Privacy Policy

Last updated: March 20, 2026

Bohdi Platform Privacy Policy

Effective Date: [Effective Date]

Last Updated: [Effective Date]

Company: Bohdi LLC

Version: 1.0

Introduction

This Privacy Policy describes how Bohdi LLC (“Bohdi,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you access or use the Bohdi Platform, including the website, mobile application, API, and any related services (collectively, the “Platform”). By accessing or using the Platform, you consent to the data practices described in this Privacy Policy.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices described here, you may choose not to use the Platform.

This Privacy Policy should be read in conjunction with our Terms of Service and, if applicable, the Artist Agreement.

Information We Collect

We collect information in the following categories:

Information You Provide Directly

Account Information: Email address (optional for Members; required for Artists), phone number (optional; may be required for identity verification), profile name and picture, gender (optional), date of birth (required), and country of residence.

Artist-Specific Information: If you apply to be an Artist: artist or band name, biography, social media links (e.g., Instagram, SoundCloud, Spotify), and professional information to verify your identity and eligibility.

Content You Upload: Music files (MP3, FLAC, WAV, stems), cover art and images, song metadata (title, genre, explicit content flag, AI certification status), and any comments or descriptions you provide.

Financial Information: Transaction records (amounts, types, timestamps), wallet balance and funding history, payout preferences and history (Artists only), and tax information (when applicable). Note: Credit/debit card details are collected and processed directly by our payment processor, Stripe, and are never stored on Bohdi's servers.

Communications: Messages you send to us (support requests, feedback), reports you file against content or users, and any other communications with our support team.

Information Collected Automatically

Usage Data: Streaming activity (songs played, duration listened, timestamps), search queries and search history (stored locally on your device; not on Bohdi servers), playlist creation and updates, and in-app interactions.

Location Data: Geographic location information that you voluntarily provide (such as city, country, or map coordinates for your profile). Bohdi does not request access to your device's GPS or location services.

Device and Technical Data: IP address, device type and model, operating system, browser type and version, unique device identifiers, app version, and system settings.

App Store Privacy Disclosures

If you access the Platform through a mobile application distributed via the Apple App Store or Google Play Store, we provide privacy disclosures as required by the applicable app store, including Apple's App Store Privacy “Nutrition Labels.” These disclosures summarize our data collection and use practices in the format required by each app store.

Information from Third Parties

Payment Processor (Stripe): Confirmation of successful payments, refunds, or chargebacks, and limited billing information necessary to reconcile transactions.

Authentication Providers: If you register or log in using a third-party authentication provider (which Bohdi may offer in the future), we may receive basic profile information such as your name and email address.

Other Users: Information you provide when reporting content or users, or when other users tag or mention you on the Platform.

If you fund your wallet or receive payouts, our payment processor may collect identity verification data as required by applicable Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations. This may include government-issued identification, proof of address, and date of birth. This data is processed and stored by our payment processor (Stripe) and is not stored on Bohdi's servers.

How We Use Your Information

We use your information for the following purposes:

Providing and Operating the Platform

Creating and managing your account

Processing streams, purchases, and wallet transactions

Delivering purchased content and maintaining your library

Displaying artist profiles, songs, and map placements

Enabling search and discovery features

Generating and displaying artist analytics (stream counts, geographic distribution, revenue)

Payments and Financial Operations

Processing wallet funding, stream charges, and purchase transactions

Calculating and distributing revenue to Artists

Processing Artist payouts

Generating tax documents (1099 forms for Artists earning above IRS thresholds)

Detecting and preventing payment fraud

Content Moderation and Safety

Reviewing Artist applications

Moderating content for compliance with our Terms of Service and Community Guidelines

Investigating reports of copyright infringement, AI-generated content, or other violations

Audio fingerprinting for duplicate and copyright detection

Enforcing the No AI-Generated Content Policy

Improving the Platform

Analyzing usage patterns to improve features and user experience

Diagnosing technical issues and bugs (via error monitoring and session replay at a 10% sampling rate)

Conducting internal research and analytics

Communications

Sending transactional notifications (payment confirmations, account activity, content moderation actions)

Sending service-related announcements (feature updates, policy changes, maintenance)

Sending promotional communications (with your consent; you may opt out at any time)

Responding to your support requests and inquiries

Legal Compliance

Complying with applicable laws, regulations, and legal processes

Responding to lawful requests from governmental authorities

Enforcing our Terms of Service and other agreements

Protecting the rights, property, and safety of Bohdi, our users, and the public

How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

Public Profile Information

Your profile name, profile picture, and playlists may be visible to other users of the Platform

Artist profiles (including artist name, bio, social links, geographic location, and uploaded songs) are publicly visible on the Platform

With Service Providers

We share information with third-party service providers who perform services on our behalf, as described in Section 5. These providers are contractually required to maintain the confidentiality and security of your personal information and are prohibited from using it for any purpose other than providing services to Bohdi.

For Legal Reasons

We may disclose your information if required to do so by law, or if we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation, court order, or government request; (b) enforce our Terms of Service and other agreements; (c) protect the security or integrity of the Platform; or (d) protect the rights, property, or safety of Bohdi, our users, or the public.

Business Transfers

If Bohdi is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice of any such change and any choices you may have regarding your personal information.

With Your Consent

We may share your information for other purposes with your explicit consent.

Aggregated or De-Identified Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you, for purposes such as industry analysis, research, or marketing.

Music Rights Organizations

We may share limited information with music rights organizations, performing rights organizations (PROs), or mechanical licensing entities as necessary to comply with music licensing obligations, report usage data, or respond to legitimate inquiries regarding content on the Platform.

Third-Party Service Providers

We use the following third-party services that may process your personal information:

Stripe (Payment Processing): Processes wallet funding, stream charges, purchases, and payouts. Stores payment information securely per PCI-DSS standards.

Sentry (Error Monitoring): Tracks errors, performance issues, and debugging information. PII transmission is disabled.

Hosting and Cloud Infrastructure: Standard cloud hosting providers that store data and serve the Platform.

5A. Third-Party Data Protection Standards

All third-party service providers that process personal information on our behalf are required to maintain appropriate security measures and are contractually prohibited from using your personal information for any purpose other than providing services to Bohdi. We conduct periodic reviews of our service providers' data protection practices.

Data Retention

General Retention

When your account is deleted, we immediately anonymize your personally identifiable information (making it inaccessible and dissociated from your identity) or delete it within ninety (90) days, except where we are required by law to retain it.

Aggregated and de-identified data may be retained indefinitely for analytics and research purposes.

Specific Retention Periods

We maintain the following specific retention schedules:

Data Security

Security Measures

We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit (TLS/SSL)

Secure hashing of passwords (never stored in plaintext)

Role-based access controls for internal systems

Security monitoring through error tracking and application performance monitoring

Personally identifiable information is excluded from error monitoring and crash reporting (PII transmission disabled in Sentry)

Encryption at Rest

In addition to encryption in transit, personal information stored on our servers is encrypted at rest using industry-standard encryption algorithms.

No Guarantee of Security

Despite our efforts, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your personal information. You use the Platform at your own risk.

Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

Access and Portability

You may request a copy of the personal information we hold about you. Artists may export their earnings data in CSV, PDF, JSON, or Excel format through their dashboard.

Correction

You may update or correct inaccurate personal information through your account settings, or by contacting us.

Deletion

You may request deletion of your account and personal data by using the account deletion feature in settings or by contacting us. Deletion is subject to certain exceptions (e.g., when we must retain data for legal, compliance, or safety reasons).

Search History

You may clear your search history at any time through the Platform's settings.

Marketing Opt-Out

You may opt out of promotional communications by using the unsubscribe link in any marketing email, or by updating your notification preferences in account settings.

Push Notifications

You may disable push notifications through your device's operating system settings.

Location Data

Bohdi does not request access to your device's GPS or location services. Geographic location information on the Platform is limited to what you voluntarily provide in your profile. You may update or remove this information at any time.

To exercise any of these rights, please contact us at privacy@bohdi.world. We will respond to your request within thirty (30) days (or the timeframe required by applicable law).

California Privacy Rights (CCPA/CPRA)

If Bohdi meets the applicable thresholds under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA) -- including annual gross revenue exceeding $25 million, buying/selling/sharing the personal information of 100,000 or more consumers or households, or deriving 50% or more of annual revenue from selling or sharing personal information -- the following rights apply to California residents.

Scope

These rights apply to “personal information,” which under the CCPA/CPRA generally means information that identifies, relates to, describes, or could be linked with a particular California resident or household.

Right to Know

You have the right to request that we disclose: (a) the categories of personal information we collected about you; (b) the categories of sources of that information; (c) the purpose for which we collect or use the information; and (d) the categories of third parties with whom we share that information.

Right to Delete

You have the right to request that we delete personal information we collected from you, subject to certain exceptions (such as legal compliance obligations, ongoing transactions, or security purposes).

Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you.

Right to Opt-Out of Sale or Sharing

Bohdi does not sell your personal information. We do not share your personal information for cross-context behavioral advertising. Therefore, there is no sale or sharing to opt out of.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not receive different pricing or quality of service as a result of exercising these rights.

Authorized Agents

You may designate an authorized agent to submit requests on your behalf, provided the agent has your written permission and can verify their identity.

How to Submit a Request

To exercise your California privacy rights, contact us at privacy@bohdi.world.

We will verify your identity before fulfilling any request. For account holders, we will verify your identity by confirming your registered email address and requesting additional information as needed. We will respond to your request within forty-five (45) days of receipt.

Global Privacy Control (GPC)

Bohdi honors Global Privacy Control (GPC) signals as a valid opt-out request under the CCPA/CPRA. If we detect a GPC signal from your browser, we will treat it as a request to opt out of the sale or sharing of your personal information, to the extent applicable.

International Users

The Platform is currently available to users in the United States only. Bohdi does not currently target or offer services to users in the European Economic Area, United Kingdom, or other jurisdictions outside the United States. If Bohdi expands internationally, this Privacy Policy will be updated to address applicable international data protection requirements, including the General Data Protection Regulation (GDPR) where applicable.

If you access the Platform from outside the United States, please be aware that your information will be transferred to the United States, which may not have data protection laws equivalent to your country of origin.

By using the Platform, you consent to the transfer of your information to the United States and the processing of your information as described in this Privacy Policy.

Children's Privacy

The Platform is not intended for individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as promptly as possible.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@bohdi.world.

Cookies and Tracking Technologies

Use of Cookies

We and our third-party service providers use cookies, web beacons, pixels, and similar tracking technologies to collect information about your interactions with the Platform, to improve your experience, and to enable certain functionality.

Types of Technologies

We use the following types of technologies:

Strictly Necessary Cookies: Required for the Platform to function (authentication, security, session management)

Functional Cookies: Remember your preferences and settings

Analytics Cookies: Help us understand how users interact with the Platform

Error Monitoring: Track errors and performance issues (Sentry)

Payment Processing: Necessary for secure payment transactions (Stripe)

Do Not Track Signals

Bohdi does not currently use third-party behavioral tracking technologies that would be affected by Do Not Track signals. However, some browsers allow you to control cookies through browser settings.

Cookie Policy Cross-Reference

For detailed information about the cookies and tracking technologies we use, including how to manage your cookie preferences, please see our Cookie Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the “Last Updated” date at the top of this document and, if required, by sending you an email notification.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms.

The “Last Updated” date at the top of this document indicates when this Privacy Policy was last revised.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Bohdi LLC Data Privacy Contact 668 N. Coast Highway, 508 Laguna Beach, CA 92651 privacy@bohdi.world

Data Protection Officer

At this time, Bohdi has not designated a Data Protection Officer, as the Platform is available only in the United States. If Bohdi expands to jurisdictions requiring a DPO, one will be designated and contact information will be provided here.

Governing Law

This Privacy Policy and any disputes arising from or related to it shall be governed by and construed in accordance with the laws of the State of California, without regard to its conflict of law principles. Any disputes shall be resolved in the state or federal courts located in California.