup, we may store the results connected to your order, including:

• - Spotify Track ID
• - Spotify Album ID
• - ISRC
• - UPC
• - EAN
• - track title
• - release title
• - artist name
• - release date
• - track length
• - copyright information
• - phonographic copyright information
• - label information
• - lookup status
• - error messages, if a lookup fails

Some of this information may not be personal information by itself, but it may become connected to you if it is linked to your order, email address, artist name or account enquiry.

3.4 Contact form information

If you contact us through the website, by email or by phone, we may collect:

• - name
• - email address
• - phone number, if provided
• - message content
• - reason for contact
• - optional Spotify URL
• - any attachments or screenshots you provide
• - our response to you

3.5 Artist Experiences submissions

If you submit an artist experience, we may collect:

• - name or artist name
• - email address
• - distributor or platform involved, if provided
• - song or release title, if provided
• - your submitted story
• - metadata you were trying to recover
• - whether your issue was resolved
• - your display name, if you give permission for publication
• - your publication consent choice
• - moderation status
• - any correspondence about the submission

We do not publish your email address publicly.

Artist experience submissions are reviewed before publication. We do not publish submissions automatically.

3.6 Technical information

When you use our website, we may collect technical information such as:

• - IP address
• - browser type and version
• - device type
• - operating system
• - pages visited
• - date and time of visit
• - referring website
• - approximate location based on IP address
• - error logs
• - security logs
• - cookie identifiers, where cookies are used

3.7 Cookies and similar technologies

We may use cookies, local storage, pixels or similar technologies to:

• - keep the website working
• - remember basic preferences
• - support payment and checkout flows
• - protect the website from abuse
• - understand basic website usage
• - improve the service

Where required by law, we will ask for your consent before using non-essential cookies or similar technologies.

You can usually control cookies through your browser settings.

4.1 To provide the SongCode Finder service

We use your information to:

• - process free searches
• - process paid metadata lookups
• - retrieve metadata from platform data
• - generate reports
• - provide CSV, JSON or text exports
• - display results pages
• - deliver order confirmations
• - provide customer support
• - manage failed or partial lookups

4.2 To process payments

We use order and payment-related information to:

• - create checkout sessions
• - confirm payment
• - prevent unpaid access to paid reports
• - manage refunds, chargebacks or payment disputes
• - keep financial records

Payments are processed by Stripe or another payment provider. We do not store full card details.

4.3 To communicate with you

We use your contact details to:

• - respond to enquiries
• - send order updates
• - send report links
• - handle support requests
• - respond to complaints
• - contact you about issues with your order
• - ask for clarification where needed

4.4 To improve and protect the service

We may use technical and usage information to:

• - monitor website performance
• - fix errors
• - prevent fraud or misuse
• - detect suspicious activity
• - improve the user experience
• - maintain records of service activity
• - protect our legal rights

4.5 To manage Artist Experiences submissions

We use submitted artist experiences to:

• - review and moderate stories
• - contact you about your submission
• - publish approved stories where you have given permission
• - remove or edit content where needed
• - keep the page helpful, respectful and legally safe

We will not publish your story publicly unless you have given permission for publication.

4.6 To meet legal and business obligations

We may use personal information to:

• - keep accounting records
• - comply with tax and legal obligations
• - respond to lawful requests
• - enforce our Terms and Conditions
• - protect our business from fraud, misuse, disputes or legal claims
• - keep evidence of transactions and communications

5.1 Contract

We use personal information where necessary to provide the service you request, such as processing a paid lookup, generating a report, managing your order, and giving access to results.

5.2 Legitimate interests

We may use personal information for our legitimate business interests, including:

• - operating SongCode Finder
• - improving the service
• - preventing fraud and misuse
• - keeping business records
• - responding to enquiries
• - handling disputes
• - protecting our legal rights
• - maintaining website security

We only rely on legitimate interests where we believe our interests are not overridden by your rights and freedoms.

5.3 Consent

We rely on consent where you choose to:

• - submit an Artist Experience for possible publication
• - receive optional marketing communications, if offered
• - allow non-essential cookies, where required
• - provide optional information that is not required for the service

You can withdraw consent at any time where we rely on consent.

5.4 Legal obligation

We may use and keep information where necessary to comply with legal obligations, such as tax, accounting, consumer protection, fraud prevention, regulatory or legal requirements.

We do not sell your personal information.

We may share personal information with trusted service providers and third parties where necessary to operate SongCode Finder.

This may include:

• - payment processors, such as Stripe
• - website hosting providers
• - database and cloud infrastructure providers
• - email delivery providers
• - analytics providers, if used
• - security and fraud prevention providers
• - professional advisers, such as accountants, legal advisers or insurers
• - law enforcement, regulators or courts where legally required
• - business successors if our business is sold, transferred, merged or reorganised

We only share information where necessary and appropriate.

SongCode Finder uses Spotify links and platform catalogue information to retrieve available metadata.

When you submit a Spotify track or album URL, we may use that URL to request metadata from Spotify's systems through authorised technical methods.

