Dosido is operated by Vibular Tech Records LLC ("Dosido," "we," "us," or "our"). We build tools for musicians and their collaborators, and the work you do on Dosido — your recordings, your projects, and the people you make them with — is yours. This Privacy Policy describes how we collect, use, disclose, and protect your data when you use our websites, mobile applications, products, and services, and when you interact with us through social media, marketing, and the other channels described below (collectively, our "Services").
This Privacy Policy supplements the Dosido Terms of Service. All provisions of the Terms of Service likewise apply to this Privacy Policy. Capitalized terms not defined here have the meanings given in the Terms of Service.
California Notice at Collection / State Law Privacy Rights: If you are a resident of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, see the U.S. State Privacy Rights section below for additional information about your personal information and your rights under state law.
European and UK Users: If you are located in the European Economic Area, the United Kingdom, or Switzerland, see the Privacy Notice to European and UK Users section below, which describes the legal bases on which we rely and the rights available to you.
We do not sell your personal information, and we do not use it for cross-context behavioral or targeted advertising. We do not run third-party advertising networks on the Services.
Table of Contents
- Data We Collect
- How We Use Your Data
- How We Share Your Data
- How Your Data Is Maintained
- Your Choices
- Age Restrictions on Providing Us Data
- Security
- Changes to This Privacy Policy
- Contacting Dosido
- U.S. State Privacy Rights
- Privacy Notice to European and UK Users
1. Data We Collect
We collect data that you provide to us, data we receive from third parties, and data we collect automatically when you use the Services.
Data You Provide Us
| Category | What This Is |
|---|---|
| Account Data | Data we need to set up and maintain your account, such as your account credentials, name, username, email address, and phone number. This also includes information we need to verify that you are eligible to use the Services, such as your date of birth. |
| Profile Data | Data that allows you to present yourself to other users, such as your profile photo, bio, instruments or roles, genres, credits, and links to your other profiles or sites. |
| User Content | Everything you create, upload, record, or post on the Services, including audio recordings, stems, tracks, project files, lyrics, artwork, notes, session comments, and messages you exchange with other users. |
| Collaboration Data | Information about how you work with others on the Services, such as the projects and sessions you participate in, the collaborators you invite or accept, the roles and contributions you record, and any split, credit, or attribution information you enter for a project. |
| Payment and Transactional Data | Information we need to process payments and administer your subscription or purchases, such as billing name, billing address, the last four digits and expiration date of your payment card, and purchase and subscription history. Payment card numbers and bank account details are collected and processed directly by our third-party payment processor. We do not store full payment card numbers on our systems. |
| Our Communications With You | The communications between us, including when you contact support, respond to us, or we reach out to you. |
| Feedback | Any feedback you provide about the Services, such as through questionnaires, surveys, interviews, bug reports, or beta tests. |
| Marketing Data | Details about your engagement with our communications and your preferences for receiving them. |
| Data About Others | Contact information for other people that you provide to us, such as when you invite a collaborator to a project or to join the Services. You should only share another person’s contact information with us if you have their permission to do so. |
Data We Collect From Third Parties
| Category | What This Is |
|---|---|
| Data From Your Single Sign-On (SSO) Provider | If you create or access your account using a third-party sign-in service, we receive information associated with your account at that service, such as your name, profile picture, username, email address, and a unique identifier. We do not receive your password for that service. If you use Google API Services to connect to the Services, our use of information received from those APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. |
| Data From Other Users | Data that other users provide about you, such as when a collaborator invites you to a project, credits you on a recording, or includes your information in a project they store on the Services. |
| Data From Social Media Platforms | Your interactions with our social media accounts and posts, and public posts in which you mention Dosido or use a Dosido-related hashtag. |
| Data From Service Providers | Information from the vendors who help us operate the Services, such as confirmation of a payment from our payment processor, delivery and engagement data from our email provider, and diagnostic data from our hosting and analytics providers. |
Data We May Collect Automatically
| Category | What This Is |
|---|---|
| Device Data | Information about the device, application, or browser you use to access the Services, such as operating system and version, device type and model, application version, browser type, language settings, mobile network information, IP address, unique device and installation identifiers, crash and diagnostic data, and general (city- or region-level) location inferred from your IP address. |
| Precise Location Data | We do not collect precise geolocation from your device unless you grant that permission in your device settings for a feature that requires it. You can withdraw that permission at any time in your device settings. |
| Online Activity Data | Your interactions with the Services, including the pages, profiles, projects, and content you view or interact with, search queries, the site that referred you to us, playback and upload activity, feature usage, session duration, and the actions you take within the Services. We collect this information using first- and third-party technologies such as cookies, pixels, software development kits (SDKs), and server logs. We use these technologies to operate, secure, and improve the Services and to measure how they are used — not to serve you targeted advertising. You may be able to configure your browser or device settings to limit or disable cookies and similar technologies. See the Your Choices section below. |
| Metadata About User Content | Technical information about how, when, and with what your content was created or edited, such as file format, sample rate, duration, take and version history, session timestamps, and the device or software used. |
2. How We Use Your Data
This table summarizes the ways we may use the data described above.
