Legal · Data Protection
Privacy Policy
Last updated: June 17, 2026
Starship No. 27, LLC (“Starship,” “we,” “us”) operates an integrated technology stack for music, AI orchestration, and creative infrastructure. This policy explains what we collect, why we collect it, and how we protect it across our properties.
Information We Collect
Account & authentication. When you sign in to LYRA Core, VanguardOS, or operator tools, we store account identifiers, role assignments, session tokens, and login timestamps. Operator accounts may include name, email, and organization affiliation.
Spotify (presave & smart links). If you authorize Spotify through our Release Hub, we receive limited profile data permitted by Spotify’s OAuth scope — typically your Spotify user ID and display name — to add releases to your library at your request. We do not receive your Spotify password.
Email & communications. Presave campaigns, newsletter sign-ups, demo submissions, and LYRA Inbox may collect email addresses, message content, attachments metadata, and delivery status. Operator mailboxes process messages you send or receive through connected email infrastructure.
Usage & campaign data. Presave and referral flows may record page visits, referral codes, approximate geography (country/region from IP), device/browser type, and conversion events to measure campaign performance and prevent abuse.
Creative & AI inputs. MikuOS ImageGen, Song Forge, Nexus, and agent tools may process prompts, lyrics, audio uploads, and generated outputs you submit. These may be stored in operator vaults, galleries, or audit logs tied to your account.
Blockchain & settlements. Where LyraLedger or LYRA token features are enabled, we may process wallet addresses, transaction hashes, and settlement records. We do not custody private keys.
Technical logs. Servers record IP addresses, request paths, error traces, and security events for reliability, fraud prevention, and N27 M2M agent mesh integrity.
How We Use Information
- Deliver presaves, smart links, catalog, and release operations you request
- Operate LYRA Core, VanguardOS, MikuOS tooling, and multi-agent orchestration
- Send transactional email (presave confirmations, operator notifications, security alerts)
- Improve SEO, analytics, and platform reliability
- Process AI-assisted creative workflows you initiate
- Enforce rate limits, access tiers, and abuse prevention (including governor policies)
- Comply with legal obligations and respond to lawful requests
Third-Party Services
We integrate with service providers that process data on our behalf, including but not limited to:
- Spotify — OAuth and library actions for presaves
- Email providers — SMTP/IMAP delivery and inbox sync
- AI inference providers — e.g. OpenRouter, Google Gemini, OpenAI, Replicate, Stability, Pollinations, ElevenLabs (when configured) for generation and assist features
- Hosting & infrastructure — cPanel, CloudLinux Passenger, CDN/DNS providers
- Analytics — e.g. Google Analytics on public music properties
- Blockchain networks — Base, Arbitrum, or other chains for settlement features
Each provider operates under its own privacy terms. We share only what is necessary to perform the requested service.
Cookies & Sessions
We use session cookies and similar technologies to keep you signed in across .starshipno27.com subdomains where configured, remember preferences, and protect against cross-site request forgery. You can disable cookies in your browser, but authenticated features may not function.
Data Retention
We retain data for as long as needed to provide services, meet legal requirements, resolve disputes, and maintain audit trails for publishing and royalty operations. Preview assets (e.g. ImageGen previews) may expire automatically. You may request deletion of certain account-linked data by contacting us.
Security
We apply industry-standard measures including HTTPS, role-based access, encrypted messaging modules where enabled, signed N27 M2M agent payloads, and operator-only admin surfaces. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.
Children
Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13.
Your Choices
- Revoke Spotify access anytime via your Spotify account settings
- Opt out of non-essential marketing email via unsubscribe links where provided
- Request access, correction, or deletion of personal data by emailing us (subject to legal retention requirements)
International Users
Starship No. 27 is based in the United States. If you access our services from other regions, your information may be processed in the U.S. and other locations where our providers operate.
Changes
We may update this policy as our platform evolves. Material changes will be reflected by updating the “Last updated” date above. Continued use after changes constitutes acceptance.
Contact
Starship No. 27, LLC
Privacy inquiries: privacy@starshipno27.com
General: hello@starshipno27.com