Privacy Policy.

The Services are operated by OUTERMARK GROUP PTY LTD (ACN 699 247 277), of Level 1, 446 Oxford St, Bondi Junction NSW 2022, Australia. OuterMark operates BeatsToRapOn (BTR) and BTR Music as connected parts of the same music platform ecosystem.

BeatsToRapOn, including beatstorapon.com, is principally the artist, producer, beatmaker, creator, upload, marketplace, creator-tool, event, promotion, and artist-management side of the Services. Participating artists and creators may use BeatsToRapOn to create profiles, submit and manage authorised tracks and media, operate creator tools, participate in marketplace activity, manage monetisation features, and interact with the platform.

BTR Music, including btrmusic.com and the BTR Music mobile application, is principally the consumer and fan-facing side of the Services. Approved and authorised artist content submitted or managed through BeatsToRapOn may be made available through BTR Music for streaming, listening, discovery, search, artist profiles, playlists, recommendations, charts, follows, social activity, Superfan functionality, tips, rewards, sharing, events, notifications, fan engagement, and other supported features.

This Privacy Policy applies to beatstorapon.com, btrmusic.com, the BTR Music iOS application, the BTR Music Android application, related websites, software, creator tools, event tools, marketplace services, streaming and discovery services, audio tools, AI tools, podcasts, APIs, connectors, widgets, analytics, payment flows, artist payout flows, app-store purchases, social functionality, communications, and other Services operated by OuterMark.

This Privacy Policy explains how we collect, use, disclose, store, transfer, retain, secure, and otherwise process information relating to identified or identifiable individuals, including account holders, anonymous BTR Music listeners, artists, creators, fans, buyers, sellers, event organisers, promoters, marketplace users, contributors, claimants, rights holders, and visitors.

Your use of BeatsToRapOn and BTR Music is also governed by our Terms of Service, Payment Terms, and any feature-specific terms that apply.

This Privacy Policy is publicly accessible without an account or login at https://beatstorapon.com/privacy. It may be linked from BeatsToRapOn, BTR Music, the BTR Music mobile application, and applicable Apple App Store and Google Play listings.

1. Information we collect

1.1 Information you provide directly

We may collect information you provide when you create a BeatsToRapOn or BTR Music account, complete an artist or fan profile, upload or submit content, use the BTR Music app, place an order, subscribe to an artist, send a tip, use a creator or AI tool, participate in a transaction, submit an event, report a problem, submit a rights notice, or contact us.

• name, username, email address, phone number, password, account credentials, display name, business name, and contact information;
• artist, creator, fan, or account profile information such as biography, avatar, profile image, artist details, social links, genres, scenes, location, country, portfolio information, public URLs, and creator identity details;
• age and eligibility information, including declared age and any attestation used for age-related features or safety controls;
• artist and creator content submitted through BeatsToRapOn, including tracks, audio, beats, stems, artwork, videos, cover art, metadata, credits, descriptions, tags, event materials, creator files, listings, AI inputs, AI outputs, and related materials;
• BTR Music user-generated content, including direct messages, voice notes, crew information, shared tracks, shared artists, shared events, reports, Superfan materials, Shoutout requests, Shoutout videos, profile materials, and other supported content;
• visual and editorial materials such as profile images, cover artwork, banners, marketplace imagery, event artwork, screenshots, EPK materials, promotional graphics, provenance notes, licences, and source records;
• communications, including messages, comments, reviews, support tickets, complaint correspondence, moderation correspondence, rights notices, counter-notices, dispute information, and related evidence;
• billing, purchases, subscriptions, Superfan transactions, tips, creator earnings, credits, wallet, payout, refund, invoice, dispute, tax, or payment information submitted to us or relevant providers;
• identity, business, tax, sanctions, fraud, KYC, or other compliance information where needed for payouts, marketplace operations, or legal compliance;
• information submitted in surveys, forms, campaigns, promotions, artist features, interviews, events, waitlists, testimonials, or opportunities; and
• copyright, trademark, image-rights, artist-likeness, privacy, publicity, moral-rights, ownership, permission, licence, takedown, and counter-notice evidence submitted to OuterMark.

1.2 Information collected automatically

When you use BeatsToRapOn or BTR Music, we may automatically collect:

