Cobrand Privacy Policy
Effective Date: August 26, 2025.
This privacy policy describes how Cobrand collects, uses, and shares data. It also describes your rights to control data about you. Legally speaking, Cobrand Corporation, Inc. is the “data controller” of this data and is primarily responsible for how it is collected, used, and shared.
The disclosures in this privacy policy cover Cobrand’s collection and use of data for its own purposes and the administration and management of customer accounts. We refer to all these together as our “Sites”. Our customers are typically data controllers for data they collect from fans or consumers using the Cobrand platform. The privacy policy that applies to that data will be displayed on the customer’s page or form used to collect data.
Some platforms or partners we use or link to from the Sites may collect data for their own purposes as controller or joint controller. Those platforms or partners will provide their own privacy policy, which will apply to their collection and use of data collected for their own or joint purposes. We do our best to partner with companies we trust to responsibly handle data about you, but please have a look at these other privacy policies so you understand how those partners will use your data.
How to contact us
If you have questions or concerns about this privacy policy or our data practices, contact us at [email protected].
Information we collect and how we use it
We collect and use data about you as described here. Some data may be optional. The uses described here may be subject to your consent or other choices as required by privacy laws or other legal requirements.
| If you: | We may collect: | And use it to: |
|---|---|---|
| Visit our Sites. | IP address or similar network information, browser information, device identifiers information, cookie or similar identifiers, location based on IP address, language and time zone settings, and page interactions (such as scrolling, clicks, length of visits, pages viewed). | Understand traffic volume and use of our Sites, understand user demographics, identify and resolve technical issues, develop and personalize new features, generate audiences for online advertising, protect the Sites against fraud or security threats, and measure the effectiveness of online advertising. |
| Sign up for our mailing list, book a demo, or otherwise interact with our sales teams. | Email address, name, and in some cases city/country. We also collect information about how often emails are opened and links clicked from our emails. | Operate our mailing list, understand and improve the performance of our mailing list, create audience segments on social media or advertising platforms, and maintain records of our fans. |
| Operate an SMS list through the Sites. | Phone number, name, country, and in some cases your email or city. | Operate our SMS service including monitoring for compliance with our terms and the requirements of our service providers and wireless carriers. |
| Log in to a music streaming service to presave, add, or otherwise connect our customer’s content to your streaming account. | Your streaming service login information, including the email address associated with your account, country and geo-location, content you’ve interacted with (such as playlists and artists you follow, recently played tracks, and channel subscriptions) | Take the requested action based on the campaign you interacted with, which may include pre-saving unreleased content, adding/removing content from your library/collection, creating/editing/following playlists, subscribing to channels or similar service features, and/or following artists. We may also use this data to enhance our understanding of fan data behavior and conduct research and analysis. |
| Post content to a social media platform as an influencer/content creator or follow/interact with Co:brand customers. | Public social media profile, public posts, stories, public comments, follows, and similar public data. | Understand the kind of content you post, your interactions with our customer and other brands, and offer our customers tools to contact you about influencer marketing opportunities. Segment and generate audiences. |
| Log in to a Site. | Name, email address, and other login information. | Facilitate account creation and login experiences and to secure the Sites and protect your account. |
| Contact us with a question or customer service request. | Name, email address, order information, and any information you provide about your question or concern. | Respond to your questions or concerns, research and address product or service issues. |
In addition to the above, we may use any data collected about you to manage your rights and choices, comply with legal or regulatory obligations, resolve disputes and enforce our agreements, secure our Sites, prevent fraud or other misuse, and protect the safety of our customers.
For individuals in the European Economic Area or United Kingdom, our legal bases of processing are:
- Consent for direct marketing such as sending you emails and any online advertising or tracking where consent is required.
- Necessary for performance of a contract for fulfilling merch purchases or other orders.
- Necessary for compliance with legal obligations where the data processing is required by law.
- Legitimate interest for other uses.
How we share information about you
We may share information about you in the following ways:
- With vendors who provide services on our behalf. These vendors will only use data about you for the purpose of providing services and not for their own benefit.
- Social media data may be shared with artists you have interacted with on social media or the Sites.
- Streaming service activity may be shared with the artist whose campaign is utilizing the login feature.
- With your consent or upon notice and opportunity to opt out, according to legal requirements.
- In response to a legally enforceable subpoena, court order, government inquiry, or other binding legal process.