We do not control Spotify's data, availability, accuracy, API rules, platform restrictions or search results.

Third-party platforms may process data according to their own terms and privacy policies.

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take reasonable steps to ensure appropriate safeguards are in place, where required by law.

This may include using providers that offer recognised data protection safeguards, contractual protections or other lawful transfer mechanisms.

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Typical retention periods are:

• - free search data: up to 12 months, unless needed longer for security, support or service improvement
• - paid order records: up to 7 years for accounting, tax and legal record keeping
• - metadata lookup reports: up to 7 years, so customers can access past reports and we can handle support or disputes
• - contact enquiries: up to 3 years after the last communication
• - Artist Experience submissions: until withdrawn, rejected, deleted, or no longer needed
• - technical logs: usually up to 12 months, unless needed longer for security or legal reasons
• - payment records: retained according to legal, accounting and payment provider requirements

We may keep information longer where necessary to:

• - comply with the law
• - resolve disputes
• - prevent fraud or misuse
• - enforce our Terms and Conditions
• - protect legal rights
• - maintain financial records

We take reasonable technical and organisational steps to protect personal information.

These may include:

• - using secure hosting providers
• - using HTTPS where available
• - limiting access to personal information
• - using password-protected systems
• - keeping secrets and API keys server-side
• - avoiding storage of full card details
• - using payment providers for payment processing
• - monitoring for misuse or suspicious activity
• - keeping backups where appropriate

No website or online service can be guaranteed to be completely secure. You use the service with this understanding.

Depending on your location and the circumstances, you may have the following rights under data protection law:

• - the right to be informed about how we use your personal information
• - the right to access your personal information
• - the right to correct inaccurate personal information
• - the right to ask us to delete personal information
• - the right to restrict how we use personal information
• - the right to object to certain uses of personal information
• - the right to data portability
• - the right to withdraw consent where we rely on consent
• - the right to complain to a data protection authority

These rights are not absolute and may depend on the lawful basis for processing and the circumstances.

To exercise your rights, contact us at info@galaxyway.ai.

We may need to verify your identity before responding to a request.

You have the right to object to our use of your personal information where we rely on legitimate interests.

You can object by contacting info@galaxyway.ai.

We will consider your objection and respond in line with applicable law.

We will only send marketing emails where we have a lawful basis to do so.

If we offer a mailing list, newsletter or promotional updates, you can unsubscribe at any time using the unsubscribe link or by contacting us.

We will not sell your contact details to advertisers.

SongCode Finder is not intended for children.

You must be at least 18 years old to purchase paid services from SongCode Finder.

If we become aware that we have collected personal information from a child without appropriate permission, we may delete it.

If you submit an Artist Experience and give permission for publication, we may publish:

• - your display name
• - your artist name, if provided for publication
• - distributor or platform involved, if approved
• - song or release title, if approved
• - your story or an edited version of it
• - metadata issue described
• - resolution status

We do not publish your email address.

We may edit submissions for clarity, length, privacy, legal safety, spelling, grammar or formatting. We may refuse or remove a submission at any time.

If you want a published experience removed, contact us at info@galaxyway.ai.

Some information connected to music releases may already be public or available from platform catalogue data, search engines or music services.

However, if we link that information to your order, contact details or enquiry, we will handle it in accordance with this Privacy Policy where applicable.

SongCode Finder may use automated technical processes to retrieve, organise and display metadata.

We do not use automated decision-making that produces legal or similarly significant effects about you.

Paid lookup results are based on available platform metadata and technical retrieval processes.

Cookies and similar technologies may be used on SongCode Finder.

Strictly necessary cookies

These help the website work properly, support security, keep forms working, remember basic session information, and support payment or results access.

Analytics cookies

If used, analytics cookies help us understand how visitors use the website so we can improve it.

Preference cookies

If used, preference cookies remember choices such as cookie settings.

Payment or security cookies

Payment providers or security tools may use cookies or similar technologies to process payments, prevent fraud and protect the website.

Where required, we will ask for consent before setting non-essential cookies.

You can control or delete cookies through your browser settings.

SongCode Finder may link to third-party websites, including Spotify, Google, payment providers or other services.

We are not responsible for the privacy practices, content, security or policies of third-party websites.

You should read the privacy policies of any third-party websites you visit.

If you have a concern about how we use your personal information, please contact us first at info@galaxyway.ai.

You also have the right to complain to the UK Information Commissioner's Office.
ICO website: https://ico.org.uk/

We may update this Privacy Policy from time to time.

The latest version will be posted on the SongCode Finder website with the updated date.

If we make significant changes, we may take additional steps to notify users where appropriate.

For privacy questions, data requests, complaints or concerns, contact:

GALAXYWAY AI LTD
Company number: 15966090
Registered in: England & Wales
Registered address: 18 Holly Hill Road, Belvedere, Kent DA8 1QD, United Kingdom
Email: info@galaxyway.ai
Phone: +44 7922 955 455