• device information such as device type, platform, operating system, browser, language, locale, screen size, app version, BTR Music version, and identifiers used for authentication, deduplication, diagnostics, security, or app functionality;
• network and technical information such as IP address, timestamps, crash data, diagnostics, latency, access logs, server logs, request headers, user-agent strings, and error logs;
• website usage information including pages viewed, buttons clicked, searches, referrals, session behaviour, content interactions, scroll activity, creator-tool activity, and time spent on Services;
• BTR Music activity including app launches, screens viewed, plays, qualified plays, skips, likes, saves, follows, search queries, recommendation impressions, recommendation clicks, deep-link activity, shares, notification opens, and funnel events;
• BTR Music social information including friend requests, friendships, crew memberships, crew broadcasts, shares, share-feedback events, blocking, reporting, and listening-visibility settings;
• BTR Music commerce information such as purchase attempts, app-store receipts, Google Play purchase tokens, product IDs, transaction IDs, amounts, currency, refund status, subscription status, entitlement status, and artist earnings ledger information;
• AI, recommendation, ranking, search, discovery, and moderation interaction information such as prompts, outputs, recommendations, search results, ranking interaction, quality signals, moderation signals, safety signals, fraud signals, and feature settings;
• transaction activity such as purchases, cancellations, payouts, disputes, chargebacks, event views, listings, streams, campaign actions, upload attempts, and workflow completion;
• rights and moderation metadata such as content IDs, file paths, file names, hashes, image URLs, upload dates, removal dates, moderation outcomes, complaint references, evidence records, and enforcement history; and
• cookie IDs, local-storage identifiers, session IDs, push tokens, analytics identifiers, pixel identifiers, and similar identifiers.

1.3 Information from third parties

• Apple and Google authentication services where you use Sign in with Apple or Sign in with Google;
• Apple App Store, StoreKit, Google Play, and Google Play Billing for BTR Music purchases, subscriptions, entitlement verification, renewals, and refunds;
• payment processors, fraud-prevention vendors, payout providers, wallet providers, tax providers, and KYC providers;
• website analytics, advertising, attribution, and measurement providers where used;
• AI/model infrastructure providers, cloud services, transcription providers, content-processing vendors, security providers, moderation services, and technical infrastructure providers;
• video providers used for supported real-time services;
• social, streaming, event, or other external platforms when you link or interact with those platforms through supported functionality;
• artists, rights holders, labels, publishers, managers, agencies, lawyers, photographers, publicists, estates, claimants, or other representatives submitting notices or evidence involving content or users; and
• business partners, event partners, marketplace users, or other users involved in transactions, collaborations, reports, disputes, or other interactions with you.

1.4 Sensitive information

We do not require sensitive personal information unless necessary for a specific feature, verification, payout, compliance process, support issue, moderation matter, legal process, report, safety investigation, or dispute.

Depending on applicable law, sensitive information may include government identifiers, tax information, precise location, health information, racial or ethnic origin, religious beliefs, political opinions, union membership, criminal history, biometric-like verification information, or similar protected categories.

Do not place unnecessary sensitive information in public artist profiles, BTR Music profiles, uploads, metadata, lyrics, prompts, messages, voice notes, reports, marketplace listings, comments, or support tickets.

2. BTR Music mobile-specific data collection

2.1 Anonymous-first onboarding

BTR Music may create an anonymous consumer record on first launch. This record may use a generated anonymous identifier and device-related information used for account continuity, abuse prevention, deduplication, security, analytics, and application operation. No email address, phone number, real name, or password is necessarily required at that stage.

While you use BTR Music anonymously, information stored against the anonymous identifier may include:

• generated consumer or anonymous identifier;
• device platform, BTR Music version, device locale, IP address, request headers, user-agent string, and security logs;
• listening history, plays, skips, likes, follows, scout activity, preferences, search activity, recommendation interactions, and discovery behaviour;
• coarse location-grid information where you grant location permission for a relevant feature;
• event activity and other BTR Music engagement;
• push-token information where notifications are enabled; and
• fraud, rate-limit, moderation, diagnostics, and abuse-prevention signals.

If you later create an account or authenticate an existing account, BTR Music may promote or associate the anonymous record with the authenticated account so supported listening history, preferences, likes, follows, scout information, and settings can be preserved.

2.2 BTR Music sign-up and authentication data

BTR Music may support:

• email and password sign-up or sign-in;
• Sign in with Apple;
• Sign in with Google;
• connection to an existing BeatsToRapOn artist account;
• anonymous bootstrap followed by account promotion; and
• forgot-password and account-recovery functionality.

Authentication information may include email address, password hashes, Apple identity-token claims, Google identity-token claims, BeatsToRapOn artist linkage, session tokens, refresh tokens, device state, IP address, login timestamps, and security records.

2.3 BTR Music analytics and engagement data

OuterMark uses first-party server-side analytics to operate, secure, personalise, debug, and improve BTR Music.

• engagement events;
• play and streaming events;
• search events;
• screen views;
• recommendation impressions and interactions;
• deep-link events;
• share events;
• in-app purchase attempts and purchase events;
• authentication and funnel steps;
• chat metrics;
• notification activity;
• geo-related events where applicable;
• skip activity;
• listening visibility; and
• scene and heat activity.

BTR Music does not currently use Apple IDFA, mobile advertising identifiers, third-party in-app advertising networks, or cross-app mobile tracking identifiers. BTR Music does not currently use mobile application information to track users across third-party apps or websites for advertising purposes.

