Privacy Policy

cllb.io — Last updated: 10 July 2026

This Privacy Policy explains how cllb (“cllb”, “we”, “us” or “our”) — operated by Plotagonist Ltd, a company registered in England and Wales (company number 13175794) — collects, uses, shares and protects personal data when you use our website, apps and services (the “Platform”), available at cllb.io. cllb is the professional home for music collaboration, connecting producers, vocalists, instrumentalists, songwriters, engineers, DJs, labels and publishers to discover collaborators, agree terms, exchange files and payments, and build a documented, tamper-evident history of each collaboration.

By using the Platform you acknowledge this Privacy Policy. If you do not agree with it, please do not use the Platform. This policy should be read alongside our Terms of Service.

1. Who this policy applies to

This policy applies to anyone who visits cllb.io, creates an account, or otherwise interacts with the Platform, including individual collaborators (producers, vocalists, instrumentalists, songwriters, engineers, DJs) and organisations (labels, publishers) and the people who act on their behalf.

2. Information we collect

2.1 Information you provide

Account and profile information: name, email address, password, your role(s) on the Platform (e.g. producer, vocalist, label), profile photo, bio, portfolio links and any public preview snippets you upload.
Collaboration content: music files, stems, project files, lyrics, messages and feedback exchanged with other collaborators, and the agreements, approvals and terminations you enter into on the Platform.
Human-made declarations: the declaration you make when uploading content that it was created by humans, and, where you choose to submit one, a proof-of-creation video.
Payment and billing information: billing name and address, subscription tier and transaction details. Card and bank details are collected and processed by our payment/escrow processor and are not stored directly by cllb.
Communications: messages you send to our support team, and correspondence about disputes, contest entries or account issues.
Verification information: where cllb undertakes identity or authorship verification, information you provide to support that process.

2.2 Information collected automatically

Usage data: pages viewed, features used, search queries, and interactions with other users’ profiles or content.
Device and log data: IP address, browser type, device identifiers, operating system and timestamps.
Cookies and similar technologies: see Section 8 below.

2.3 Information from third parties

Confirmation from our payment/escrow processor that a payment has been made, held or released.
Information from identity-verification or fraud-prevention providers, where used.

3. How we use your information

Legal bases (users in the UK/EEA). We rely on the following legal bases under the UK GDPR and EU GDPR:

Performance of a contract — to create your account, operate escrow, process agreements, and provide the Platform.
Legitimate interests — to keep the Platform secure, prevent fraud and false human-made declarations, improve our services, and enforce our Terms of Service, provided these interests are not overridden by your rights.
Legal obligation — to comply with tax, accounting, anti-fraud and other legal requirements.
Consent — for optional features such as submitting a voluntary proof-of-creation video, marketing communications, and non-essential cookies. You can withdraw consent at any time.

We use your information to:

create and administer your account and verify your declared role;
operate the collaboration workflow: discovery, messaging, agreements, escrowed payments, file sharing and feedback;
maintain the tamper-evident collaboration history and audit trail described in our Terms of Service, including timestamps of agreements, chats, file events, approvals and terminations;
assess and act on human-made declarations, including investigating suspected false declarations;
process payments, hold and release escrow, and charge applicable fees;
operate contests, including holding contest prizes in escrow and recording winner agreements;
communicate with you about your account, transactions and support requests;
detect, investigate and prevent fraud, abuse and violations of our Terms of Service;
comply with legal obligations and respond to lawful requests from authorities;
improve and develop the Platform.

4. How we share your information

Other collaborators: your profile, portfolio, public preview snippets, and information relevant to a collaboration (messages, files, agreement terms, approval status) are visible to collaborators you work with, and certain profile information is visible to other users of the Platform.
Service providers: payment and escrow processors, cloud hosting and storage providers, customer support tools, and analytics providers, who process data on our behalf and under contract.
Legal and safety: where required by law, to protect the rights, safety or property of cllb, our users or the public, or in connection with suspected false human-made declarations or other breaches of our Terms of Service.
Business transfers: if cllb is involved in a merger, acquisition or asset sale, personal data may be transferred as part of that transaction, subject to this policy or a policy offering at least equivalent protections.
With your consent: in other circumstances where you direct us to share information, such as making prize or winner details public in a contest.

We do not sell your personal data. We do not share personal data with third parties for their own direct marketing purposes.

5. The collaboration history and audit trail

Because cllb’s core purpose is to restore confidence in authorship, agreements, human-made declarations, approvals, terminations, chats and file events are timestamped and stored in a tamper-evident record as described in our Terms of Service. This means that, unlike ordinary account data, entries in the collaboration history are not deleted on request once created, because doing so would undermine the evidentiary integrity of the record for all parties to a collaboration. Where you exercise a right to erasure, we will delete personal data that is not required to preserve the integrity of a collaboration history to which other users are also party, and will restrict or anonymise the rest to the extent possible under applicable law.

6. International data transfers

cllb operates internationally and may transfer personal data outside the country in which you are based, including outside the UK or European Economic Area (EEA), to service providers and infrastructure located in other countries such as the United States. Where we do so, we put in place appropriate safeguards, such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or we rely on an applicable adequacy decision.

7. Data retention

We retain account and profile data for as long as your account is active, and for a reasonable period afterwards to comply with legal, tax and accounting obligations, resolve disputes and enforce our agreements. Collaboration history and audit trail entries are retained for as long as needed to preserve the integrity of the record for all parties involved, which may extend beyond account closure. We retain other data only as long as reasonably necessary for the purposes described in this policy.

8. Cookies and similar technologies

We use cookies and similar technologies to operate the Platform (essential cookies), remember your preferences (functional cookies), and understand how the Platform is used (analytics cookies). Where required by law, we ask for your consent to non-essential cookies through a cookie banner, and you can change your preferences at any time through your browser or our cookie settings.

9. Your rights

Depending on where you live, you may have rights including:

Under UK/EU GDPR: the right to access, correct, delete or restrict the use of your personal data; the right to data portability; the right to object to processing based on legitimate interests or for direct marketing; the right to withdraw consent; and the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office).
Under US state privacy laws (including the CCPA/CPRA): the right to know what personal information we collect, use and disclose; the right to delete personal information; the right to correct inaccurate personal information; and the right to opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioural advertising).

To exercise any of these rights, contact us at privacy@cllb.io. We may need to verify your identity before acting on a request, and some requests may be limited where retaining information is necessary to preserve the collaboration history described in Section 5, or to comply with our legal obligations.

10. Children’s privacy

The Platform is not directed at, and is not intended for use by, anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at privacy@cllb.io and we will take appropriate steps to delete it.

11. Security

We use technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or alteration, including encryption in transit, access controls, and the tamper-evident storage described in Section 5. No system is completely secure, and we cannot guarantee the absolute security of your information.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting a notice on the Platform or by email before the changes take effect. The “Last updated” date at the top of this policy indicates when it was last revised.

13. Contact us

If you have questions about this Privacy Policy or how we handle your personal data, contact us at privacy@cllb.io.