Privacy Policy

This Privacy Policy ("Policy") describes how House of Bobs Ventures LLP ("Veek", "we", "us", or "our") collects, uses, stores, and protects your personal data when you use our platform, including our website, mobile applications, and related services (collectively, the "Platform"). By accessing or using the Platform, you consent to the practices described in this Policy.

Veek is committed to protecting your privacy and handling your personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act, 2023") and other applicable data protection laws. We also align our practices with GDPR principles where applicable.

1. Our Role as Data Fiduciary

2. Information We Collect

2.1 Listener Account Data

2.2 Artist Account Data

2.3 Content Data

2.4 User-Generated Platform Data

• Playlists
• Likes, follows, shares
• Search queries
• Comments or feedback (if enabled)

2.5 Profile Pictures

3. Analytics and Telemetry Data

Veek uses analytics tools to understand platform usage, improve performance, detect abuse, and support monetization integrity.

3.0 Analytics and Diagnostics Tools We Use

We use the following third-party analytics and crash-reporting services, each acting as a processor on Veek's behalf:

• Google Analytics 4 (GA4) — Used on the Veek website (veek.in) to measure page views, traffic sources, and user engagement. Google Analytics uses cookies (_ga, _gid) and transmits data to Google servers. For more information, see Google's Privacy Policy.
• PostHog — Used in the Veek mobile and web applications for product analytics, feature usage tracking, and session analysis. PostHog data is processed on PostHog's EU cloud infrastructure (eu.i.posthog.com). PostHog also derives approximate location (country, region, and city) from your IP address — this is coarse, IP-based location only and is not GPS or precise location. For more information, see PostHog's Privacy Policy.
• Sentry — Used for crash reporting and error monitoring in the Veek mobile and web applications. Sentry collects crash logs, error traces, and basic device/OS information to help us diagnose and fix stability issues. For more information, see Sentry's Privacy Policy.

These services may collect IP addresses, device identifiers, browser/app information, and interaction data. We configure these tools to minimise the collection of personally identifiable information where possible (e.g., IP anonymisation in GA4). We do not sell this data or use it for third-party advertising.

3.1 Event and Interaction Data

• Song plays, pauses, skips, replays
• Playlist additions and removals
• Likes, follows, unfollows
• Search queries
• Page views and screen views
• Session duration and navigation paths
• Artist profile visits
• Content upload and publishing actions

3.2 Technical and Device Data

• IP address (used for security and fraud detection)
• Approximate location — country, region, and city derived from your IP address (coarse, IP-based only; not GPS or precise location)
• Device type (mobile/desktop)
• Operating system
• Browser type and version
• App version
• Language and locale settings
• Time zone

3.3 System and Diagnostic Data

• Error logs
• Performance metrics
• Latency and crash reports
• Fraud and abuse signals (e.g., unusual playback patterns)

4. How We Use Your Information

We process your data for the following purposes:

• Platform functionality: To provide, maintain, and improve the Platform and its features
• Account management: To create and manage your account, authenticate your identity, and process transactions
• Content delivery: To display and distribute music content to users
• Personalization: To provide personalized recommendations and content discovery
• Payment processing: To facilitate tips, payouts, and other financial transactions
• Communication: To send you service-related notices, updates, and promotional communications
• Security: To detect, prevent, and address fraud, abuse, and security issues
• Legal compliance: To comply with applicable laws, regulations, and legal processes
• Analytics: To understand how the Platform is used and improve our services
• Research: To conduct aggregate analysis and research for product improvement

Important: Veek does not sell personal data or use analytics data for third-party advertising unrelated to the Platform.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: Where you have provided explicit consent for specific processing activities
• Contract: Where processing is necessary for the performance of our Terms of Service
• Legal obligation: Where we are required to process data to comply with applicable laws
• Legitimate interests: Where processing is necessary for our legitimate business interests, such as fraud prevention and platform security

6. Data Storage and Security

7. Data Retention and Account Deletion

We retain data based on category and legal necessity:

• Account data: Retained while your account is active
• Artist financial and KYC data: Retained for statutory periods (e.g., 7 years) as required by Indian tax and accounting laws
• Analytics data: Retained in aggregated or anonymized form for long-term analysis
• Deleted accounts: Public content removed within 30 days, subject to legal or technical constraints

7.1 How to Delete Your Account

You can request deletion of your account and its associated data in either of the following ways:

• In the app: Use the account deletion option in your Veek account settings, which submits your request to us.
• By email: Email senditbob@veek.in from your registered email address.

Upon a valid request, we delete your account and associated activity and data (including comments, playlists, follows, and — for artists — uploaded content) within 30 days, except where we are required to retain certain records (such as financial, tax, and KYC records) for the statutory periods described above, or where retention is necessary to comply with law, resolve disputes, or prevent fraud and abuse.

8. Data Sharing and Disclosure

We may share your personal data with the following categories of recipients. The named service providers below act as processors on Veek's behalf — we do not sell your data to advertisers or data brokers:

• Infrastructure & storage: Supabase (authentication and database) and Amazon Web Services — AWS S3 & CloudFront (media storage and delivery)
• Payment processing: Razorpay, an RBI-authorised payment aggregator, for processing tips and payouts
• Analytics: Google (Google Analytics 4) for website analytics and PostHog for in-app product analytics
• Crash reporting & diagnostics: Sentry for error monitoring and crash reporting
• Legal authorities: When required by law, court order, or governmental authority
• Business transfers: In connection with any merger, acquisition, or sale of assets

We require all third parties to respect the security of your data and to treat it in accordance with applicable law.

9. Your Rights

Under the DPDP Act, 2023 and GDPR principles, you have the following rights:

• Right to Access: Request access to your personal data and information about how it is processed
• Right to Correction: Request correction or updates to inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data, subject to legal obligations
• Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent
• Right to Grievance Redressal: Raise grievances with our designated Grievance Officer
• Right to Nominate: Nominate another individual to exercise your rights in case of your death or incapacity

To exercise any of these rights, please contact our Grievance Officer at senditbob@veek.in. We will respond to your request within the timelines prescribed under applicable law.

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India as established under Section 18 of the Digital Personal Data Protection Act, 2023.

10. Anonymization and Aggregation

Where reasonably feasible:

• Analytics data is aggregated, anonymized, or pseudonymized
• Direct identification of individual users is avoided
• Personal identifiers are used only when required for security, fraud detection, legal compliance, or payment and account integrity

11. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children under 18. If you become aware that a child has provided us with personal data, please contact us at senditbob@veek.in, and we will take steps to delete such information.

12. International Data Transfers

While Veek primarily operates in India, your data may be processed in other jurisdictions where our service providers are located. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on the Platform and updating the "Effective Date" at the top of this page. Your continued use of the Platform after such changes constitutes your acceptance of the revised Policy.

14. Contact Us