IKI Records (“we”, “us”) is an independent record label based in Paris, France. This policy covers the websites iki-records.com and platform.iki-records.com (the “Platform”), an internal label-management application used by the IKI Records team to manage distribution, social publishing, press relations (CRM), advertising, and analytics for our own roster of artists. The Platform is not a consumer product: access is restricted to label team members.
Data We Process
- Platform accounts. Team member email addresses and a signed session cookie (
iki-session) used solely for authentication. - Connected accounts (OAuth). When a team member connects a YouTube channel, Google Ads account, Google Analytics property, Gmail account, Facebook Page, Instagram professional account, or TikTok account belonging to the label or its artists, we store the OAuth access and refresh tokens plus basic account metadata (account id, display name, avatar). Tokens are stored server-side (Supabase, EU region, and Google Cloud Secret Manager) and are never exposed to third parties.
- Professional CRM contacts. Business contact details of music-industry professionals (journalists, radios, festivals, playlist curators): name, professional email, organisation, country, and publicly available professional links. Legal basis: legitimate interest for professional press outreach (GDPR art. 6(1)(f)). Every outreach email includes an opt-out link, and opt-outs are honored permanently.
- Uploaded media. Artwork, videos, and audio uploaded by the team for publication, stored on Google Cloud Storage (EU region) with a 90-day lifecycle on temporary post media.
- Public pages analytics. Our public artist pages may use Google Analytics and the Meta Pixel to measure campaign performance. These tools set cookies; you can block them via your browser or the platforms’ own opt-outs.
How We Use Google User Data
The Platform accesses Google APIs only for accounts explicitly connected by our team: YouTube (upload and manage videos on our own channels, read channel analytics), Google Ads (manage our own advertising accounts), Google Analytics (read our own property reports), and Gmail (send emails written by the team from their own account, e.g. press campaigns with a mandatory opt-out link). We do not read Gmail inboxes beyond what is required to send and track our own outreach.
IKI Platform’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
The Platform uses YouTube API Services. By connecting a YouTube account you agree to the YouTube Terms of Service. Google’s handling of data is described in the Google Privacy Policy. You can revoke the Platform’s access at any time via your Google security settings.
How We Use Meta and TikTok Data
For Facebook, Instagram, and TikTok, the Platform publishes content (posts, Reels, Stories, videos) to accounts owned by the label or its artists, reads the basic profile of the connected account, and reads performance insights of our own content and ad campaigns. We never access data of users who have not connected their account, and we never sell or share platform data with third parties. Disconnecting an account from the Platform, or removing the app from your Facebook/TikTok settings, invalidates the stored tokens; you can additionally request deletion of all associated data at platform.iki-records.com/data-deletion.
Sharing & Processors
We do not sell personal data, ever. Data is shared only with the platforms you connect (Google, Meta, TikTok — as strictly necessary to perform the actions you request) and with our infrastructure processors: Google Cloud Platform (hosting, storage — EU region europe-west1) and Supabase (database — EU region).
Retention
OAuth tokens: until the account is disconnected or the app is removed, then deleted. CRM contacts: until opt-out or deletion request. Application logs: 90 days. Temporary post media: 90 days (GCS lifecycle).
Your Rights (GDPR)
You may request access, rectification, erasure, portability, or object to processing at any time by writing to nicolas@iki-records.com. We answer within 30 days. You may also lodge a complaint with the French authority (CNIL, cnil.fr). For platform-data deletion, see our data deletion page.
Résumé en français
La plateforme IKI Records est un outil interne du label (Paris) pour gérer distribution, publications sociales, CRM presse, publicité et statistiques de nos propres artistes. Nous traitons : comptes de l’équipe, tokens OAuth des comptes connectés (YouTube, Google, Meta, TikTok — stockés côté serveur en région UE), contacts professionnels presse (base légale : intérêt légitime, opt-out systématique dans chaque email), médias uploadés, et mesures d’audience des pages publiques. Aucune donnée n’est vendue. Droits RGPD (accès, rectification, effacement, portabilité, opposition) : nicolas@iki-records.com — réponse sous 30 jours. Suppression des données liées aux plateformes connectées : /data-deletion.