Privacy Policy

Gatefold (“Gatefold,” “we,” “us,” or “our”) operates the Gatefold.fm website, mobile application, and related services (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use and share it, and your choices regarding that information.

By using the Service you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

a. Information You Provide

• Account information — email address, display name, and password when you create an account.
• Collection data via Discogs — when you connect your Discogs account, we import your record collection (albums, artists, formats, and associated metadata).
• Chat & AI inputs — messages you send to “Ask The Clerk” and other AI features.
• Payment information — processed by our third-party payment provider. We do not store your full credit card number.
• Support requests — any information you provide when contacting us.

b. Information Collected Automatically

• Device information — device type, operating system, unique device identifiers, and mobile network information.
• Usage data — pages viewed, features used, time spent, crash reports, and performance data.
• Log data — IP address, browser type, referring/exit pages, and timestamps.
• Location — precise device location (GPS) is optional and used only with your permission — to surface record stores near you on tour, set your concert area with one tap, and, in Driving Mode and CarPlay, to read your live driving context (speed and nearby traffic) so the app and The Clerk can react to your drive. During an active Driving Mode or CarPlay session, location may continue in the background — even with the phone locked — so the drive experience keeps working; it is used live only and is never stored after your drive ends. Outside an active drive we do not track your location in the background, and the app works fully without location.

c. Information from Third Parties

• Discogs — collection and wantlist data when you connect your Discogs account.
• Setlist.fm — concert and setlist data to power the On Tour feature.
• Shazam (Apple Inc.) — audio recognition results returned when identifying a song playing in your environment.

d. Hardware & Device Sensors

• Camera — with your permission, we use your camera strictly to scan barcodes (EAN/UPC) for identifying physical media. We do not record, store, or transmit images or video to our servers.
• Microphone — with your permission, the microphone is used for two purposes. (1) Song recognition — in Display Mode (Marquee), it may listen while the screen is active so the now-playing display can recognize what’s on your turntable using Apple’s ShazamKit; the audio is handled entirely by Apple — the audio signature goes directly to Apple for matching, and Gatefold never receives, records, stores, or transmits your microphone audio (we only receive the resulting song match, never the raw audio). (2) Voice commands — in CarPlay and Driving Mode, for hands-free commands to The Clerk; your speech is transcribed to text using your device’s built-in speech recognition (with a secure server fallback if on-device recognition is unavailable), and only the transcribed text is used to generate The Clerk’s response. We do not store raw voice recordings.
• Motion sensors — in Driving Mode and CarPlay, we read your device’s motion sensors (accelerometer, gyroscope, barometer) alongside GPS to show live speed, g-force, elevation, and drive telemetry, and to let The Clerk react to how you’re driving. This telemetry is used live only and is never stored after your drive ends; we do not build a profile of your driving or present it as a score.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Power AI-driven features such as Today’s Spin recommendations, The Clerk commentary, The Flex turntable art, and collection intelligence analytics.
• Process transactions and send related notices.
• Send you service updates, security alerts, and support messages.
• Respond to your comments, questions, and customer service requests.
• Monitor and analyze trends, usage, and activities to improve user experience.
• Detect, investigate, and prevent fraud or other unauthorized activities.
• Comply with legal obligations.

3. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

• Service providers — third parties that help us operate the Service (hosting, analytics, payment processing, email delivery, AI model providers).
• Legal requirements — when required by law, regulation, legal process, or enforceable governmental request.
• Safety & rights — to protect the rights, property, or safety of Gatefold, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to affected users.
• With your consent — when you explicitly direct us to share information (e.g. sharing a Flex image publicly).

4. Data Retention & Deletion

We retain your personal information for as long as your account is active or as needed to provide you the Service. You may request deletion of your account and associated data at any time by emailing hello@gatefold.fm. Upon receiving a verified deletion request, we will delete or anonymize your personal information within 30 days, unless retention is required by law.

5. Your Rights & Choices

Depending on your location, you may have the following rights:

• Access — request a copy of your personal data.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your personal data.
• Portability — request your data in a structured, machine-readable format.
• Withdraw consent — where processing is based on consent, withdraw it at any time.
• Opt out — unsubscribe from marketing emails using the link in any message.

To exercise any of these rights, contact us at hello@gatefold.fm.

6. Data Security

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS) and at rest. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. Children’s Privacy

The Service is not directed to children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Third-Party Links & Services

The Service may contain links to third-party websites or services (e.g. Discogs, eBay, Amazon). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We take steps to ensure your data receives an adequate level of protection wherever it is processed, in accordance with applicable data protection laws.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• The right to know what personal information is collected, used, shared, or sold.
• The right to delete personal information held by us.
• The right to opt out of the sale of personal information.
• The right to non-discrimination for exercising your rights.

We do not sell personal information. To exercise your rights, contact hello@gatefold.fm.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Performance of a contract — to provide the Service you requested.
• Legitimate interests — to improve and secure the Service.
• Consent — where you have given specific consent (e.g. marketing communications).
• Legal obligation — to comply with applicable law.

You may lodge a complaint with your local data protection authority if you believe your rights have been violated.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: