Privacy Policy

1. Who we are

NXXT Network (also referred to as "NXXT Entertainment", "we", "us" or "our") operates the NXXT music and media platform available at nxxtentertainment.com and app.nxxtentertainment.com.

NXXT Network is the data controller for the personal data processed in connection with these services. We are based in the Netherlands and subject to Dutch and European Union data protection law, including the General Data Protection Regulation (GDPR / AVG) and the Dutch Implementation Act (UAVG).

For all data-related enquiries, contact: [email protected]

2. What data we collect

2.1 Account data

When you create an account, we collect:

• Display name and username
• Email address
• Password (stored as a secure hash — we never store plain-text passwords)
• Profile picture and banner image (if you upload one)
• Date of account creation
• Account type (listener, artist, guest)

If you register or sign in using Google, we receive your Google account name and email address from Google. We do not receive your Google password.

2.2 Usage data

We collect data about how you use the platform:

• Tracks you have played, liked or added to playlists
• Artists you follow
• Radio stations you listen to
• Search queries you enter
• Feed interactions (likes, comments, follows)
• Playlist names and contents you create
• Time and duration of listening sessions

2.3 Artist data

If you are an artist on the platform, we additionally collect:

• Music files and metadata you upload (title, genre, artwork, release date)
• Artist biography and social media links
• Stream and radio play counts attributed to your music
• Accumulated revenue balance
• Payout information (bank account or payment details, collected at payout time)

2.4 Technical data

We automatically collect limited technical data when you use the platform:

• IP address (used for region detection and security purposes)
• Browser type and version
• Device type (mobile, desktop)
• Operating system
• Errors and crash reports (via Sentry — see section 5)
• Approximate country of origin (derived from IP address)

We do not create detailed fingerprints or track you across other websites.

2.5 Payment data

Subscription payments are handled by our third-party payment processor. We do not store full card numbers or sensitive payment credentials on our servers. We retain a payment reference, subscription status and billing history.

3. How we use your data

We do not use your data for automated profiling that produces legal or similarly significant effects. We do not sell your data to third parties.

4. Legal basis (GDPR Article 6)

For each processing activity, we rely on one of the following legal bases:

• Performance of a contract (Art. 6(1)(b)) — Processing required to deliver the service you signed up for: account management, streaming, artist revenue, playlists.
• Legitimate interests (Art. 6(1)(f)) — Security monitoring, fraud prevention, platform analytics and service improvement, where these interests are not overridden by your rights.
• Consent (Art. 6(1)(a)) — Push notifications and marketing communications, where we explicitly ask for your permission. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)) — Data retention required by Dutch tax law, accounting regulations or a court order.

5. Who we share data with

We only share data with third parties where necessary to operate the platform:

All third-party processors are bound by data processing agreements (DPAs) and may only process your data as instructed by us. We do not share your data with advertisers or data brokers.

We may disclose data if required by law, a court order, or to protect the rights and safety of users or third parties.

6. How long we keep data

7. Your rights under GDPR

Under the General Data Protection Regulation, you have the following rights:

• Right of access (Art. 15) — You can request a copy of the personal data we hold about you.
• Right to rectification (Art. 16) — You can ask us to correct inaccurate data.
• Right to erasure (Art. 17) — You can ask us to delete your data ("right to be forgotten"), subject to legal retention obligations.
• Right to restriction (Art. 18) — You can ask us to limit how we process your data in certain circumstances.
• Right to data portability (Art. 20) — You can request your data in a structured, machine-readable format.
• Right to object (Art. 21) — You can object to processing based on legitimate interests, including profiling.
• Right to withdraw consent — Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

8. Cookies & local storage

The NXXT web app uses browser local storage (not traditional cookies) to store session data on your device, including:

• Your authentication token (to keep you logged in)
• User preferences such as theme, language and volume settings
• Playback state (last played track, position)
• Cached data for offline use (track artwork)

This data is stored only on your device and is not transmitted to third parties. You can clear it at any time by clearing your browser's site data or app storage.

The NXXT marketing website (nxxtentertainment.com) uses only your browser's theme preference stored in local storage. No third-party tracking cookies are placed on the marketing website.

9. International data transfers

Most of your data is processed within the European Economic Area (EEA). Where data is processed outside the EEA (for example, by Google for OAuth services located in the USA), we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• The processor's adherence to the EU-U.S. Data Privacy Framework where applicable

10. Children

The NXXT platform is not directed at children under the age of 16. In the Netherlands, processing the personal data of persons under 16 requires parental or guardian consent (Art. 8 GDPR as implemented in Article 16 UAVG). If you are under 16, please do not use the platform without the explicit consent of a parent or legal guardian.

If we become aware that we have collected data from a child under 16 without verifiable parental consent, we will delete that data promptly. If you believe this has occurred, contact us at [email protected].

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (if you have an account) and update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

12. Contact & complaints

NXXT Network • nxxtentertainment.com • Terms of Service