2.4 BTR Music social and community features

BTR Music may process information connected with friends, crews, broadcasts, shares, share feedback, listening presence, events, direct messages, voice notes, blocks, and reports.

• friend requests sent, received, accepted, cancelled, declined, ignored, or removed;
• friendship records;
• crew names, ownership, membership, membership status, broadcasts, deletion, and leave events;
• shares of tracks, artists, events, Drops, or other supported content;
• share-feedback events when recipients interact with shared content;
• listening presence and recent plays subject to supported privacy settings;
• block records and block-cascade activity;
• reports submitted against users, messages, tracks, events, Shoutouts, Drops, profiles, or other supported surfaces; and
• rate-limit, abuse-prevention, moderation, and safety information.

3. Information from user interactions

3.1 Friends, crews and sharing

Depending on the relevant BTR Music feature, other users may see certain information about you.

• a friend-request recipient may see your username, display name, profile information, avatar, and request;
• accepted friendships may be visible to the participating users;
• crew owners and members may see crew membership information;
• crew broadcasts may identify the sender and relevant shared content;
• share-feedback functionality may tell a sender that a recipient interacted with shared content;
• supported event RSVP information may affect displayed event counts or participant information; and
• message recipients receive messages, supported attachments, voice notes, and sender information.

3.2 Silent decline, block and crew behaviour

Some privacy and safety actions may be intentionally silent.

• declining or ignoring friend requests;
• blocking or unblocking users;
• leaving or removing users from crews;
• soft-deleting chats from your own inbox; or
• changing visibility settings.

Blocking may remove or restrict friendships, direct messages, shares, feedback, crew relationships, listening visibility, or other supported interactions.

3.3 Listening Visibility

BTR Music may provide Listening Visibility controls governing whether supported users can see current or recent listening activity. Available settings may include Everyone, Friends, and No one.

Blocked users do not receive supported listening-presence information through friend or crew surfaces regardless of broader visibility settings.

3.4 No profile-view notification

BTR Music does not currently provide a general “someone viewed your profile” notification. Users should not assume another person will be notified merely because a public profile, artist page, search result, or track page was viewed.

4. Location, camera, microphone, notifications and device permissions

BTR Music requests device permissions only where relevant to supported features. Permissions are controlled by your operating system and may be granted or revoked through your device settings.

4.1 Location

BTR Music may request location access for Scene Around Me, Scene Heat, nearby events, local music discovery, maps, and related location-aware functionality.

• device location is accessed only where operating-system permission has been granted;
• server-side scene features may use coarse grid-based location information;
• raw latitude and longitude are not intentionally exposed through public-facing social surfaces;
• you may revoke location permission through device settings; and
• relevant local discovery functionality may not work without location permission.

IP addresses may still be processed for security, fraud prevention, diagnostics, rate limiting, abuse prevention, and approximate operational context.

4.2 Camera and microphone

BTR Music may request camera and microphone access for supported functionality including Shoutout recording, video creation, voice notes, uploads, or profile-media functionality.

• camera and microphone permissions are controlled by your operating system;
• access is requested for features requiring capture rather than passive background recording;
• voice notes may be stored as user-uploaded audio subject to applicable retention rules;
• Shoutout recordings may be stored for delivery, moderation, support, payment, disputes, and recordkeeping; and
• submitted media may be transcribed, moderated, reviewed, restricted, or rejected for safety or compliance purposes.

4.3 Photos and media library

BTR Music may request photo or media access when you choose to upload a profile picture, cover image, event image, message attachment, Shoutout-related media, or other supported content.

4.4 Push notifications

If you enable BTR Music notifications, OuterMark may store APNS or FCM push tokens associated with the relevant consumer identifier, account, device, platform, app version, and notification settings.

Notifications may include:

• friend requests and friendship activity;
• shares and share-feedback;
• crew activity;
• scene, scout, battle, badge, ranking, or status updates;
• new tracks or activity involving followed artists;
• Superfan or Drop activity;
• Shoutout status;
• purchase, subscription, entitlement, payout, payment, or refund information;
• messages and supported social activity;
• support, moderation, safety, security, or account notices; and
• other BTR Music product notifications you have enabled.

4.5 Background audio and device controls

BTR Music playback may continue in the background and interact with supported operating-system audio controls, Bluetooth devices, headsets, lock-screen controls, route pickers, speakers, or other playback interfaces. OuterMark may process playback, route, session, and audio-control information necessary to provide these functions.

5. Payments, payouts, app-store purchases and financial data

5.1 BeatsToRapOn website and marketplace payments

BeatsToRapOn website and marketplace payments may be processed through third-party payment processors and payout providers. OuterMark may receive payment status, billing metadata, partial payment-method information, fraud signals, payout status, transaction information, invoice information, tax information, compliance information, and chargeback information.

5.2 BTR Music in-app purchases

BTR Music purchases involving digital goods, subscriptions, Tips, Superfan subscriptions, Backer-style features, Drop-related products, Rewards, Shoutouts, and other supported digital functionality may be processed through Apple App Store or Google Play where required.

OuterMark may receive and retain:

• Apple receipts, transaction IDs, original transaction IDs, product identifiers, subscription information, renewal information, expiry information, refund information, and entitlement information;
• Google Play purchase tokens, order IDs, product identifiers, acknowledgement state, subscription state, renewal state, expiry state, refund state, and entitlement information;
• purchase amount, currency, territory, timestamp, platform, BTR Music version, account identifier, and associated ledger information;
• purchase attempts, failures, duplicate-purchase signals, fraud signals, entitlement events, subscription events, and refund events;
• creator earnings ledger entries associated with eligible purchases; and
• records required for support, accounting, tax, audit, app-store review, fraud prevention, disputes, refunds, and legal compliance.

OuterMark does not receive your full Apple or Google payment credentials or full card or banking details for purchases processed entirely by Apple or Google.

5.3 Artist earnings and payouts

Artist earnings may arise from BeatsToRapOn marketplace activity and supported BTR Music monetisation features including eligible Tips, Superfan subscriptions, Backer features, Rewards, Shoutouts, Mobile Streaming Payouts, or other supported mechanisms.

OuterMark may maintain creator ledgers, payout balances, payout status, payment-provider records, refunds, reserves, chargebacks, tax information, and compliance information.

5.4 Coaching and real-time services

Where real-time one-to-one services are provided, relevant booking, payment, device, network, and session information may be processed by OuterMark and the applicable video or communications provider.

6. How we collect information

We may collect information:

• directly from you when you register, upload, publish, purchase, subscribe, tip, message, use tools, report content, submit notices, or contact us;
• automatically through logs, cookies, pixels, server-side events, local storage, APIs, app events, and similar technologies;
• from BTR Music when your device sends app, playback, location-if-granted, notification, analytics, purchase, diagnostic, or social information;
• from BeatsToRapOn when artists submit or manage content, profiles, payments, marketplace activity, rights information, creator tools, or other artist-facing Services;
• from other users who interact with you through friends, messages, shares, reports, transactions, subscriptions, tips, crews, marketplace orders, or other supported functionality;
• from Apple, Google, payment providers, payout providers, tax providers, KYC providers, app stores, and other infrastructure or financial providers;
• from service providers operating hosting, security, media, moderation, AI, analytics, payments, email, notifications, or other technical infrastructure;
• from rights holders, representatives, public sources, legal contacts, or third parties submitting claims, permissions, notices, or evidence; and
• from lawful public or commercial sources relevant to fraud prevention, rights review, creator discovery, marketplace trust, security, or business operations.

7. How we use information

OuterMark may use information to:

• Operate BeatsToRapOn: create artist accounts, operate artist profiles, accept and manage artist uploads, operate creator tools, marketplace listings, events, payments, payouts, creator analytics, moderation, rights handling, and artist monetisation.
• Operate BTR Music: provide streaming, playback, search, recommendations, playlists, artist profiles, follows, social functionality, Superfan services, Tips, Shoutouts, notifications, fan support, discovery, charts, and related consumer functionality.
• Connect the artist and fan sides: publish approved BeatsToRapOn artist content through BTR Music, display relevant artist profiles and metadata, calculate engagement, provide creator analytics, maintain artist-to-fan functionality, operate monetisation, process relevant earnings, and support the connected ecosystem.
• Authenticate users: register accounts, verify Apple and Google identity tokens, link relevant BeatsToRapOn and BTR Music identities, manage sessions, manage refresh tokens, and prevent unauthorised access.
• Process payments and payouts: handle purchases, app-store entitlement verification, subscriptions, Superfan transactions, Tips, wallets, creator earnings, refunds, chargebacks, tax, and payout operations.
• Provide social functionality: operate friends, crews, messages, voice notes, sharing, share feedback, listening visibility, reporting, blocking, and other supported community features.
• Personalise discovery: rank, recommend, search, classify, organise, and suggest artists, tracks, content, events, scenes, marketplace items, and other experiences.
• Secure the Services: detect fraud, bots, artificial activity, abuse, account compromise, payment abuse, spam, rights violations, and other security or platform-integrity risks.
• Moderate content and protect users: review reports, enforce policies, investigate abuse, moderate text, audio, images and video, preserve evidence, support child safety, and handle appeals.
• Communicate with users: send service messages, transaction notices, push notifications, verification emails, security alerts, moderation notices, support communications, policy notices, and marketing where permitted.
• Operate AI and automated systems: develop, test, evaluate, operate, improve, personalise, rank, recommend, moderate, detect fraud, generate analytics, and improve current and future OuterMark systems and products, subject to applicable law.
• Manage rights and copyright: review complaints, takedowns, counter-notices, licensing evidence, permissions, image provenance, artist-likeness issues, and other rights-related matters.
• Analyse and improve the business: measure product usage, debug software, analyse conversions, improve user experience, generate reports, conduct audits, manage vendors, perform accounting, and support business planning.
• Comply with law: meet legal, regulatory, tax, sanctions, safety, law-enforcement, court, payment-provider, app-store, and other compliance obligations.