- With an acquiring company as part of a sale, merger, or other business transfer where our company or its assets are purchased.
- Where necessary to protect the rights, safety, or security of you or others.
We may engage in common data practices that are considered a "sale" of personal information under certain laws including the. California Consumer Privacy Act. These include use of "custom audience" advertising features and standard online advertising tools on social media platforms such as TikTok, Meta, Google, and Snapchat.
We do not sell or share your mobile phone number with third parties or affiliates for marketing purposes. However, your phone number may be transferred to a third party as part of a sale or merger of our company or assets.
Your rights
You may have the right to control how we collect, use, or share information about you, including rights to access, correct, delete, obtain copies of, withdraw consent for, or opt out of online advertising or other processing of data about you.
To exercise these rights, please contact us as described in the “How to contact us” section above. We will respond as quickly as we can within the time periods required by applicable laws, which in most cases is between 30 and 45 days.
Storage and retention of data
Our default rule is that we keep information about you as long as it is needed for the purpose it was collected or for a use disclosed above. We will use reasonable security measures to protect your data.
We may use service providers that store data in different parts of the world, including the United States. We take steps to ensure our service providers comply with international data transfer requirements, usually through approved data transfer agreements.
Children
Our Sites are not directed to children. If you believe we have collected data about your child, please contact us and we will either delete that data or obtain your parental consent for its use.
Analytics, cookies, and tracking
We may use advertising technologies including cookies, tags, pixels, or similar. These technologies allow us to identify audiences of interested fans and target those fans with promotions and advertisements that we think may be of interest.
Some of these ads may be personalized, meaning they are intended to be relevant based on your prior activity or demographic information we or the advertising partner has about you.
We use analytics to better understand how our Sites are used. This includes Google Analytics by Google, who requires us to disclose how they process data collected through Google Analytics. Please see this link for information on Google’s processing of data.
Changes to this privacy policy
Any material changes we make to our privacy policy in the future will be posted here. We will also notify you of privacy policy changes through email, login notifications, or other mechanisms reasonably designed to provide notice of the changes. We encourage you to check our privacy policy periodically to refresh your understanding of our data practices.
Service-specific disclosures
Google Workspace APIs. We explicitly affirm that Google Workspace APIs, and the data stored in the scope of their usage, are not used to develop, improve, or train generalized or personalized AI and/or ML models. We respect the privacy and security of user data and ensure that any data accessed through Google Workspace APIs is used solely for the intended purpose of providing our services to you and not for any other purposes.
TikTok. You can access and edit most of your TikTok profile information by signing into TikTok. You can delete the User Content you uploaded. TikTok also provides a number of tools in Settings that allow you to control, among others, who can view your videos, send you messages, or post comments to your videos. Should you choose to do so, you may delete your entire account in Settings. You may also be afforded certain rights under applicable laws, which may include the right to access, delete, update, or rectify your data, to be informed of the processing of your data, to file complaints with authorities, and potentially other rights. If you have any questions on how to use the above tools, want to know about what rights you may have or want to exercise them, or have any requests, inquiries, or complaints, please contact TikTok at: https://www.tiktok.com/legal/report/privacy. Cobrand.com accesses but does not store or take credit for content it retrieves from TikTok video list APIs. It displays all TikTok content according to TikTok API requirements.
Spotify and Apple Music. Information obtained by Cobrand: Once you approve our connection with an applicable music service or other third party provider, until such connection expires or until the time you terminate such connection using one of the methods described below, Cobrand may access and store some or all of the following types of information ("Third Party Data") from your user account: the e-mail address registered with the music service or other third party provider, where available to us; information about your user account, including but not limited to your country and geo-location; and activity information, including but not limited to content you've interacted with (e.g., playlists and artists you follow, recently played tracks and/or channel subscriptions). Actions taken by Cobrand: Depending on the type of Campaign in which you have chosen to participate, Cobrand will use the connection with the applicable music service or other third party provider to fulfill one or more of the following actions relevant to that Campaign in respect of your user account: adding and removing items to your library/collection; creating, editing and/or following playlists; subscribing to channels or other service features; and following artists. In addition, Cobrand may utilize some or all of your Third Party Data for any of the following purposes: to enhance our relationship with you and to conduct research and analysis. To remove Cobrand's access to your account, please visit the website of the applicable music or other third party service and follow the relevant instructions:
Spotify: https://spotify.com/account/apps
Apple Music: https://appleid.apple.com/account/manage
You can request a deletion of your Third Party Data history by emailing [email protected]. Please note that this action will discontinue Cobrand's collection of Third Party Data but you will still need to remove the original permission within the third party service as set forth above.
