Privacy Policy

1. Who we are and what this covers

Lost Hills LLC is a Wyoming limited liability company with the business mailing address 1480 Colorado Blvd, Ste 200A #209, Los Angeles, CA 90041, United States. We determine how personal information is used for our account, billing, research, security and service operations, acting as a controller or equivalent business under applicable privacy law.

This policy covers losthills.io, playlist.losthills.io, our Lost Hills mobile applications, and related campaign, PR, sync, distribution and support interactions. The information involved depends on the features you use; an account is not required just to read our public pages. A separate notice or data-processing agreement may apply to a particular contracted service. Our Terms of Service explain the service relationship; accepting them is not consent to every use described here.

2. Information we collect and where it comes from

• Account and sign-in information. Email, name, account identifiers, profile details, verification status, sign-in provider, authentication records, sessions and preferences. If you use a password, authentication uses a protected password representation rather than displaying your password to us. Google or Apple sign-in supplies identifiers and the profile fields authorized in that flow, such as name and email; Apple may supply a relay email.
• Your music and work. Song titles, artist names, genres, listening/download links, musical estimates, saved songs, playlist selections, pitch status, notes, campaign briefs, messages, artwork and files you submit through supported music-service workflows. Sync and distribution submissions may include writer/master-owner names, ownership splits, performing-rights organizations, ISRCs, release details and licensing restrictions.
• Purchases and commercial records. Plan, price, currency, tax and billing details, purchase references, transaction and subscription status, receipts, refunds and entitlement records. Stripe and Apple collect payment credentials in their purchase flows. We receive information needed to reconcile and support purchases rather than your full card number through those flows. Separately contracted distribution or curator arrangements may require payment-recipient, tax and rights-accounting details.
• Communications. Contact details, form submissions, support correspondence, complaints, privacy requests, cancellation/deletion requests and any information you include. Contact forms may record your IP address for spam prevention. Please do not send passwords, complete card details or unnecessary sensitive information.
• Device, network and activity information. IP address, browser/device characteristics, operating system, approximate region inferred from network information, language/time zone, pages or screens viewed, interactions, timestamps, referral/campaign information, identifiers, errors and performance measurements. These can come from our infrastructure and the tools described below. We do not need precise GPS location to provide playlist research.
• Curator and public music information. Playlist and artist identifiers, names, public profiles, playlist characteristics, published submission routes and public business/social contact details. These come from sources such as Spotify, public websites and profiles, relevant data providers, curator submissions and corrections. Publicly available information can still be personal information.

We collect information directly from you, automatically through use of our services, and from sign-in, payment and other providers, public sources, your authorized representatives and service recipients. You choose what to submit, but we cannot create an account, process an order or perform a requested feature without the information it needs. Optional marketing or analytics is separate from the information needed to fulfill your order.

3. How we use information and our legal bases

Where European or UK data-protection law applies, we identify a legal basis for each purpose. Consent is one basis, rather than the basis for every activity:

• Provide the service you request: create and authenticate accounts, save your work, run matching/search, manage entitlements, process purchases and carry out accepted music-service orders. The basis is performance of a contract or steps you request before contracting, where legally appropriate.
• Support and service communications: answer questions, resolve purchase/access problems and send sign-in codes, receipts and important account notices. The basis is contract, legal obligation or our legitimate interest in responding and maintaining a working service, depending on the communication.
• Protect people and the service: detect fraud and abuse, enforce access limits, investigate security issues, troubleshoot errors and maintain availability. We rely on legitimate interests in safe and reliable services, and legal obligations where applicable, with safeguards appropriate to the information and risk.
• Understand and improve usability: measure loading failures, see where people cannot finish a match or purchase, and prioritize fixes. We rely on consent where required for optional storage/tracking, or a legitimate interest only where the relevant law permits that processing. A legitimate interest does not replace legally required cookie consent.
• Our marketing and campaign measurement: send eligible product/opportunity communications, assess which campaigns bring visitors and measure authorized conversion activity. Consent applies where required; otherwise a permitted legitimate interest in marketing our own services may apply. You can object to direct marketing or withdraw consent.
• Curator research: organize public playlist and contact information so artists can identify suitable submission routes, maintain data quality and handle corrections or objections. Where applicable, we rely on a legitimate interest in relevant music-industry research, balanced against the rights and reasonable expectations of the individuals concerned.
• Legal and commercial administration: keep required accounting/tax records, respond to lawful requests, manage rights and payments under separate agreements, and establish or defend claims. We rely on legal obligations or legitimate interests in administering and protecting our business, as appropriate.