Where GDPR, UK GDPR, or another legal regime requires a lawful basis for processing, the basis may include contractual necessity, legitimate interests, consent, legal obligations, vital interests, or another lawful basis depending on the relevant processing activity.

8. AI tools, audio tools, moderation and automation

BeatsToRapOn and BTR Music may provide or use AI-powered, machine-learning, audio-processing, moderation, recommendation, transcription, discovery, classification, ranking, fraud-prevention, search, writing, image, video, enhancement, mastering, separation, and related automated functionality.

When you use these functions, OuterMark may process your inputs, uploaded files, outputs, prompts, metadata, settings, technical information, usage information, moderation signals, safety signals, quality information, and error records to provide, secure, monitor, enforce, evaluate, and improve relevant Services.

Processing may include:

• text, transcript, audio, image, or video moderation;
• transcription and safety classification;
• audio enhancement, mastering, cleaning, separation, or other audio processing;
• manual or automated moderation of Shoutouts and other creator media;
• fraud, spam, harassment, impersonation, copyright, child-safety, and abuse detection;
• search, recommendations, rankings, classification, discovery, analytics, and personalisation; and
• evaluation and improvement of OuterMark systems and platform functionality.

Where appropriate, OuterMark may configure service providers to limit their independent use of private User Content for unrelated purposes. Additional notices or feature-specific terms may apply to particular AI or automated Services.

9. Cookies, pixels and similar technologies

BeatsToRapOn, btrmusic.com, and related web Services may use cookies, local storage, web beacons, pixels, server-side events, conversion APIs, identifiers, log files, and similar technologies.

These technologies may support:

• authentication and preferences;
• analytics and performance measurement;
• conversion measurement;
• product improvement and troubleshooting;
• fraud, security, abuse, and bot detection;
• website advertising and attribution where enabled;
• creator or campaign analytics where supported; and
• connection between browser and server-side events.

BTR Music does not currently use Apple IDFA or mobile cross-app advertising identifiers. Website tracking and advertising technologies may differ from BTR Music mobile practices.

10. When we share information

OuterMark may disclose information:

• To service providers supplying cloud hosting, storage, media delivery, analytics, moderation, AI infrastructure, fraud prevention, payments, payouts, tax, identity verification, customer support, email, push notifications, app infrastructure, video services, and related technical services.
• To Apple and Google in connection with BTR Music authentication, app-store purchases, subscriptions, refunds, entitlement handling, push notifications, crash information, app review, and platform compliance.
• To AI and automation providers where they support moderation, transcription, analysis, recommendations, search, ranking, safety, fraud prevention, or other OuterMark functionality.
• To payment and payout providers for payments, refunds, creator payouts, tax, KYC, fraud prevention, and financial compliance.
• To other users where information is public or shared through supported artist profiles, BTR Music profiles, messages, crews, shares, social activity, events, listings, or other user-facing functionality.
• To rights holders and dispute participants where reasonably necessary to investigate or resolve rights, copyright, ownership, moderation, payment, privacy, or platform-integrity matters.
• To child-safety or competent authorities where required or permitted in connection with suspected child exploitation or other serious safety matters.
• For legal and safety purposes in response to law, legal process, regulators, courts, law enforcement, sanctions, tax requirements, platform-provider requirements, or where necessary to protect users, evidence, property, or the Services.
• To professional advisers including lawyers, accountants, auditors, insurers, security advisers, and consultants.
• In corporate transactions involving investment, financing, restructuring, acquisition, merger, due diligence, or sale of assets.
• At your direction or with consent where you expressly request or authorise a disclosure.

We do not sell personal information in the ordinary data-broker sense. Certain privacy laws may nevertheless define some advertising, attribution, analytics, or cookie-based activities as “sale” or “sharing”; where such laws apply, OuterMark will provide legally required choices.

11. Sub-processors and service providers

OuterMark may use service providers and sub-processors across BeatsToRapOn and BTR Music. Providers may change over time.

Where required by applicable law, OuterMark uses contractual, organisational, and technical safeguards intended to require processors to handle personal information for the relevant Services and authorised purposes.

12. Public content and user-generated material

Certain BeatsToRapOn and BTR Music information is public or visible to other users. Public information may include artist profiles, BTR Music profiles, approved tracks, artwork, bios, public listings, events, reviews, charts, rankings, public social interactions, public marketplace materials, and other content intentionally made public.

Public information may be viewed, indexed, quoted, embedded, archived, screenshotted, downloaded where supported, or shared by other people and third-party services.

