Privacy Policy

Last updated: February 2026

1. Data Controller

The data controller responsible for the processing of your personal data is:

YREHstudio
Lambersart, France
Email: season@yreh.com

2. Data We Collect

Data you provide

  • Biography text you submit to generate an artist profile
  • Email address if you choose to provide it via the email capture prompt
  • Account information if you create an account (name, email address)

Data collected automatically

  • IP address — stored as a one-way hash for abuse prevention
  • Profile view counts — anonymous counters, no visitor identification
  • Device and browser information — user agent, screen resolution
  • Cookies — see Section 9

3. Legal Basis for Processing

We process your personal data on the following legal bases under Art. 6(1) GDPR:

| Activity | Legal basis | GDPR reference | | --- | --- | --- | | Generating your artist profile from biography text | Performance of a contract | Art. 6(1)(b) | | Account creation and management | Performance of a contract | Art. 6(1)(b) | | Storing your email address (email capture) | Consent | Art. 6(1)(a) | | Analytics and cookies | Legitimate interest | Art. 6(1)(f) | | Security measures and IP hash storage | Legitimate interest | Art. 6(1)(f) |

Where processing is based on consent, you may withdraw your consent at any time by contacting us at season@yreh.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. How We Use Your Data

We use your data to:

  • Generate your artist profile and discography via AI processing
  • Display your public profile at its short URL
  • Provide, maintain, and improve our services
  • Send you communications you have opted into
  • Ensure security, prevent abuse, and enforce our terms
  • Produce anonymous, aggregated usage statistics

5. AI Processing

Your biography text is sent to an AI language model to generate your artist profile. The biography text is not stored by us after the profile has been generated. We do not use your submissions to train AI models.

The generated profile content (artist name, albums, tracks) is stored to display your profile page.

This AI processing produces creative, fictional output. It does not constitute automated decision-making that produces legal effects or similarly significant effects on you within the meaning of Art. 22 GDPR.

6. Data Processors and International Transfers

We do not sell your personal data. We share data with the following processors (Art. 28 GDPR), who process data on our behalf under data processing agreements:

| Processor | Location | Purpose | | --- | --- | --- | | Vercel Inc. | United States | Hosting, CDN, edge functions | | Anthropic PBC | United States | AI language model processing | | Supabase Inc. | United States | Database and authentication |

These processors are located in the United States. Transfers of personal data to the US are safeguarded by EU Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

We may also disclose data to legal authorities when required by law.

7. Data Retention

We retain personal data only as long as necessary for the purposes stated:

| Data | Retention period | | --- | --- | | Biography text | Not stored after profile generation | | Generated profile content | Until you request deletion | | Email address | Until you request deletion or withdraw consent | | IP address hash | Until you request deletion | | Cookie consent preference | 30 days | | Session cookies | Deleted when you close your browser |

You may request deletion of your data at any time by contacting season@yreh.com.

8. Your Rights

Under the GDPR (Art. 15–22), you have the right to:

  • Access your personal data (Art. 15)
  • Rectify inaccurate personal data (Art. 16)
  • Erase your personal data — "right to be forgotten" (Art. 17)
  • Restrict processing of your personal data (Art. 18)
  • Data portability — receive your data in a structured, machine-readable format (Art. 20)
  • Object to processing based on legitimate interest (Art. 21)
  • Withdraw consent at any time where processing is based on consent (Art. 7(3))

To exercise any of these rights, contact us at season@yreh.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been processed unlawfully.

9. Cookies

We use the following types of cookies:

Essential cookies — Required for the service to function (e.g., session management). These do not require consent.

Analytics cookies — Used to understand how visitors interact with our service. These are only placed with your consent, managed through our cookie consent banner.

You can manage or delete cookies through your browser settings at any time.

10. Children's Privacy

Our service is not directed to children under the age of 16 (Art. 8 GDPR). We do not knowingly collect personal data from children under 16.

If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised "Last updated" date.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data subject rights, contact us at:

Email: season@yreh.com

You also have the right to contact your local data protection authority (DPA) at any time.