Matching and recommendations use song characteristics and your selections to rank opportunities. They are estimates, not decisions granting employment, credit or other legal rights. We do not use playlist scores to make decisions about you with legal or similarly significant effects. Contact us if you need an explanation or wish to challenge a result involving your personal information.

4. Playlist Finder and music analysis

Local audio analysis. When you select a file in Playlist Finder’s local analysis feature, the selected audio is analyzed on your device. That feature does not upload the file to our server. Numerical estimates such as tempo, energy and duration, plus song details and selections you submit, are sent to provide matches and may be saved to your account. This statement is specific to local playlist analysis: if you upload or provide a download link for a campaign, sync or other music-service submission, that material can be received by us and the recipients needed for that service.

Saved work and free matching. We store saved songs, pitch lists/statuses, notes and matching activity to provide those features. Free matching also records a result snapshot and account-level allowance information so you can revisit results and we can enforce the free offer. Deleting a saved song does not reset the allowance. Browser drafts can hold your song preparation locally; signed-in draft persistence depends on the feature’s availability. See section 9 for expiry and deletion.

Curator information. Authorized users may view relevant public contact routes as part of the paid research service or an eligible preview. A catalog listing does not mean the curator has an account or endorses us. Account holders must respect submission instructions and privacy laws, and may not scrape, resell contacts or send unsolicited bulk messages. If your details are inaccurate or you object to their inclusion, email us with the listing or playlist identifier and your request. We assess correction, removal and objection requests under applicable law; you do not need to buy a subscription to contact us.

AI-assisted tools. Our staff may use OpenAI to help prepare sync briefings, sending the prompt and draft briefing fields they provide, which can include project or source-contact information. This is distinct from the local audio-analysis feature. If you choose an external AI assistant or integration to access Lost Hills, that service also receives the information you authorize it to retrieve and handles your conversation under its own policy. Do not include third-party confidential or sensitive information without authority.

5. Cookies, analytics and advertising

Cookies, browser storage and similar technologies can remember sign-in state, security checks, preferences, drafts, identifiers and campaign context. Authentication/security storage is needed for protected features. Blocking it can prevent sign-in or checkout. Other storage supports product analytics and advertising measurement.

Product analytics and recordings

We use PostHog for product events, performance and error reporting. Web analytics can associate browser identifiers and activity with a signed-in account, including the account ID, email and, on the website, name. They are not always anonymous. Depending on the page and configuration, the website can capture interaction/session replay information; Playlist Finder has session replay disabled. Billing pages have additional capture restrictions. Do not put sensitive information into URLs or other fields not intended for it.

The Playlist Finder footer has an Analytics control. Its choice is saved in browser storage and a shared Lost Hills cookie, currently for up to one year, and governs supported web PostHog collection. Global Privacy Control (GPC) and Do Not Track suppress that collection in the supported web flows. Without an opt-out or such a signal, web product analytics can be enabled where configured. These choices are browser/device-specific; clearing storage or switching browsers can remove them. Turning analytics off does not stop authentication, purchase reconciliation or necessary server/security processing.

Google and Meta advertising tools

The marketing website uses Google Analytics and Meta Pixel. These providers can receive page/referral URLs, device/browser and online identifiers, IP/network information and interactions to measure visits and campaigns. They may connect activity with other information they hold under their own policies. Advertising-related disclosures can be a “sale,” “sharing” or “targeted advertising” under some privacy laws even if we receive no payment for the data.

