Privacy Policy

iSinkwaMtase Marketing System · Last updated 30 May 2026

1. Who we are

The iSinkwaMtase Marketing System (the "System") is a private software tool operated by iSinkwaMtase (the "Operator"), an independent music artist based in Johannesburg, South Africa. It is used by the Operator to automate marketing, public relations, and social-media publishing for the Operator's own music releases.

The System is not a multi-user product. It does not collect data from the general public, does not offer accounts to third parties, and does not serve advertising.

2. Scope of this policy

This Privacy Policy describes what limited personal data the System processes in the course of its operation, why, and what rights the data subjects have. It applies to the hosted endpoints at https://marketing-system-ebon.vercel.app and related subdomains.

3. Data we process

3.1 The Operator's own account data

The System stores OAuth access tokens, refresh tokens, and account identifiers belonging to the Operator, used to publish content to the Operator's own social-media accounts and to read the Operator's own analytics. These credentials are stored as environment variables on the Vercel hosting platform and are never transmitted to third parties beyond the originating platform.

3.2 Outbound press & curator contacts

When the System sends professional outreach emails (for example, press pitches to journalists), it temporarily processes:

These contacts are limited to professionals with a publicly evidenced interest in receiving music-industry communications (for example, journalists who have published a public submissions email or curators with a public pitch form). The System honours opt-out and unsubscribe requests promptly. No marketing list is shared with or sold to any third party.

3.3 Generated content

The System uses Anthropic's Claude API to generate draft marketing copy and pitches. Prompts sent to Anthropic may contain brand guidelines and drafted copy authored by the Operator. Anthropic processes that data under their own privacy terms; see Anthropic's Privacy Policy.

3.4 What we do not collect

4. Third-party processors

The System relies on the following processors, each governed by their own privacy terms:

ProcessorPurposePolicy
Vercel Inc. Hosting & serverless execution vercel.com/legal/privacy-policy
Anthropic, PBC AI content generation anthropic.com/legal/privacy
Meta Platforms, Inc. Instagram & Facebook publishing facebook.com/policy.php
TikTok Ltd. TikTok publishing tiktok.com/legal/privacy-policy
Spotify AB Artist analytics spotify.com/legal/privacy-policy
Google LLC (Gmail API) Sending press outreach emails policies.google.com/privacy
X Corp. Posting to X x.com/en/privacy

5. Legal basis for processing

Where GDPR (EU/UK) or POPIA (South Africa) apply, the System processes personal data on the following bases:

6. Data retention

OAuth tokens are retained only as long as they remain valid or until the Operator revokes them at the source platform. Outreach logs are retained for the lifetime of the campaign for performance review; recipients can request earlier deletion using the contact details below.

7. Data security

Credentials and tokens are stored as encrypted environment variables on Vercel's infrastructure and are never written to source control. All third-party API traffic is over HTTPS. Access to the hosted API endpoints is gated by a private API key held only by the Operator.

8. Your rights

If you have received an outreach email from this System and the relevant laws apply to you, you have the right to:

9. Children

The System is not directed at children under 18 and does not knowingly process personal data of children.

10. International transfers

Because the System uses US-based processors (Vercel, Anthropic, Meta, Google, X) and may use TikTok's global infrastructure, personal data may be transferred outside South Africa or the EU/UK. These transfers rely on standard contractual clauses or equivalent safeguards offered by the respective processors.

11. Changes to this policy

This Privacy Policy may be updated to reflect changes in the System's processing or in applicable law. Material changes will be reflected by updating the "Last updated" date at the top of this page.

12. Contact

Privacy questions, access requests, and deletion requests can be sent to isinkwamtase@gmail.com. We aim to respond within 30 days.