| How We Use Your Data | What This Means |
|---|---|
| Delivering the Services | To provide, host, maintain, and operate the Services; to create and administer your account; to store, sync, and deliver your projects and content; to enable collaboration between you and the people you work with; and to process payments and administer subscriptions. |
| Supporting Collaboration | To route invitations, notifications, and messages between collaborators; to display your profile, credits, and contributions to the people you work with; and to maintain project, version, and contribution history. |
| Improving the Services | To monitor and analyze usage and trends, diagnose and fix problems, test new features, and improve the performance, reliability, and usability of the Services. |
| Research and Development | To develop new features and offerings and to understand how the Services are used. As part of these activities, we may create aggregated, de-identified, or anonymized data. Once data is de-identified, we maintain and use it in de-identified form and do not attempt to re-identify it except as permitted by law. |
| Administrative and Support Communications | To send you technical notices, confirmations, updates, security alerts, invoices, and other administrative and support messages. These are not marketing messages, and you cannot opt out of them while you have an account. |
| Marketing | To send you direct marketing communications about Dosido and our products and services. You can opt out of these at any time — see the Your Choices section. We do not engage in interest-based or targeted advertising, and we do not share your personal information with advertising networks. |
| Safety, Security, and Fraud Prevention | To protect the security and integrity of the Services and our users, verify accounts and activity, detect and prevent fraud, spam, abuse, and other harmful or unlawful conduct, and enforce our Terms of Service and other policies. |
| Compliance and Protection | To comply with applicable laws and legal process, respond to lawful requests from public authorities, respond to subpoenas, warrants, and other lawful requests, protect our users and the public, establish and defend legal claims, and satisfy our contractual and regulatory obligations, including obligations relating to royalties, credits, and rights administration. |
| Other Uses | For any other purpose for which we have provided notice or for which you have consented. |
3. How We Share Your Data
We share your data only as described below. We do not sell your personal information, and we do not share it for cross-context behavioral or targeted advertising.
| Who We May Share Your Data With | Why We May Share Your Data With Them |
|---|---|
| Other Users and Collaborators | Your profile, your public content, and your interactions on the Services can be seen by other users. Content and information you place in a shared project — including recordings, stems, comments, version history, and the credit or split information you enter — are visible to the collaborators on that project. Consider carefully what you make public and what you share into a project. |
| Affiliates | We may share your data with Vibular Tech Records LLC and its corporate affiliates and subsidiaries, including Broken Radio Recording Company, for the purposes described in this Privacy Policy. |
| Service Providers | We use companies and individuals that perform services on our behalf or help us operate the Services and our business, such as cloud hosting and storage, audio processing and transcoding, payment processing, customer support tooling, email and notification delivery, security, and analytics. They may access your data only to perform those services for us and are bound by contractual obligations to protect it. |
| Rights Administration and Distribution Partners | Where you ask us to deliver, release, register, or administer a recording — or where you use a feature that connects your project to a label, distributor, publisher, or rights organization — we share the information necessary to do so, such as credits, contribution splits, and contact details for the participants you identify. |
| Professional Advisors | We may share your data with our lawyers, auditors, accountants, bankers, and insurers where necessary for them to provide their services to us. |
| Authorities and Others | We may share your data with law enforcement, government authorities, courts, and private parties where necessary for the safety, security, compliance, and protection purposes described above, or where we are legally required to do so. |
| Business Transferees | If we are involved in a merger, acquisition, financing, corporate divestiture, reorganization, dissolution (including bankruptcy), or sale of all or a portion of our assets, we may share or transfer your data to the parties to that transaction and their advisors, during the transaction or in contemplation of it (including during due diligence). |
| At Your Direction | We share your data with third parties when you ask us to, such as when you connect a third-party application to your account or export a project to another service. |
4. How Your Data Is Maintained
| Topic | What This Means |
|---|---|
| How long we retain your data | Only as long as we reasonably need it for the purposes described in this Privacy Policy. In determining retention periods we consider the amount and sensitivity of the data, the potential for harm from unauthorized use or disclosure, the purposes for which we process it, whether we can achieve those purposes by other means, and our legal, tax, accounting, and rights-administration obligations. Records relating to credits, splits, royalties, and transactions may be retained for longer periods where we are required or reasonably need to keep them. |
