1. What we collect from artists
- Identity: full name, stage name, phone, country.
- KYC documents: the government ID you choose (e.g. Voter ID, PAN, Passport, Driver's Licence) and a selfie. Used only to confirm you are the artist you claim to be.
- Artist photo: kept as your public profile picture.
- Public profile: stage name, bio, avatar, banner, social links — all visible on your artist page.
- Stats: aggregated plays, likes, downloads and follower counts for your songs.
2. Document retention — important
Your KYC documents (ID front/back and selfie) are stored in a private, owner-and-admin-only bucket and are automatically deleted the moment your application is approved or rejected. A daily safety job also hard-deletes any KYC file older than 7 days, no matter what.
We do not use your ID for advertising, sell it, share it with brokers, or store it long-term. It exists only long enough for a human reviewer to confirm your identity.
3. Legal basis
We process KYC on the basis of your explicit consent at submission, and on our legitimate interest to prevent fraud and copyright abuse. You can withdraw consent at any time by deleting your application before review.
4. Your rights (GDPR + India DPDP Act)
You may access, correct, export, or delete your artist data at any time by writing to universflow.in@gmail.com. We respond within 30 days.
5. Sharing
KYC files are visible only to Universflow reviewers. Your public profile (stage name, bio, photo, social links) is visible to every visitor and indexed by search engines.
6. Security
Files are stored encrypted at rest, transferred over HTTPS, and gated by per-user row-level security.
7. Contact
Artist privacy questions: universflow.in@gmail.com.
