Your music is safe here

• We collect only what we need: your email, artist name, releases, cover art, streaming links, and the fan emails fans voluntarily share on smart link pages.
• Play events, app openings, and radio likes are stored as aggregate counts and approximate city, region, and country, never raw device GPS or precise addresses.
• Payment card details never touch our servers. Our payment provider (amplihit.com Payments) handles card entry and charging; we store only the purchase record, plan, and checkout email.
• Audio files you upload for previews and radio samples are stored in private storage and served only through signed, time-limited links.

• Passwords are hashed before storage; we can never see or recover your plain-text password.
• Every artist's releases, campaigns, promo assets, and play data are isolated by row-level access rules. You see only your own records, and admins are restricted to support and moderation duties.
• Third-party connections (Spotify, Apple Music, Google, Meta) use OAuth: you authorize scoped access, and you can disconnect any account at any time from your dashboard.
• All traffic between your browser and the platform is encrypted in transit with TLS. Secrets and API keys are stored server-side in a managed secret vault, never in client code.
• Admin actions, refunds, and social posts are logged and attributable to the admin account that performed them.

• You can export your account data and catalog at any time from Profile > Account & billing.
• You can permanently delete your account and associated releases from Profile; this removes your records from active views. Some anonymized aggregate metrics may persist in reports.
• You can turn milestone, new-country, daily summary, and broadcast emails on or off in your notification settings, or unsubscribe from any email.
• Disconnecting a social account immediately revokes our ability to post or read from it.
• Contact us anytime from the app or by replying to any account email to exercise your data rights.

• Hosted on managed cloud infrastructure with automatic security patching and monitoring.
• Content Security Policy (CSP) headers across all routes block unauthorized plugins, restrict base-URI injection, and upgrade requests to HTTPS.
• Backend functions run with least-privilege service roles; admin-only operations require an admin-role account.
• Radio licensing requires direct content licensing from the rights holder; we never rebroadcast streaming-service audio.

• You must be at least 16 years old to use AmpliHit. Email and Google registration both check your self-reported date of birth before unlocking account tools. We do not verify government identity documents.
• Registration requires confirming you are at least 16, accepting the Terms of Service, and acknowledging the Privacy Policy. Marketing and publishing permissions remain optional and separate.
• Weekly challenge voting and feedback require sign-in, and voter identities are never displayed publicly. Account-linked identifiers are retained internally for participation limits and moderation.
• Our full Privacy Policy and Terms of Service detail your rights and obligations.

Found a security issue? Please report it responsibly from the Contact page. We investigate every report and act in good faith.

You can permanently delete your account and catalog from Profile at any time. This removes your releases, campaigns, and assets from active views. Some anonymized aggregate play totals may remain in platform-wide reports.

Technical Safeguards, Limits & Verification Examples

Every sensitive workflow on AmpliHit enforces server-side verification rather than trusting browser parameters:

• Payment & subscription verification: Paid plans (Starter $14.99/mo, Pro $29.99/mo, Promoter $49.00/mo, and annual equivalents) and $50 Pay-to-Pitch orders are resolved strictly from server-side catalog pricing. Webhook fulfillment verifies the cryptographic JWT signature, confirms order.status === "APPROVED" and order.paymentStatus === "PAID", and checks an exact decimal match of the charged amount and currency before granting plan access.
• Signed private storage limits: End-user audio uploads, press kits, and 12-second AI Studio video exports are stored as private file URIs and served through time-limited signed URLs (300-second default expiration) so unpublished files cannot be scraped.
• OAuth scope boundaries & bounce monitoring: Connected Gmail, YouTube, Instagram Business, and Facebook Page tokens use scoped OAuth grants stored server-side. Automated mailer-daemon bounce parsing updates only the artist's own curator target records so a bounced email address is never re-sent in future outreach waves.