Approved artist content submitted through BeatsToRapOn may be displayed through BTR Music as part of the ordinary operation of the connected Services. This may include track audio, artist names, cover artwork, profile imagery, bios, credits, metadata, rankings, public engagement information, artist-profile information, and other authorised public-facing materials.

Public content may also appear in search engines, previews, widgets, social cards, charts, recommendations, BTR Music discovery surfaces, OuterMark promotional materials, or compatible external discovery services.

13. Copyright, takedown, moderation and legal records

OuterMark may process information connected with copyright complaints, takedowns, image rights, artist likeness, trademarks, privacy, publicity rights, ownership disputes, moderation reports, child-safety reports, payment disputes, chargebacks, counter-notices, and legal requests involving BeatsToRapOn or BTR Music.

• claimant, rights-holder, uploader, artist, representative, or account contact information;
• BeatsToRapOn and BTR Music URLs, track identifiers, profile identifiers, content identifiers, images, audio URLs, screenshots, metadata, file hashes, upload timestamps, removal timestamps, and provenance information;
• licence records, agreements, releases, source links, ownership evidence, permissions, authority records, correspondence, and supporting material;
• moderation notes, reports, block information, review outcomes, enforcement actions, appeals, counter-notices, fraud signals, safety information, and legal-risk records; and
• other records reasonably required to protect OuterMark, users, artists, creators, fans, and rights holders.

Information may be used to investigate complaints, remove or restore content, preserve evidence, prevent repeat infringement, handle appeals, comply with legal obligations, defend legal claims, enforce Terms, support safety measures, and maintain platform integrity.

14. Data retention

OuterMark retains information for as long as reasonably necessary for the purposes described in this Privacy Policy, including operation of BeatsToRapOn and BTR Music, transaction completion, user support, accounting, tax, fraud prevention, moderation, safety, rights management, legal compliance, dispute resolution, and security.

Account deletion or removal of content does not necessarily require immediate deletion of transaction records, legal records, moderation records, copyright records, security logs, fraud-prevention information, financial records, tax records, backups, aggregated information, de-identified information, derived information, or other records lawfully retained for legitimate purposes.

14.1 Retention exceptions after deletion

• financial and artist earnings ledger information;
• tax and accounting records;
• legal holds and dispute evidence;
• law-enforcement, court, regulator, payment-provider, or app-store-related records;
• aggregated or de-identified analytics;
• fraud and audit logs;
• app-store receipts and purchase information needed for refunds, entitlements, or disputes;
• KYC, tax, sanctions, or payout records where retention is required;
• moderation, reports, safety, child-safety, blocking, and enforcement information; and
• backup copies until applicable backup cycles complete.

15. Account deletion and data deletion

BTR Music users may request deletion of their BTR Music account and associated account data. Where supported, users may initiate deletion inside BTR Music through Settings → Delete Account.

Users may also submit a deletion request from https://beatstorapon.com/delete-mobile-account or contact info@beatstorapon.com.

Following verification, OuterMark will take reasonable steps to delete or de-identify personal information associated with the relevant account from active systems, subject to retention permitted or required by law and the exceptions described in this policy.

15.1 Information deleted or de-identified

• personal profile and authentication information, account-linked preferences, push tokens, and account-linked mobile identifiers, subject to applicable exceptions;
• BTR Music listening history, likes, follows, scout activity, and personalisation information where continued retention is not required; and
• public information removed from the Services where technically and legally feasible, subject to completed transactions, prior sharing, external copies, caches, and retention requirements.

15.2 Information that may be retained

• financial, purchase, payout, tax, app-store, refund, and chargeback records;
• fraud, security, rights, moderation, child-safety, safety, legal, audit, and dispute information; and
• aggregated, de-identified, or derived information that no longer identifies you under applicable law.

15.3 Things to know about deletion

• Deleting BTR Music from your device does not delete your account.
• Deleting your account does not necessarily cancel Apple or Google subscriptions.
• Subscriptions may need to be cancelled through the applicable app-store account.
• If you create a new account later, deleted personalisation and account history may not be recoverable.

OuterMark may verify your identity or account relationship before deleting an account in order to prevent unauthorised deletion.

16. International data transfers

OuterMark operates from Australia and may use service providers operating in Australia, the United States, and other countries. Information processed through BeatsToRapOn or BTR Music may therefore be stored or processed outside your home jurisdiction.

Where required by law, OuterMark may use contractual protections, technical measures, organisational safeguards, standard contractual clauses, data-processing agreements, transfer assessments, or other lawful transfer mechanisms.

17. Your privacy rights and choices

Depending on your jurisdiction, you may have rights to:

• access personal information;
• correct inaccurate information;
• request deletion;
• restrict certain processing;
• object to certain processing;
• request portability where applicable;
• withdraw consent where processing depends on consent;
• opt out of certain advertising, sale, sharing, profiling, or targeted-advertising practices where legally applicable;
• limit use of sensitive personal information where applicable;
• manage BTR Music camera, microphone, photos, notifications, location, and other device permissions;
• manage listening visibility, blocking, friends, crews, and social settings;
• manage marketing preferences where provided; and
• complain to a privacy regulator where applicable.

