Data Processing

Last updated: October 2026

This page explains how we handle the contact details (emails and WhatsApp numbers) that artists collect through their Fan Links. It works together with our Privacy Policy, which covers the information we hold about artists and visitors.

Who does what

• The artist decides to collect fan contacts, why, and how they are used. They are responsible for having a lawful basis, for messaging fans only about their music, and for honouring opt-outs.
• SURE VIBE stores those contacts for the artist, shows them in the artist's dashboard, lets the artist export them, and passes them to tools the artist connects. We follow the artist's instructions and do not use fan contacts for our own marketing or sell them.

What we store for each contact

• The email address or WhatsApp number (in international format).
• Which Fan Link the fan joined, and when.
• When the fan agreed (the sign-up form has a consent box fans must tick).
• A private opt-out code, so the fan can leave the list.
• A scrambled (hashed) version of the visitor's IP address, used only to stop spam sign-ups.

Purposes

We use this data only to run the sign-up forms, show and export the artist's lists, send contacts to the tools the artist has connected, prevent abuse, and keep the service secure. We do not send messages to fans ourselves.

Consent and opting out

Fans must tick a consent box before they join. Every exported contact and every contact sent to a connected tool includes an opt-out link. When a fan opts out, we stop passing the contact on and delete it 30 days later. Artists must also honour opt-outs in the tools they use to message fans.

How long we keep data

• Contacts: kept while the artist's account exists. If a plan ends or a free trial finishes, the contacts stay in the dashboard and can still be viewed and exported. Only the collection of new contacts stops.
• Deleted accounts: contacts are deleted within 30 days of the account being deleted.
• Opted-out contacts: deleted 30 days after the opt-out.
• Hashed IP addresses: cleared after 30 days.
• Delivery records for connected tools: deleted after 90 days.
• Artists can delete any contact from their dashboard at any time.

Connected tools

Pro Plus artists can connect Mailchimp, MailerLite or a webhook. When they do, we send new contacts to those services on the artist's instruction. Those services have their own terms and privacy practices, and the artist chooses them. We store the keys the artist provides in encrypted form.

Service providers

We use a hosting provider to run the service and a payment provider to process plan payments. They process data only to provide those services to us.

Security

We use reasonable technical and organisational measures to protect data, including encrypting integration keys, storing IP addresses only in hashed form, and limiting access to artist data. No online service is completely risk free. If we learn of a breach that affects artist data, we will tell affected artists without undue delay and as the law requires.

Where data is processed

Our service is operated from Nigeria. Data may be stored and processed on servers in other countries, and we apply appropriate protection where that happens.

Fans' rights

Fans who want to see, correct or delete their details should contact the artist whose list they joined, or use the opt-out link. We help artists respond to these requests. You can also write to [email protected] and we will pass your request on.

Applicable law

We handle personal data in line with applicable data protection laws, including the Nigeria Data Protection Act 2023.

Contact

Questions about this page: [email protected].