Local rights and disclosures
Certain local laws require specific disclosures related to our data practices.
US State Disclosures
Residents of certain US states (including California, Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia) may have some or all of the following rights, which can be exercised by contacting us as described in the “How to contact us” section above:
- Access and obtain a copy of personal information about you.
- Confirm the categories and/or specific pieces of personal information about you we have collected, used, disclosed, or shared with third parties.
- Correct inaccuracies or delete personal information about you.
- Opt out from profiling that may produce legal or other significant effects.
- Opt out from targeted advertising and/or the sale or sharing of personal information about you.
- Request a list of categories, or for Oregon residents specific names, of third parties to which we have disclosed personal information about you.
- Non-discrimination for the exercise of your privacy rights.
If you are a resident of California, you may opt out of having your personal information shared with third parties for the third party’s direct marketing purposes.
The California Consumer Privacy Act requires specific disclosures about how personal information is shared or sold. Note that the definition of “sale” includes almost any sharing of information to third parties who are not service providers. Selling personal information does not mean it was given to a third party in exchange for monetary compensation.
| Category | Categories of third parties receiving personal information for business purposes | Categories of third parties to whom personal information was “sold” as defined by the CCPA, including for targeted advertising purposes |
|---|---|---|
| Identifiers such as real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers. | Affiliates, business partners, service providers, and social media/advertising companies. | Social media/advertising companies, Cobrand customers with whom you interact. |
| Characteristics of protected classifications under California or federal law, such as gender. | Service providers and social media/advertising companies. | Social media/advertising companies. |
| Commercial information, including products or services purchased obtained, or considered, or other purchasing or consuming histories of tendencies. | Affiliates, business partners, service providers, and social media/advertising companies. | N/A |
| Biometric information. | N/A | N/A |
| Internet or other electronic network activity information, including browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement. | Affiliates, business partners, service providers, and social media/advertising companies. | Social media/advertising companies. |
| Geolocation data. | Service providers and social media/advertising companies. | Social media/advertising companies. |
| Audio, electronic, visual, thermal, olfactory, or similar information. | Service providers. | N/A |
| Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Affiliates, business partners, service providers, and social media/advertising companies. | Social media/advertising companies, customers with whom you interact. |
| Other information about you that is linked to the personal information above. | Affiliates, business partners, service providers, and social media/advertising companies. | Social media/advertising companies, Cobrand customers with whom you interact. |
| Sensitive personal information. | N/A | N/A |
We collect personal information from:
- Individuals directly.
- Business partners and affiliates.
- Service providers.
If you are not satisfied with the results of a privacy rights request you can contact us to appeal our decision as described in the "How to contact us" section above. Please include "Appeal" in the subject line of your message.
We may require validation of your identity before fulfilling your privacy rights request. Validation will vary depending on the type of request and risk of disclosure to an unauthorized person. Validation steps may include providing a copy of a government-issued identification or similar, logging in with an account, or providing other details that support the authenticity of the request.
You may designate a third party as an agent to make privacy rights requests on your behalf. An agent must be designated in writing or through a power of attorney. We will require a designated agent to validate their authority prior to fulfilling requests made on your behalf.
EEA and UK disclosures
If you are located in the European Economic Area or United Kingdom, you may have additional rights regarding our processing of personal data about you.
You may have the right to:
- Access and obtain a copy of personal data about you.
- Confirm the categories and specific pieces of personal data about that we have collected, used, disclosed, or shared with third parties.
- Correct inaccuracies or delete personal data about you.
- Object to or restrict processing of personal data about you.
- Opt out from direct marketing, profiling, and/or targeted advertising.
If you believe our processing of personal data about you does not comply with applicable laws, you may also have the right to lodge a complaint with your local supervisory authority.
We do not process your personal data for automated decision-making. Our processing of your personal data may require transfer of your personal data outside of the European Economic Area and United Kingdom. In these cases we will take steps to apply approved safeguards, usually through approved data transfer agreements.
In some cases you may have the right to request a copy of these safeguards, which you can do by contacting us as described in the "How to contact us" section above.