shh.. is an AI-powered music management platform operated by shh.. management ApS, Denmark. If you have any questions about this policy or your data, contact us at theis@shh.management.
Account data: When you sign in with Google, we receive your name, email address, and profile picture from Google. This is used to identify your account and is stored securely in our authentication provider (Supabase, hosted in the EU).
Artist profile: Your Spotify artist profile (via the Spotify API), and any information you share during the onboarding interview such as your preferred language, career stage, and goals. Your custom instructions, selected artist, and research summary are stored in our database and linked to your account so they persist across devices.
Messages: The messages you send to the AI management team are logged to improve the product. Each log entry contains your artist name, the message content, and which manager you were talking to.
Ratings: If you use the thumbs up or thumbs down buttons on a response, we store the rating alongside the message and the AI response that prompted it.
Image generation: When you use image generation, the text prompts you create are sent to Google Gemini to generate images. If you upload reference photos, these are sent to Google Gemini and Anthropic for prompt engineering but are not stored on our servers. We log the number of images generated per artist per day for rate limiting purposes.
We use your data solely to provide and improve the shh.. service:
We do not sell your data. We do not use your data to train AI models. We do not share your data with third parties except as described below.
Your account profile (custom instructions, artist selection, and research summary) is stored in our database and persists as long as your account exists. Message logs and ratings are stored in our database and are automatically deleted after 90 days. Image generation logs (artist name, date, count) are stored for rate limiting and are automatically deleted after 90 days. Reference photos you upload are sent directly to the AI providers and are never stored on our servers.
Under GDPR, you have the right to access, correct, or delete your personal data. You can:
shh.. does not use tracking cookies or third-party analytics scripts. We use your browser's localStorage to store your session between visits. Supabase Auth uses localStorage to manage your authentication session. These are strictly necessary for the service to function and do not require your consent.
We may update this policy as the service evolves. We will update the "last updated" date at the top when we do. Continued use of shh.. after changes constitutes acceptance of the updated policy.
shh.. management ApS
theis@shh.management