Privacy rights are subject to applicable exceptions. Exercising a right may not require OuterMark to delete financial records, unwind completed transactions, remove lawful fraud-prevention information, delete legal evidence, reverse prior processing, or erase aggregated or de-identified information.

To exercise applicable rights, use available settings, visit https://beatstorapon.com/delete-mobile-account, or contact us using Section 24.

18. Apple App Store and Google Play privacy disclosures

This section supports privacy disclosures made for the BTR Music mobile application through Apple App Store Connect and Google Play Console.

For absolute clarity: BTR Music is the consumer mobile application operated by OUTERMARK GROUP PTY LTD as part of the same platform ecosystem as BeatsToRapOn. The BTR Music application may display approved and authorised artist content submitted or managed through BeatsToRapOn.

18.1 Apple App Privacy details

For Apple's App Privacy disclosures, BTR Music may collect or process categories including:

• Contact Info: name, email, phone number where supplied, and account contact information.
• Identifiers: account IDs, consumer IDs, anonymous IDs, push tokens, device-related identifiers used for functionality, and app-store transaction identifiers.
• Location: device location where permission is granted, and coarse location information used for supported local discovery functionality.
• User Content: profiles, usernames, bios, messages, reports, crew content, Shoutout materials, artist and fan content, images, videos, and other user-provided content.
• Audio Data: voice notes, uploads, artist tracks, Shoutout audio, and other supported audio content.
• Usage Data: app launches, screens, plays, skips, searches, recommendations, clicks, likes, follows, saves, shares, events, and feature usage.
• Purchase History: purchases, product IDs, subscription information, receipts, purchase tokens, transaction IDs, entitlements, and refunds.
• Search History: BTR Music searches and search interactions.
• Diagnostics: crash, performance, latency, troubleshooting, and error information.
• Other Data: fraud, moderation, safety, child-safety, support, rights, rate-limit, compliance, and platform-integrity information.

Data Linked to You. Because BTR Music supports accounts, many categories may be associated with an account, user, consumer identifier, artist identity, or device where required to operate the Services.

Data Not Linked to You. Certain aggregated analytics, de-identified information, or diagnostics may be processed without being linked to an identified user.

Data Used to Track You. BTR Music does not currently use Apple IDFA, mobile advertising identifiers, third-party mobile advertising networks, or mobile cross-app tracking identifiers. It does not currently use BTR Music data to track users across third-party apps or websites for advertising and does not currently request App Tracking Transparency permission for that purpose.

Account deletion. BTR Music supports an in-app deletion path through Settings → Delete Account and the public web deletion path at https://beatstorapon.com/delete-mobile-account.

18.2 Google Play Data Safety

For Google Play Data Safety disclosures, BTR Music may collect or process personal information, app activity, app information and performance, identifiers, location where granted, user-generated content, audio, images, videos, purchases, searches, diagnostics, fraud information, moderation information, safety information, support information, and compliance records.

Information may be used for BTR Music functionality, analytics, account management, developer communications, fraud prevention, security, personalisation, payment handling, entitlement handling, moderation, child safety, rights handling, support, and platform integrity.

Service providers may process information on OuterMark's behalf for hosting, app-store billing, push notifications, authentication, payments, payouts, email, moderation, AI-assisted safety review, media delivery, diagnostics, and support.

18.3 No mobile advertising network at launch

BTR Music does not currently include a third-party mobile advertising network, banner advertising, interstitial advertising, or rewarded-video advertising. OuterMark may display platform-controlled artist, track, event, feature, chart, marketplace, or discovery promotion as part of ordinary BTR Music functionality.

18.4 Age rating and child safety

BTR Music is a general-audience music application for users aged 13 and over and is not a Kids, Families, or Made for Kids application. App-store age ratings are determined through the applicable store's own rating processes.

18.5 Store disclosures and actual behaviour

Apple App Store and Google Play privacy disclosures should reflect the actual behaviour of BTR Music. If OuterMark adds material new data categories, SDKs, advertising systems, tracking, permissions, location uses, payment functionality, social features, or AI processing, applicable store disclosures and this Privacy Policy should be updated where required.

19. Region-specific notices

19.1 Australia

Where applicable, OuterMark handles personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and other applicable Australian privacy requirements.

Privacy complaints may be submitted to OuterMark using Section 24. Depending on the circumstances, you may also have rights to contact the Office of the Australian Information Commissioner.

19.2 EEA / EU users

Where applicable, OuterMark may act as controller of personal data processed through BeatsToRapOn and BTR Music. Legal bases may include contractual necessity, legitimate interests, consent, legal obligations, and other lawful bases available under applicable data-protection law.

