ARS™ — ARTIST REVENUE SYSTEM™

PRIVACY POLICY

Last updated: July 26, 2026 Website: wepowerars.com

This Privacy Policy describes how ZenFrog AI ("Company," "we," "us," or "our") collects, uses, and protects information through the ARS™ (Artist Revenue System™) platform at wepowerars.com (the "Service").

1. INFORMATION WE COLLECT

1.1 Information You Provide:

• Account information: name, email address, password
• Profile information: stage name, bio, city, genre, social media links, profile photo
• Payment information: processed through Stripe™; we do not store your full credit card number
• Content: music, images, merch designs, posts, event details
• Communications: messages sent through the AI Manager, support requests

1.2 Information Collected from Fans:

When fans interact with an Artist's Storefront, the Artist may collect:

• Name, email address, phone number, city
• Purchase history and event attendance

This data is collected on behalf of the Artist (who is the data controller). We act as a data processor. See Section 5 for details.

1.3 Information Collected Automatically:

• Anonymous page view analytics (visitor ID, session, path, referrer, user agent hint)
• Device type and browser information
• IP address (used for security, not stored long-term for tracking)

We do NOT use third-party tracking cookies, advertising pixels, or cross-site tracking.

2. HOW WE USE INFORMATION

2.1 To operate and improve the Service:

• Authenticate your account
• Display your Storefront and content
• Process transactions through connected payment providers
• Provide AI-powered features (Manager, Hustle Plan, Caption Writer) using your account data
• Send you Service-related notifications (billing, security, feature updates)

2.2 To protect the Service:

• Detect and prevent fraud, abuse, and security incidents
• Enforce our Terms of Service
• Rate-limit API and form submissions

2.3 We do NOT:

• Sell your personal information to third parties
• Share your data with advertisers
• Use your Content or fan data for our own marketing
• Train AI models on your Content without your explicit consent

3. AI DATA PROCESSING

3.1 The AI Manager, Hustle Plan, and Caption Writer features send your account data (fan count, revenue figures, release history) to Google Gemini through a secure server-side connection to generate personalized advice and content.

3.2 This data is sent in real-time for each request and is not stored by the AI provider beyond the duration of the request, per Google's API data processing terms.

3.3 AI conversations and generated content are stored in your account for your reference and are subject to the same data protection as all other account data.

4. DATA SHARING

We share your information only in these circumstances:

4.1 With your connected services: When you connect Stripe™, Printify™, Gelato™, Gooten™, or other third-party services, we share the minimum data necessary to operate those integrations (e.g., shipping addresses for fulfillment orders). These services are governed by their own privacy policies.

4.2 With service providers: We use Supabase for database hosting and authentication. Your data is stored on Supabase's infrastructure and is subject to their security practices and data processing agreement.

4.3 As required by law: We may disclose information in response to valid legal process (subpoena, court order) or to protect the rights, safety, or property of the Company or others.

4.4 In a business transfer: If ZenFrog AI is acquired or merged, your data may transfer to the new entity, who will be bound by this Privacy Policy.

5. FAN DATA — ARTIST RESPONSIBILITY

5.1 Artists using ARS™ are data controllers for the fan data they collect through their Storefronts. ARS™ acts as a data processor, processing fan data only as directed by the Artist through the Service.

5.2 Artists are responsible for:

• Providing fans with notice about data collection (we recommend including a privacy notice on your Storefront)
• Complying with CAN-SPAM, GDPR (if applicable), CCPA (if applicable), and other data protection laws when communicating with fans
• Responding to fan requests to access, correct, or delete their data
• Not sharing fan data with third parties without fan consent

5.3 If we receive a data access or deletion request from a fan regarding an Artist's data, we will forward the request to the relevant Artist and assist in fulfilling it.

6. DATA SECURITY

6.1 We implement reasonable technical and organizational measures to protect your data, including:

• Encryption in transit (TLS/HTTPS)
• Row-Level Security (RLS) on all database tables ensuring users can only access their own data
• Server-side authentication and authorization on all sensitive operations
• Encrypted storage of third-party API keys
• No client-side exposure of sensitive credentials

6.2 No method of transmission or storage is 100% secure. We cannot guarantee absolute security but will notify affected users promptly in the event of a data breach.

7. DATA RETENTION

7.1 We retain your account data for as long as your account is active.

7.2 Upon account deletion, we will delete your personal data, Content, and fan data within 30 days, except:

• Transaction records required for tax or legal purposes (retained for up to 7 years)
• Anonymized analytics data (which cannot identify you)
• Data we are required to retain by law

7.3 You may export your data (including fan lists) at any time from your account dashboard.

8. YOUR RIGHTS

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Object to certain processing
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at the email address below. We will respond within 30 days.

9. CHILDREN'S PRIVACY

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has created an account, we will delete it promptly.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. Your continued use after the effective date constitutes acceptance.

11. CONTACT

For privacy questions or data requests:

ZenFrog AI Email: support@wepowerars.com Website: wepowerars.com