Effective October 13, 2026. Last updated October 13, 2026.
1. Who we are and what this covers
Liso.xyz, Inc. (“Liso”, “we”, “us”) is a Delaware corporation at 6203 San Ignacio Ave., Ste 110, San Jose, CA 95119, USA. We are the controller of the personal information described here.
This policy covers liso.xyz, app.liso.xyz, gig.liso.xyz, our emails and our forms (together, the “Services”). Job applicants are covered by our separate Applicant Privacy Notice.
Liso is in an invite-only pilot for people aged 18 and older. Contact us at privacy@liso.xyz.
2. Summary
- We collect what you give us, a small amount of technical data, and public professional information about working artists.
- We use AI to help draft artist pages and suggest opportunities. A person reviews before anything is published or shared with a business.
- We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not run targeted ads.
- You can access, correct, download or delete your information, and object to how we use it, wherever you live.
- Liso is for adults. We do not knowingly collect personal information from anyone under 18.
3. Information we collect
Information you give us
- Waitlist: name, email, website or social link, the role you pick (for example artist or industry professional), confirmation that you are 18 or older, and your email preferences.
- Account: name and stage name, email, birth year and an 18+ confirmation (never your full date of birth), role, the links you give us to identify you (such as Spotify, YouTube or your website), profile content, uploaded press kits and media, the rates and availability you choose to state, and the people you authorize to help you (helpers and team members).
- Following an artist: email, an optional name or handle, the artist you follow, your 18+ confirmation, and whether you allow the artist to see your name or handle.
- Investor inquiries: name, email, optional phone, and your website or LinkedIn link.
- Messages to us: whatever you choose to include.
Information collected automatically
We collect IP address, device and browser type, pages viewed, and dates and times of access. Our sites use strictly necessary cookies to run and to remember your cookie choices. We use analytics cookies only where the law allows, or with your consent where it is required.
In the app, we record which steps you complete (for example, finishing onboarding or publishing a page) and technical error reports, so we can find and fix problems. We do not record your screen or keystrokes.
Information from public sources and services you connect
- Public sources. To help working artists, we gather publicly available professional information about them: stage name, genres, releases, performances, press coverage, official links, and images we are licensed to use. We use public sources such as official artist websites, streaming services, music databases and press. Section 6 explains these artist pages.
- Connected services. If you connect a service (for example Spotify or YouTube), we receive the profile and catalog information that the service shares with your permission.
What we never collect: full dates of birth, government ID numbers, precise location, or home addresses. We also never collect the personal phone number, personal email or family details of artists we find in public sources.
4. How we use information, and our legal bases
| Purpose | Examples | Legal basis (EEA/UK) |
|---|---|---|
| Provide the Services | Accounts, profiles, press kits, opportunities, helpers | Contract |
| Keep Liso adults-only and safe | 18+ check, fraud and abuse prevention, security logs | Legal obligation; legitimate interests |
| Artist pages from public sources | Draft pages, wiki pages, contacting the artist to claim or correct | Legitimate interests (helping artists be found and offered work), limited as described in Section 6 |
| Followers | Telling you when an artist joins; showing the artist who is waiting, if you allow it | Consent |
| Email updates | Waitlist news and product updates | Consent (you can unsubscribe at any time) |
| Improve Liso | Fixing bugs; understanding which features are used, in aggregated or de-identified form | Legitimate interests |
| Legal | Responding to lawful requests; enforcing our Terms | Legal obligation; legitimate interests |
5. AI and automated processing
We use AI tools to find public information, draft profiles and press kits, and suggest which artists may fit an opportunity. Every draft is shown to the artist before it becomes theirs. A person at Liso reviews each page before it is shown to members, and each shortlist before it reaches a business.
We do not use automated processing alone to make decisions that have legal or similarly significant effects on you. Our AI providers process data on our instructions. Under our agreements with them, they may not use your information to train their general models.
6. Artist pages built from public sources
Liso may create a page about a working musician who has not joined yet. These pages:
- show only cited, professional, public facts and licensed images;
- are visible only to signed-in Liso members and are hidden from search engines (a shared link shows anyone only the artist’s name and a Follow button);
- never show a date of birth, age, family details, home or precise location, personal contact details or fees;
- are created only for artists based in the United States, and never for anyone we believe may be under 18.
We tell the artist, usually by email to a professional contact address, within one month of creating the page. That email says where the information came from and how to claim, correct or remove the page.