The Playlist Finder footer separately offers Meta ad measurement, off by default, for supported completed-match events and ad-click identifiers. That control and the Playlist Finder analytics preference do not currently control the marketing website’s separate Google and Meta tags. Do not assume that turning off one tool disables every provider across both websites. You can also use browser tracking protections and the providers’ controls: Google My Ad Center and Meta Ad Preferences. Contact us to exercise applicable opt-out rights.

Campaign and conversion measurement may link an eligible match or paid subscription outcome, amount/currency and campaign context to an account or analytics identifier. Server-side purchase validation still occurs when optional analytics is off because it is needed to supply paid access. Reading this policy or accepting the Terms does not itself authorize optional tracking where consent is required.

6. Mobile app and purchases

The mobile app uses the same account and service backend for sign-in, profile information, saved work and entitlements. Tokens and local preferences allow the app to maintain your session and settings. Your device and network also provide technical information needed to deliver requests.

In the mobile app, optional PostHog analytics starts off and can be changed in the app’s analytics setting. If enabled, it can collect account-linked app/screen activity, interactions, app/build version, locale/time zone and diagnostic/error information. App analytics and browser choices are separate. This policy does not substitute for an operating-system permission request where one is required.

Apple handles App Store payment and purchase information under its policy. RevenueCat helps validate purchases and maintain subscriptions/entitlements. In addition to purchase status and transaction references, RevenueCat can receive a Lost Hills account identifier, email/display name, sign-in-method and preference information, onboarding state and app/device context used for customer support and subscription administration. Subscription processing is separate from your optional product-analytics switch.

In-app account deletion requests deactivate access, revoke sessions and queue removal work. They do not immediately erase all retained records or cancel an Apple subscription. Manage Apple billing through your Apple account; see our Apple purchase terms and section 9 below.

7. Who receives information

We disclose information needed for the purposes above to these recipients, depending on the services and features used:

• Infrastructure and security providers: application hosting, database/file storage, delivery, backups, monitoring and anti-abuse services. Cloudflare Turnstile processes browser/challenge information when used to protect a form. Providers may process network information when delivering pages, embedded resources or files.
• Authentication and email providers: Apple or Google when you choose their sign-in, and Resend for transactional email and eligible marketing contacts/preferences. Marketing suppression records help us honor unsubscribe requests.
• Payments and subscriptions: Stripe for web billing, Apple for App Store purchases and RevenueCat for entitlement/customer records and purchase support. Their roles may include independent responsibilities under their own privacy policies.
• Analytics and advertising: PostHog, Google and Meta for the collection described in sections 5–6. Their contracts, settings and the context determine whether they act as processors/service providers or independent controllers.
• Music-service recipients: the curators, prospective licensees, campaign partners, distribution/licensing services or collaborators necessary for a submission or service you request. Information you choose to send or share can be retained by the recipient under its own obligations.
• AI and integrations: OpenAI for the staff briefing-assistance workflow described above, and external services you authorize to receive or access information.
• Professional and legal recipients: advisers, auditors, authorities and other parties where reasonably necessary to comply with law, protect rights, investigate abuse or establish/defend claims. In a business sale or reorganization, relevant records may be disclosed under appropriate confidentiality and legal safeguards, with required notices.

We do not sell customer account information for money or license it to third parties for their unrelated commercial use. That statement does not mean that advertising transfers can never be legally classified as sale/sharing, or that public curator contact information is never made available through our paid research service. We limit service-provider access to the tasks involved, subject to the applicable arrangements and law.

8. International processing

Lost Hills is based in the United States. Our staff and providers may process information in the United States and other countries where they operate, whose privacy laws may differ from those in your country. The processing location can vary by provider, selected region and feature; we do not represent that all information stays in your country.