Legitimate interests may include operating and improving BeatsToRapOn and BTR Music, protecting users, securing the Services, detecting fraud, personalising discovery, generating analytics, improving automated systems, handling rights complaints, preserving evidence, communicating with users, and enforcing platform rules.

Where legally required, consent may be requested for cookies, marketing, precise location, sensitive information, or other specific processing.

19.3 United Kingdom users

Where applicable, OuterMark processes personal information under the UK GDPR and Data Protection Act 2018. Applicable rights may include access, correction, erasure, restriction, portability, objection, withdrawal of consent, and certain rights involving automated processing.

19.4 California and similar U.S. state privacy laws

Where a U.S. state privacy law applies, users may have applicable rights to know, access, delete, correct, opt out, limit certain sensitive-information uses, or opt out of qualifying targeted-advertising, sale, sharing, or profiling activities.

OuterMark does not sell personal information in the ordinary data-broker sense. Where legally required, recognised opt-out mechanisms or signals may be honoured.

19.5 Other regions

Additional local privacy rights may apply depending on where you live. OuterMark will respond to valid privacy requests as required by applicable law.

19.6 Advertising choices

Website users may be able to control certain advertising or analytics activity through consent controls, browsers, device settings, partner opt-outs, or recognised privacy preference signals.

20. Children’s privacy and child safety

20.1 Minimum age and under-13 users

BeatsToRapOn and BTR Music require account holders to be at least 13 years old. The Services are not directed to children under 13 and are not Kids, Families, or Made for Kids services.

If OuterMark learns that personal information was knowingly provided by a child under 13 in circumstances where it should not have been collected, OuterMark may delete the information and suspend or remove the relevant account, consistent with applicable law.

20.2 Teen users

Users between 13 and the age of majority may be subject to additional consent, supervision, age-assurance, feature-gating, or other requirements depending on applicable law, jurisdiction, app-store requirements, or feature type.

20.3 Age signals and feature gating

OuterMark generally relies on self-declared or attested age unless additional assurance is required for a particular jurisdiction, feature, or platform requirement.

20.4 Child safety and CSAE

OuterMark maintains a zero-tolerance approach to child sexual abuse and exploitation (CSAE) across BeatsToRapOn and BTR Music.

Users may report suspected child-safety violations through available reporting and blocking functionality or by contacting info@beatstorapon.com.

Where OuterMark becomes aware of apparent child sexual abuse material or serious child-safety violations, it may remove or disable relevant content, suspend or permanently ban responsible accounts, preserve evidence, and report matters to competent authorities where required or permitted by applicable law.

21. Security

OuterMark uses reasonable technical, organisational, and administrative safeguards designed to protect information processed through BeatsToRapOn and BTR Music.

Measures may include authentication, encryption in transit where appropriate, access controls, monitoring, logs, backups, rate limits, fraud detection, abuse prevention, staff access controls, and vendor controls.

No online service, network, device, storage system, or transmission method is completely secure. Users remain responsible for securing their own devices, credentials, email, Apple accounts, Google accounts, payout accounts, and other authentication methods.

22. Third-party links and integrations

BeatsToRapOn and BTR Music may contain or use links, embeds, payment services, app stores, maps, social services, DSPs, AI providers, analytics providers, video services, ticketing services, or other external tools.

Third parties operate under their own terms and privacy policies. If you use Sign in with Apple, Sign in with Google, make an Apple or Google purchase, use a payout service, open a third-party map, follow an external link, or use another third-party service, that provider may independently process information under its own privacy framework.

23. Changes to this policy

OuterMark may update this Privacy Policy from time to time. When we do, we may update the “Last updated” date and provide additional notice where appropriate through BeatsToRapOn, BTR Music, email, account notices, push notifications, dashboards, consent tools, or other reasonable channels.

Material changes affecting account data, BTR Music information, AI processing, tracking, advertising, payments, location, app-store disclosures, deletion, or other significant privacy matters may receive additional notice where appropriate or required.

24. Contact us and operator details

If you have privacy questions, access requests, correction requests, deletion requests, account requests, advertising opt-out requests, BTR Music privacy questions, Apple App Store or Google Play privacy questions, child-safety concerns, or rights-related privacy concerns, contact us using the details below.

This Privacy Policy applies to Services operated by OUTERMARK GROUP PTY LTD (ACN 699 247 277) of Level 1, 446 Oxford St, Bondi Junction NSW 2022, Australia ("OuterMark", "BeatsToRapOn", "BTR", "BTR Music", "we", "us" or "our").

BeatsToRapOn: https://beatstorapon.com — artist, creator, upload, marketplace, creator-tool, event, promotion, and artist-management Services.

BTR Music: https://btrmusic.com — consumer and fan-facing music streaming, discovery, social, artist-profile, fan-support, and mobile application Services.

Privacy, support and formal requests: info@beatstorapon.com

OuterMark may need to verify your identity, account relationship, or authority to act before processing certain privacy, deletion, access, correction, or rights-related requests.