How rekōdo handles your information.

rekōdo is operated by Rekodo Music(ABN 22 405 469 880) (“rekōdo”, “we”, “us”, “our”), based in Australia. This policy explains how we collect, use, store, and disclose personal information when you use rekōdo at rekodo.co (the “Service”).

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Contact for privacy matters: hello@rekodo.co

Information you provide directly

• Account details: email address, display name, password (hashed — never stored in plain text)
• Profile information you choose to add: bio, city-level location, profile photo, star sign
• Content you create: Lists, Feeling tags, Memory field entries, Essential toggles, written notes on records

Information from connected services

When you connect third-party accounts, we receive:

We store Discogs collection data in our own database upon import. This means your collection data remains available to you even if Discogs access is later interrupted — see §5.

Information collected automatically

• Usage data: pages viewed, features used, session duration
• Device/browser information, IP address (security and fraud prevention)
• Cookies — see §9

We use your information to:

• Provide the Service: sync and display your collection, generate Lists, power Dig recommendations
• Generate personalised features: Jungian Archetypes, Taste Profiles, Cross-Signal Insights, Deep Dive artist content
• Process payments for Supporter subscriptions
• Send transactional emails (account, billing) and, where you’ve opted in, marketing emails
• Maintain and improve the Service, including security and fraud prevention
• Comply with legal obligations

On personalised content:Archetypes, Taste Profiles, Spectrum Dimensions, and Cross-Signal Insights are generated using automated systems based on your collection metadata (artist, title, genre, year) and Feeling tags you’ve applied. Taste Profile generation also uses your self-reported star sign, if provided, to flavour recommendations. We do not send your name, email, username, account ID, or written Memory field notes to Claude for any of these features. These outputs are interpretive and for entertainment/informational purposes. They are not professional psychological assessment, financial advice, or a guarantee of market value. See the Terms of Service for further disclaimers.

We disclose personal information to the following categories of third parties, only as needed to provide the Service:

We do not sell your personal information. We do not share your collection data with advertisers.

Cross-border disclosure:Some recipients above store or process data outside Australia, primarily the United States. Where required under APP 8, we take reasonable steps to ensure overseas recipients handle your information consistently with the APPs, including relying on these providers’ own data protection commitments and standard contractual terms.

rekōdo connects to Discogs via OAuth, with your authorisation, to read your collection. Under Discogs’ API terms, we may cache your collection data only for as long as necessary to provide our service to you. By connecting your Discogs account, you consent to rekōdo storing a copy of your collection data in our database for the ongoing purpose of providing the Service — including displaying your collection, generating Lists, Archetypes, and recommendations, and allowing the Service to continue functioning even if your Discogs connection is later interrupted.

If you disconnect your Discogs account or delete your rekōdo account, see §7.

We take reasonable technical and organisational measures to protect your information, including encryption in transit, access controls on our database, and hashed password storage. No system is completely secure, and we cannot guarantee absolute security.

• We retain your account and collection data for as long as your account is active.
• You can delete individual records, Lists, or other content at any time within the Service.
• You can request full account deletion by contacting hello@rekodo.co. On deletion, we will:
  • Delete your stored collection data, Lists, profile, and AI-generated content from our active database within 30 days
  • Revoke stored OAuth tokens for Discogs and Spotify
  • Retain minimal billing records as required by Australian tax law (generally 5 years), where you held a paid subscription
• Backups may persist for a limited period after deletion before being purged in the normal backup rotation cycle.

Under the Privacy Act 1988 and the APPs, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Make a complaint about how we’ve handled your information

To exercise these rights, contact us at hello@rekodo.co. We will respond within a reasonable period, generally 30 days.

If you’re not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We use cookies and similar technologies for:

• Authentication (keeping you logged in)
• Essential site functionality
• Analytics — [Analytics tool to be confirmed]

You can control cookies through your browser settings, though disabling essential cookies may affect Service functionality.

rekōdo is not directed at, and we do not knowingly collect personal information from, anyone under 16. If you believe a child has provided us with personal information, contact us at hello@rekodo.co and we will delete it.

We may update this policy from time to time. We’ll notify you of material changes via email or an in-Service notice. Continued use of rekōdo after changes take effect constitutes acceptance.

Rekodo Music
ABN 22 405 469 880
hello@rekodo.co
Australia