For transfers subject to European, UK or other transfer restrictions, we must use a legally valid mechanism, such as an applicable adequacy decision or appropriate contractual safeguards, with additional measures where required. This policy is not itself such a mechanism and does not ask you to waive transfer protections. Contact us for information about the recipients, locations and applicable safeguards for your information and how to obtain a copy, subject to lawful redactions.

9. How long we keep information and how deletion works

Retention depends on the purpose, the feature and legal obligations. We consider whether you still need the account or saved work, when a support issue or contract is complete, statutory accounting and limitation periods, disputes/security needs, and provider/backup removal cycles. We do not promise one universal deletion deadline:

• Account, saved work and match records: generally retained while needed for your account and the features you use. Completed free-match/allowance records may remain while the account exists even if a saved song is removed. You may remove supported saved items and request account deletion.
• Preparation drafts: a browser free-match draft is treated as expired after 24 hours when read by the feature; it can remain in browser storage until removed or cleared. Where signed-in preparation drafts are available, they have a seven-day expiry. Expiry means the draft is no longer valid, not a guarantee that every server/backup copy has been physically erased at that instant.
• Sessions, codes and short-lived security records: remain for their configured validity and the period needed to prevent abuse and investigate access issues. Expiring a credential prevents its use; security records can have a different retention period.
• Purchases, rights and service records: invoices, tax, transactions, royalty/rights records and dispute evidence can remain after account closure for the applicable accounting, contractual, regulatory and claims periods.
• Support, marketing and privacy requests: retained to resolve the matter, document required compliance and respect preferences. A limited suppression record may remain so we do not restart unwanted marketing.
• Analytics, recordings, logs and backups: retention depends on operational need, configured provider retention and backup rotation. When information is no longer needed for these purposes, it is deleted or de-identified through the relevant removal process. Contact us for the period or criteria applicable to a particular record; provider and backup retention can differ from the lifetime of your account.

An account-deletion request starts a process. The app’s request deactivates the account and revokes sessions, then queues data-removal and billing-cleanup work. We may verify ownership and retain information needed for law, fraud prevention, disputes, required accounting or other lawful exceptions. Residual backups are handled through their retention cycle. Independent recipients, such as Apple, banks or a licensee, may have separate retention obligations. Deletion does not itself cancel provider-billed subscriptions; we can help identify the billing channel.

10. Your choices and how to make a request

Email [email protected] with the subject “Privacy request,” the right you want to exercise and enough information to locate the account or curator listing. You may also use available account, app and saved-item controls. You do not need to create an account or purchase access to make a request.

• Request access to or a copy of your information, correction of inaccurate details, deletion, or a portable copy where applicable.
• Object to certain processing or ask us to restrict it, including an objection to legitimate-interest processing. You may object to direct marketing at any time.
• Withdraw consent for future consent-based processing without affecting earlier lawful processing. Use the relevant control or contact us; withdrawing consent does not cancel a paid order.
• Use unsubscribe links and available notification preferences for marketing. Necessary sign-in, purchase, security and legal notices can continue.
• Request an opt-out of legally covered sale/sharing or targeted advertising and raise concerns about how a browser signal was handled. See sections 5 and 11 for the controls and their limits.

We may need proportionate identity or authority checks for access, correction or deletion, and may ask an authorized agent to show permission. Do not send identity documents unless we explain why a secure verification method is needed. Applicable opt-out requests should not require you to disclose more information than needed. We will explain a refusal or lawful limitation and available appeal routes. We do not discriminate against you for exercising rights, although removing information essential to a feature can prevent us from providing it.

We respond within the period applicable to your request: generally one month under EU/UK data-protection law, and generally 45 days for covered access/correction/deletion requests under many U.S. state laws. Different or shorter opt-out deadlines can apply. If a lawful extension is necessary, we will notify you of the reason and timing. Requests are normally free; any permitted charge or refusal for manifestly unfounded, excessive or repetitive requests must meet the applicable legal conditions.