| How you can delete your data | You can delete individual projects and content from within the Services, and you can delete your account entirely from your account settings or by contacting us at [email protected]. |
| What happens when we no longer need your data | We will delete it or anonymize it, unless deletion or anonymization is not possible or practical — for example, because the data resides in backup archives or in certain email records — in which case we will securely store it and isolate it from further processing until deletion is possible. |
| Shared and collaborative content | Content you contributed to a shared project may remain available to your collaborators after you leave the project or delete your account, because it forms part of work that belongs to others as well. Where we can do so, we will disassociate your account and profile from that content on request. |
| What data remains | It is not possible to ensure that anything on the internet is ever completely removed. Even after your account is deleted, your content may remain visible if you shared it elsewhere or if others copied, downloaded, or re-shared it before deletion. |
5. Your Choices
| What You Can Do With Your Data | How To Make It Happen |
|---|---|
| Access or update your information | You can review and update your account and profile information by logging into your account. You can also contact us at [email protected]. |
| Opt out of marketing communications | Follow the unsubscribe instructions at the bottom of any marketing email, adjust your preferences in your account settings, or contact us. You will continue to receive non-marketing messages related to your account and the Services. If you receive marketing text messages from us, reply STOP to opt out. |
| Disable push notifications | You can stop receiving push notifications by changing the notification settings for the Dosido app on your device, or by adjusting your notification preferences in your account settings. We do not control your device’s notification settings and are not responsible if they do not function as intended. |
| Disable location access | You can disable our access to your device’s location in your device settings at any time. |
| Adjust cookie preferences | You can limit or reject cookies by configuring your browser settings. If you are in the European Economic Area, the United Kingdom, or a U.S. state that requires it, you can manage non-essential cookies through the cookie banner or the “Your Privacy Choices” link in the footer of our website. Disabling some cookies may affect how the Services function. |
| Configure third-party platform settings | If you connect to the Services through a third-party platform or sign-in provider, you may be able to use your settings with that platform to limit the information we receive from it going forward. |
| Control what you share | You choose what to make public, what to keep private, and whom to invite to a project. You can adjust the visibility of your profile and your projects in your account and project settings. |
| Decline to provide information | You can decline to give us certain data, but you may not be able to use certain features of the Services as a result. |
| Delete your data | You can delete individual content and projects from your account, and you can delete your account and data entirely from your account settings or by contacting us. If you are under 18 and a registered user, you may also use these instructions to request removal of content you posted, under California’s “Online Eraser” law (Cal. Bus. & Prof. Code § 22581). |
6. Age Restrictions on Providing Us Data
| Topic | What This Means |
|---|---|
| Minimum age | The Services are not directed to, targeted toward, or intended for use by anyone under 13 years of age, and we do not knowingly collect personal information from children under 13. Consistent with our Terms of Service, you must be at least 13 years old to create an account. Some features may carry higher age requirements, including any feature involving payment. |
| Users between 13 and 18 | If you are between 13 and 18, you may use the Services only with the involvement and consent of a parent or legal guardian, who agrees to the Terms of Service on your behalf. |
| Users in the European Economic Area and the United Kingdom | If you are located in the EEA or the UK, you must be at least 16 years old to use the Services, or the minimum age for consent to data processing in your country if that age is lower. |
| Unintentional receipt of children’s data | If we learn that we have collected personal information from a child under 13 (or under the applicable minimum age), we will delete it. If you believe a child has provided us with personal information, contact us at [email protected]. |
7. Security
We use administrative, technical, and physical safeguards designed to protect your data against loss, misuse, and unauthorized access, disclosure, alteration, and destruction — including encryption of data in transit, access controls, and monitoring. No security measure is perfect, however, and we cannot guarantee the security of any data you transmit to or store with us. You are responsible for keeping your account credentials confidential and for the activity that occurs under your account. If you believe your account has been compromised, contact us immediately at [email protected].
