Privacy policy

1. Who this policy is for

CrateSphere is an Australian registered business name operated by an individual ABN holder (ABN 69 229 932 880).

This policy applies to cratesphere.org, demo enquiries, and communications with prospective and current customers. It is written for record labels of every size, their staff and invited collaborators.

A self-hosted CrateSphere installation is operated by the customer in the environment the customer chooses. CrateSphere does not receive or operate the label's database, storage, project material, user accounts or credential vault merely because the software is self-hosted. The customer remains responsible for personal information and project material held in that installation.

2. Information we may collect

We collect only information reasonably needed to run the website and respond to an enquiry or demo request.

• Contact information, such as a name, work email address, label or organisation, role and message supplied in a form or email.
• Correspondence, support requests, feedback and information you choose to provide during a demonstration or product discussion.
• Basic website and security information, such as browser, device, IP address, referring page and error information, where supplied by our hosting or security providers.
• Account and access information only where CrateSphere itself provisions an invited account for a demonstration or future managed service. Self-hosted label accounts remain in the label-operated installation.

3. Self-hosted installations and the iOS companion

A self-hosted portal does not automatically report its customer data to CrateSphere. The iOS companion connects directly to the label's verified portal address. Its session credentials are held in the device Keychain; it can cache only server-authorised AAC/M4A preview derivatives locally for offline listening, not source masters or storage keys.

The app has an optional Cloud discovery path for cloud-configured builds. That is not used to connect to a self-hosted portal. Before a managed cloud service is live, its specific collection, processing and retention arrangements will be published.

4. How we use information

We use personal information to respond to requests, arrange and run demonstrations, provide support, protect the website and service, improve CrateSphere, and meet legal obligations. We do not sell personal information or use it for unrelated advertising.

5. Service providers and overseas handling

We may use carefully selected providers for website hosting, email, analytics, security and support. Those providers may handle information outside Australia. Source distribution and source updates do not give CrateSphere access to a self-hosted label installation; any account relationship with a code-hosting provider is governed by that provider's own terms and privacy information. Before a hosted CrateSphere service is offered, the relevant service agreement will identify the applicable hosting and processing arrangements. Self-hosted customers choose and control their own infrastructure and service providers.

6. Security and retention

We use reasonable technical and organisational safeguards appropriate to the information we hold. No internet transmission or storage system is completely secure, so please do not send passwords, production credentials or sensitive catalogue material in a website enquiry.

We keep enquiry and support information only for as long as reasonably needed for the purposes above, to meet legal obligations or resolve a dispute. We then delete or de-identify it where practical.

7. Access, correction and complaints

You may request access to, or correction of, personal information we hold about you by emailing admin@cratesphere.org. We may need to verify your identity and will explain if a legal exception applies.

If you have a privacy concern, contact us first at admin@cratesphere.org. We aim to acknowledge and investigate concerns promptly. If a matter cannot be resolved, you may contact the Office of the Australian Information Commissioner.

8. Changes and contact

We may update this policy as CrateSphere develops. The current version will be published at this address with its update date. For privacy questions, email admin@cratesphere.org.