11. Regional privacy rights

EEA, United Kingdom and Switzerland

Where their laws apply, you may have access, rectification, erasure, restriction, portability, consent-withdrawal and objection rights, subject to legal conditions. You may complain to your local supervisory authority, including the UK Information Commissioner, an EEA data-protection authority or the Swiss Federal Data Protection and Information Commissioner. Our contract’s governing-law clause does not remove these rights. Contact us for the privacy contact or representative relevant to your location.

California and other U.S. states

Where an applicable state law covers Lost Hills and your request, you may have rights to know/access, correct, delete and obtain a portable copy, opt out of sale/sharing or targeted advertising and certain consequential profiling, limit particular uses of sensitive information, use an authorized agent and receive equal treatment. State laws have different eligibility thresholds and exceptions; including these rights here does not assert that every statute applies to every interaction.

The categories and sources we collect are described in section 2, purposes in section 3, recipient categories in section 7 and retention criteria in section 9. Advertising disclosures can involve online identifiers, internet activity and approximate location; they can count as sharing even without payment. We do not sell customer account data for money. A public curator’s information can be available through a paid research product. Contact us about your information or applicable opt-out rights rather than assuming that “no customer-data sales” removes those rights.

GPC and Do Not Track currently suppress supported PostHog web analytics and the gated Playlist Finder ad-measurement flow. The separate Google/Meta marketing-site tags do not currently use those same controls, as explained in section 5. If you believe an opt-out has not been honored, contact us. For a request appeal where state law provides one, reply with “Privacy appeal”; we will review it and provide a response within the applicable period. You may also contact your state attorney general or competent regulator.

Canada and other locations

Applicable local law may give you additional access, correction, consent, deletion or complaint rights. Canadian residents can raise concerns with us and, where appropriate, the Office of the Privacy Commissioner of Canada or their provincial authority. We will assess requests under the law that applies, rather than limiting everyone to U.S. rights.

12. Children and teen accounts

Lost Hills accounts are for people aged 13 or older. A user under the age of legal adulthood must have a parent or guardian review and permit their use under our Terms. We do not authorize children under 13 to create accounts or submit personal information. This eligibility rule does not mean that we have verified every visitor’s age or every parent’s permission.

Where local law requires parental authorization for consent-based processing at a higher age, that authorization is required for the relevant activity. Guardian permission for an account does not automatically authorize optional tracking, advertising or every use of a teen’s information. Under applicable law, selling/sharing the information of a known child or teen may require additional affirmative authorization; a general account or analytics choice is not a substitute.

If you are a parent or guardian and believe a child has submitted information without the required authorization, email us. We will investigate, restrict the relevant processing and arrange deletion or another action required by law. Please avoid sending unnecessary information about the child in your first message.

13. Security

We use authentication, access restrictions and other technical and organizational measures intended to protect information and keep service operations reliable. Measures vary by system and provider. No system can guarantee complete security. We will provide incident notifications where legally required. Protect your sign-in email, credentials and devices, and report suspected unauthorized access promptly.

14. External services and links

When you follow a curator link, open Spotify, authorize an integration or use another provider’s site or app, that organization’s own privacy practices apply to its processing. Its policy may differ from ours. This does not remove our responsibilities for disclosures we make or providers acting on our behalf. Useful provider notices include Stripe, Apple, RevenueCat, PostHog, Google, Meta, Resend, Cloudflare and OpenAI.

15. Changes to this policy

We update the version date when we change this policy. We will bring material changes to your attention through an appropriate notice, such as email or an in-service message, before a new material use starts where required by law. If a new use requires consent, we will seek it; publishing a policy or continued use alone does not supply that consent. This version describes the practices addressed by the October 15, 2026 revision. You may request an earlier version by email.

16. Contact us

For privacy requests, curator corrections, complaints or questions, email [email protected] or write to:

Please identify the relevant service and request. We will route it to the person responsible for handling privacy matters.