The Services are operated in the United States. If you access the Services from outside the United States, your data will be transferred to, stored in, and processed in the United States and other countries where we or our service providers operate. See the European and UK notice below for information about transfers out of the EEA and UK.
8. Changes to This Privacy Policy
| Topic | What This Means |
|---|---|
| Notification of material changes | If we make a material change to this Privacy Policy, we will notify you by email, through a notice posted on the Services, or as otherwise permitted or required by law. |
| Effective date of changes | We will update the “Effective as of” date at the top of this Privacy Policy whenever we revise it. Your use of the Services after the effective date of an updated Privacy Policy indicates your acceptance of it. |
9. Contacting Dosido
| How To Reach Us | Details |
|---|---|
| Privacy inquiries | [email protected] |
| Support | [email protected] |
| Mailing address | Vibular Tech Records LLC Attention: Legal Department — Dosido Privacy 100 Pine St #2600, San Francisco, CA 94111 |
10. U.S. State Privacy Rights
This section applies to residents of U.S. states with comprehensive consumer privacy laws, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. It supplements the rest of this Privacy Policy and describes rights that may be available to you under your state’s law. Terms such as “personal information,” “sale,” “share,” and “targeted advertising” have the meanings given to them in the applicable state law.
Categories of personal information we collect and disclose
In the twelve months preceding the effective date of this Privacy Policy, we have collected the following categories of personal information, as those categories are described in the California Consumer Privacy Act. For each category, the sources, purposes, and recipients are those described in the Data We Collect, How We Use Your Data, and How We Share Your Data sections above.
| CCPA Category | Examples We Collect |
|---|---|
| Identifiers | Name, username, email address, phone number, billing address, IP address, unique device and account identifiers, and identifiers received from your sign-in provider. |
| Customer records information (Cal. Civ. Code § 1798.80(e)) | Name, contact information, and payment and billing information. |
| Protected classification characteristics | Age or date of birth, collected to verify eligibility to use the Services. |
| Commercial information | Subscription and purchase history and records of transactions. |
| Internet or other network activity information | Browsing and usage activity on the Services, feature and playback activity, search queries, and interactions with our communications. |
| Geolocation data | General location inferred from IP address, and precise device location only where you have granted that permission. |
| Audio, electronic, visual, and similar information | Audio recordings, stems, and other User Content you upload or create, profile photos, artwork, and support communications. |
| Professional or employment-related information | Your role, instruments, credits, and professional affiliations, where you choose to provide them. |
| Inferences | Preferences and characteristics we derive from your use of the Services in order to operate and improve them. |
| Sensitive personal information | Your account log-in credentials, and precise geolocation where you have granted that permission. We use and disclose sensitive personal information only for the purposes permitted by Cal. Civ. Code § 1798.121(a) and its implementing regulations — that is, to perform the Services, secure accounts, prevent fraud, and comply with law — and not for the purpose of inferring characteristics about you. We are therefore not required to offer a “Limit the Use of My Sensitive Personal Information” option. |
No sale, sharing, or targeted advertising
We do not sell personal information and we have not sold personal information in the preceding twelve months. We do not share personal information for cross-context behavioral advertising, and we do not process personal information for targeted advertising or for profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. We do not knowingly sell or share the personal information of consumers under 16 years of age.
Your rights under state law
Depending on your state of residence, you may have the right to:
- Know and access the personal information we have collected about you, including the categories collected, the sources, the purposes for collecting it, the categories of third parties to whom we disclose it, and the specific pieces of personal information we hold;
- Obtain a copy of your personal information in a portable and, to the extent technically feasible, readily usable format;
- Correct inaccurate personal information we maintain about you;
- Delete the personal information we have collected from you, subject to exceptions permitted by law;
- Opt out of the sale or sharing of personal information and of targeted advertising — activities in which we do not engage; and
- Not be discriminated against or retaliated against for exercising any of these rights. We will not deny you services, charge you a different price, or provide you a different level or quality of service because you exercised a privacy right.
How to exercise your rights
Submit a request by emailing [email protected] with the subject line “Privacy Rights Request,” or through the privacy request form at www.dosido.app/privacy. We will verify your request by asking you to confirm control of the email address associated with your account and, where appropriate, additional information that matches what we already hold. We do not use the information you provide for verification for any other purpose. We will respond within the time required by your state’s law — generally 45 days, extendable by an additional 45 days where reasonably necessary, in which case we will notify you.
