← honest digital for artists

privacy policy

last updated: August 15, 2026

who we are

Honest Digital for Artists is an artist growth tool that helps independent musicians understand their numbers and decide what to do next. We are based in the United States. You can reach us at ali@thehonestdigital.com.

what we collect and why

account information

When you sign up we collect your name, email address, and a hashed password. We use this to create and protect your account. We never store your password in plain text.

onboarding answers

Your genre, experience level, and goals from the onboarding quiz. We use this to personalise your strategy recommendations. We do not sell this information.

connected platform analytics

When you choose to connect a platform, we request access to read your analytics data from that platform. We request only the minimum permissions necessary to provide the service. We store this data to show you trends over time and generate your weekly strategy. With the exception of adding calendar events you explicitly request, we are a read-only service. We never post, comment, follow, unfollow, send messages, or take any other action on any platform on your behalf.

OAuth access tokens

To read your analytics we store the access tokens granted by each platform. These tokens are encrypted at rest using AES-256-GCM encryption. We never share them with third parties. They are used solely to pull your own analytics data on a scheduled basis.

payment information

Payments are handled by Stripe. We never see or store your card number. We store your Stripe customer ID and subscription status to manage your plan.

usage data

We may log basic usage events (pages visited, features used) to understand how the product is working. We do not use third-party advertising trackers.

data we access from each connected platform

The following describes exactly what data we read from each platform when you choose to connect it. Connecting any platform is optional and you can disconnect at any time.

YouTube (Google)

Subscriber count, total video views, video count, recent video performance (views, likes, comments, shares, impressions, click-through rate, average view duration), and your channel name. We use Google OAuth and request the minimum read-only YouTube Analytics scope.

Google Analytics

Website sessions, active users, new users, page views, engagement rate, and average session duration for your connected GA4 property. We use read-only Google Analytics scopes.

Spotify

Follower count and popularity score. We access this via Spotify's public API using your artist name. No OAuth login or account connection is required for Spotify.

Instagram (Meta)

Follower count, post reach, impressions, saves, shares, and your account handle. We use the Instagram Graph API and request only the minimum read-only business analytics permissions. We do not access your direct messages, contact lists, or any personal content.

Facebook (Meta)

Page follower count, post reach, and engagement metrics (likes, comments, shares) for your connected Facebook Page. We use the Facebook Graph API and request only the minimum read-only Page insights permissions. We do not access your personal profile, timeline, messages, or friend lists.

TikTok

Follower count, video views, likes, comments, shares, and profile visit count. We use the TikTok Research API and request only the minimum read-only analytics permissions. We do not access your messages, contacts, or any private content.

Google Calendar

When you choose to connect Google Calendar, Honest Digital for Artists can view and edit events on your connected Google calendars, so you can add events directly from the app. We only create events you explicitly add through Honest Digital for Artists. We do not read, modify, or delete any of your existing events or calendars.

Mailchimp

Total subscriber count across your Mailchimp audiences. We use this to track your email list growth over time. We do not read individual subscriber names, email addresses, campaign history, or any other audience data.

Important note on scope: Mailchimp's OAuth model grants connected apps access to your full account automatically. This is a Mailchimp platform limitation and cannot be narrowed. We only read aggregate subscriber totals and nothing else, but we want you to be aware that the permission granted is broader than what we use.

how we use your data

  • To provide and improve the Honest Digital for Artists service
  • To calculate your personal baseline and generate your weekly strategy recommendations
  • To send you account-related emails (receipts, password resets)
  • To send you push notifications about your analytics if you opt in
  • To manage your subscription via Stripe
  • To contact you about material changes to the service or this policy

We do not sell your data. We do not use your data to train AI or machine learning models. We do not share your data with advertisers.

legal basis for processing (GDPR)

If you are in the European Union or United Kingdom, we process your personal data under the following legal bases:

performance of contract

Processing your account information, connected platform analytics, and payment data is necessary to provide the service you signed up for.

legitimate interests

We may process usage data to understand how the product is working and to improve it. This is in our legitimate interest as a business and does not override your rights.

consent

Connecting a third-party platform is entirely optional and constitutes your consent to us reading analytics data from that platform. You can withdraw consent by disconnecting the platform at any time.

third-party services we use

Running the service requires sharing certain data with the following providers. Each is bound by their own privacy policy and data processing agreements.

infrastructure

  • Vercel (hosting and deployment): your requests pass through Vercel's servers
  • Neon (database): your account and analytics data is stored in a Neon PostgreSQL database
  • Cloudflare (security and CDN): traffic passes through Cloudflare for DDoS protection and performance

communications

  • Resend: used to send transactional emails such as password resets

payments

  • Stripe: all payment processing. We never see your card number.

connected platforms (when you choose to connect)

data retention

We retain your analytics snapshots and metric data for as long as your account is active. This data is what powers your baseline comparisons over time.

If you disconnect a platform, we stop collecting new data from it immediately. Historical data already collected is retained until you request deletion or close your account.

If you delete your account, we delete your personal information, analytics snapshots, OAuth tokens, and all associated data within 30 days. Anonymised, aggregated data not linked to you may be retained longer to improve the service.

If we shut down the service entirely, we will notify you by email and give you at least 30 days to save any data you want before deletion.

facebook and instagram data deletion

If you connected your Facebook or Instagram account and want to request deletion of the data we collected from Meta platforms, visit our data deletion instructions page. You can also email ali@thehonestdigital.com with the subject line Data Deletion Request. We will respond within 48 hours and complete deletion within 30 days.

tiktok data deletion

If you connected your TikTok account and want to request deletion of the data we collected, visit our data deletion instructions page or email ali@thehonestdigital.com with the subject line Data Deletion Request.

your rights

You have the right to access, correct, or delete your personal data at any time. Email us at ali@thehonestdigital.com and we will respond within 30 days. To request deletion of data from a specific connected platform, see our data deletion instructions.

If you are in the EU or UK, you also have the right to data portability, the right to restrict or object to processing, and the right to lodge a complaint with your local supervisory authority. You can also withdraw consent for platform connections at any time by disconnecting the platform in the app.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale (we do not sell personal information). To exercise these rights, email us at ali@thehonestdigital.com.

children's privacy

Honest Digital for Artists is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

cookies

We use a single session cookie to keep you signed in. We do not use advertising cookies or cross-site tracking cookies. We do not respond to browser Do Not Track signals because we do not track users across third-party websites to begin with.

security

We take reasonable technical measures to protect your data, including AES-256-GCM encrypted token storage, HTTPS, and HttpOnly session cookies. No system is perfectly secure. If we become aware of a breach that affects your personal data, we will notify you by email within 72 hours of becoming aware of it.

changes to this policy

If we make material changes we will notify you by email and update the date at the top of this page. Continued use of the service after changes take effect means you accept the updated policy.

contact

Questions? Email us at ali@thehonestdigital.com