Anyone can ask us to correct or remove a page at liso.xyz/remove, or by writing to privacy@liso.xyz, without an account. We complete removals within 10 business days. Afterwards we keep only the minimum record needed to avoid re-creating the page.
7. How we share information
- Service providers, under contracts that limit them to providing services to us:
- Vercel and Hostinger (hosting)
- Supabase (database, hosted in the United States)
- Google Workspace (email)
- Kit (waitlist and email updates)
- our AI model providers (currently Anthropic and OpenAI; we may also run open-source models on servers we control, in which case your data does not leave our systems)
- Cloudflare (network, video and website analytics without cookies)
- PostHog (product analytics: which steps of the app people complete)
- Sentry (error monitoring)
- Artists you follow: your name or handle, only if you allowed it when following.
- Businesses on Liso: artist profile information, only when the artist is included in a shortlist that a person at Liso has reviewed.
- Helpers and team members that an artist authorizes.
- Legal and safety: to comply with the law, respond to lawful requests, or protect people’s rights and safety.
- Business transfers: a merger, acquisition or sale of assets, subject to this policy.
We do not sell personal information, and we have not sold it in the past 12 months. We do not “share” it for cross-context behavioral advertising, as California law defines that term. We do not disclose personal information to third parties for their own direct marketing.
8. How long we keep information
| Information | Kept for |
|---|---|
| Waitlist and email updates | Until you unsubscribe, or 24 months after our last contact with you |
| Account information | While your account is open, plus 30 days after you delete it. Backups roll off within 35 days. |
| Rejected research and raw research files | No more than 30 days |
| Research that never becomes a page | No more than 120 days |
| Artist pages from public sources | Until claimed or removed. If unclaimed after 120 days, removed unless it has followers. |
| Follows | Until you unfollow or the page is removed |
| Investor inquiries | 3 years after our last contact |
| Security logs | 90 days |
We keep information longer only when the law requires it.
9. Your rights and choices
Wherever you live, you can ask us to:
- tell you what we hold and give you a copy;
- correct it;
- delete it;
- give it to you in a portable format;
- stop using it for a purpose you object to;
- withdraw a consent you gave.
To make a request, use your account settings or email privacy@liso.xyz. We will verify your request using information we already hold, usually by email. You can use an authorized agent; we may ask the agent for proof of authority.
We answer within 30 days, or within 45 days where California law allows, and will tell you if we need more time. If we decline a request, you can appeal by replying to our answer. We will not treat you differently for using these rights.
Every marketing email has an unsubscribe link.
10. California residents
In the past 12 months we collected these categories of personal information:
- identifiers (name, email, IP address);
- personal information described in Cal. Civ. Code §1798.80 (name, phone if you give one);
- professional information (your music career and public work);
- internet activity (usage on our sites);
- inferences limited to opportunity suggestions.
We collected them from you, from your devices, from public sources and from services you connect, for the purposes in Section 4. We disclosed them to the service providers in Section 7 for business purposes. Section 8 gives our retention periods.
We do not sell or share personal information, so we offer no opt-out link. We do not use or disclose sensitive personal information beyond what the law allows without an opt-out.
We treat a Global Privacy Control signal as a request to opt out of any optional cookies. We do not otherwise respond to Do Not Track signals.
11. Users in the EEA, UK and Switzerland
Liso.xyz, Inc. is the controller. Our legal bases are listed in Section 4. Our service providers process data in the United States. Transfers rely on the EU–U.S. Data Privacy Framework (where the provider is certified) or on the European Commission’s standard contractual clauses.
You can complain to your local data protection authority. We would ask you to contact us first so we can try to help.
12. Children
Liso is only for people aged 18 and older. We do not knowingly collect personal information from anyone under 18.
If we learn we have, we delete it. If our research suggests a person may be under 18, we do not create a page about them, we do not contact them, and we delete the research.
To report a concern, email privacy@liso.xyz.
13. Security
We protect information with encryption in transit, access controls based on least privilege, row-level security in our database, and audit logs. No system is perfectly secure. If a breach affects you, we will notify you as the law requires.
14. Changes
We will post any change here and update the date above. For material changes, we will tell you by email or in the app at least 30 days before they take effect.
15. Contact
Liso.xyz, Inc., Attn: Privacy, 6203 San Ignacio Ave., Ste 110, San Jose, CA 95119, USA. Email: privacy@liso.xyz.