Authorized agents
You may use an authorized agent to submit a request on your behalf. We may require the agent to provide proof that you gave them signed permission to submit the request, and we may require you to verify your own identity directly with us or to confirm that you provided the agent permission to submit the request.
Appeals
If we decline to take action on your request and your state’s law provides a right to appeal, you may appeal by replying to our response or by emailing [email protected] with the subject line “Privacy Request Appeal.” We will respond in writing within the period required by your state’s law and explain the reasons for our decision. If your appeal is denied, you may contact your state Attorney General to submit a complaint.
Opt-out preference signals
Because we do not sell or share personal information or engage in targeted advertising, there is no such processing for an opt-out preference signal such as Global Privacy Control to opt out of. We honor these signals where required by law.
California “Shine the Light”
California Civil Code § 1798.83 permits California residents to request information about disclosures of personal information to third parties for those third parties’ own direct marketing purposes. We do not make such disclosures.
11. Privacy Notice to European and UK Users
This section applies if you are located in the European Economic Area, the United Kingdom, or Switzerland, and supplements the rest of this Privacy Policy. In this section, “personal data” has the meaning given in the EU General Data Protection Regulation (GDPR) and the UK GDPR.
Controller
Vibular Tech Records LLC, 100 Pine St #2600, San Francisco, CA 94111, United States, is the controller of your personal data processed through the Services. You can contact us about data protection matters at [email protected]. Our representative in the European Union under Article 27 GDPR is Vibular Tech Records LLC 217 South Circular Road, Dublin D08 RW1A Ireland, and our representative in the United Kingdom is Vibular Tech Records LLC 32 Devonia Road, London N1 8JH United Kingdom.
Legal bases for processing
We process your personal data on the following legal bases:
| Legal Basis | When We Rely On It |
|---|---|
| Performance of a contract (Art. 6(1)(b)) | To create and administer your account, host and deliver your content, enable collaboration with the people you work with, process payments and administer your subscription, and provide support — all of which are necessary to perform our contract with you under the Terms of Service. |
| Legitimate interests (Art. 6(1)(f)) | To secure the Services and prevent fraud and abuse; to understand how the Services are used and improve them; to develop new features; to send direct marketing to existing users where permitted; and to establish, exercise, or defend legal claims. We rely on this basis only where our interests are not overridden by your rights and freedoms, and we have assessed that balance for each such use. |
| Consent (Art. 6(1)(a)) | To place non-essential cookies and similar technologies, to access your device’s precise location, to send you marketing communications where consent is required, and for any other processing for which we ask your permission. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal. |
| Legal obligation (Art. 6(1)(c)) | To comply with the laws that apply to us, including tax, accounting, and record-keeping obligations, and to respond to lawful requests from authorities. |
| Vital interests and public interest (Art. 6(1)(d) and (e)) | In the rare case where processing is necessary to protect someone’s life or safety. |
Your rights under the GDPR
Subject to the conditions and exceptions in applicable law, you have the right to:
- Access the personal data we hold about you and receive information about how we process it;
- Rectify inaccurate or incomplete personal data;
- Erase your personal data (the “right to be forgotten”);
- Restrict our processing of your personal data;
- Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller (data portability);
- Object to processing based on our legitimate interests, and to object at any time to processing for direct marketing purposes;
- Withdraw your consent at any time where we rely on consent; and
- Lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner’s Office (ico.org.uk); in the EEA, the authority in your country of residence, place of work, or the place of the alleged infringement.
To exercise any of these rights, contact us at [email protected]. We will respond within one month, which we may extend by two further months where the request is complex or numerous, in which case we will tell you within the first month.
Automated decision-making
We do not make decisions producing legal or similarly significant effects concerning you based solely on automated processing, including profiling.
International transfers
We are based in the United States, and your personal data will be transferred to and processed in the United States and in other countries where our service providers operate. These countries may not provide the same level of data protection as your home country. Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with supplementary measures where necessary. You may request a copy of the safeguards we use by contacting us at [email protected].
Retention
We retain personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, including to satisfy our legal, accounting, and reporting obligations, as described in the How Your Data Is Maintained section above.
Providing your personal data
Where we need to collect personal data by law or under a contract with you, and you do not provide it, we may not be able to provide the Services or a particular feature to you. We will tell you if that is the case at the time.
© 2026 Vibular Tech Records LLC. Dosido is a product of Vibular Tech Records LLC. All rights reserved.