01Who we are
The data controller is Orpheus Network Oy (in English Orpheus Network Ltd), business ID 3666956-6, Helsinki, Finland, running Orpheus Network ("Orpheus", "we").
For anything about your data, email [email protected].
02What we collect
Artists & labels (campaign form and email)
- Artist or label name, song title, link to the track, budget and release date
- Your email address or Discord username, and anything you write in the message box
- Your answer about owning the song's rights
Creators (our Discord server and bot)
- Discord: your user ID and username, your roles and chosen niches
- TikTok: the usernames of the accounts you link, and the verification code you put in your bio
- Videos: the links you submit and their public numbers (views, likes, comments, shares), read from TikTok over time
- Reviews: approvals, rejections, removals and their reasons, and any strikes
- Payments: the PayPal email you save and a record of every payout to you
- Support: what you write in support tickets and private brief rooms (we save a copy when they close, with email addresses hidden)
Everyone visiting the website
Our web host receives basic technical data, like your IP address and browser, to show you the page. We don't use analytics or advertising trackers.
03Why we use it
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Answering campaign requests and running campaigns | Contract, or steps before one |
| Linking your TikTok accounts, reviewing videos, tracking views and working out payouts | Contract |
| Paying creators and keeping payment records | Contract and legal obligation (accounting) |
| Stopping fraud: fake views, stolen videos, duplicate accounts, strikes | Legitimate interest in keeping campaigns fair for clients and creators |
| Campaign reports for clients | Legitimate interest and contract with the client |
| Answering support tickets | Contract and legitimate interest |
We don't sell your data and we don't use it for advertising.
05How long we keep it
- Campaign requests that never become a campaign (for example the artist decides not to go ahead, or we decline): deleted within 12 months.
- Payment records and the details needed for them: as long as Finnish accounting law requires (up to 10 years).
- Linked accounts, submissions and strikes: while you're a member, and after that only as long as needed for payouts, records and fraud prevention.
- Video view history: recorded for up to 30 days after a campaign ends, for reports.
- Database backups: automatically deleted after 14 days.
- Ticket and room copies: kept in our staff log for support and dispute history.
06Your rights
You have the right to:
- see the personal data we hold about you and get a copy of it;
- correct data that's wrong (you can change your PayPal email yourself in #add-payments);
- delete your data, unless we have to keep it, for example payment records;
- restrict or object to how we use it, including use based on legitimate interest;
- move data you gave us to another service (data portability).
Email us or open a ticket and we'll reply within one month. You can also complain to the Finnish data protection authority, the Office of the Data Protection Ombudsman.
08Security
Our bot runs on a private server with a firewall and key-only access. The database is backed up daily. PayPal emails are only shown privately to you and to staff who need them. No system is perfectly secure, but if a data breach puts your rights at risk, we'll tell you and the authorities as GDPR requires.
09Age
Orpheus is not for children under 13, the minimum age for Discord and TikTok. Getting paid needs a PayPal account in your own name, which PayPal only allows from age 18 in most countries.
10Changes & contact
If we change this policy in an important way, we'll announce it on our Discord or by email. The date at the top shows the latest version.
Questions or requests about your data: [email protected]. See also our Terms of Service.