Privacy Policy

This Privacy Policy explains how Coexist Group LLC ("CXProMusic", "we", "us") collects, uses, discloses and protects personal information in connection with CXProMusic.

It covers the CXProMusic website at cxpromusic.com, the CXProMusic platform at app.cxpromusic.com, CXProMusic Select, the CXProMusic Player, public previews, guest-facing Experience pages, sign-in, billing, emails and support.

In brief

• CXProMusic includes public listener-facing services and services for businesses. For our business services, we process account, organization, venue, device, playback and billing-related information needed to operate those services.
• We use playback and interaction signals such as plays, skips, likes, dislikes, searches and schedule choices to personalize music recommendations and improve the catalog and Services.
• If you use Google sign-in, we use the basic Google account information provided for authentication and account administration. We do not use Google sign-in to access Gmail, Google Drive, Google Calendar or other unrelated Google services.
• We do not sell personal information and do not share personal information for cross-context behavioral advertising.
• We do not use advertising cookies or third-party cross-site advertising trackers in the Services.
• On cxpromusic.com and app.cxpromusic.com, we use optional Google Analytics to understand traffic and usage. Where consent is required, analytics remains disabled until the visitor allows it.
• Full payment-card numbers are handled by our payment processor and are not received or stored by us.
• Service providers process information for us to operate the Services.
• You may have rights to access, correct, delete or otherwise control personal information depending on where you live.

This summary is for convenience only. The sections below control.

Contents

• 1. Who we are, what this covers and our role
• 2. Information we collect
• 3. Cookies, local storage and similar technologies
• 4. How we use information
• 5. How we disclose information
• 6. How long we keep information
• 7. Security
• 8. Your choices and privacy rights
• 9. U.S. state privacy disclosures
• 10. International processing and transfers
• 11. Children
• 12. Changes to this policy
• 13. Contact

CXProMusic is a brand and service of Coexist Group LLC, a U.S. limited liability company.

This policy applies to personal information processed through the Services. "Services" has the meaning given in our Terms of Service.

Some Services, including CXProMusic Select and the CXProMusic Player, are designed for businesses. Much of the information processed through those Services concerns organizations, venues, zones, players, schedules and business operations rather than individuals. Personal information is information that identifies, relates to or can reasonably be linked to an individual.

If you use CXProMusic through an organization, its owner and administrators control membership, roles, venues, players and certain activity within that organization.

For personal information a customer organization submits or controls about its personnel or other individuals, that organization may be the controller, business or other responsible party under applicable law, and we may process that information on its behalf.

For information we use for our own account administration, billing, security, fraud prevention, service improvement and legal obligations, Coexist Group LLC may act as the controller or business.

Where required, we may make a data-processing addendum available for business customers.

Account information. Name, email address, authentication information, and a profile image if you choose to provide one. Authentication credentials may be handled by our authentication provider; we do not receive your password from that provider.

Organization and venue information. Business name, venue and zone names, venue address, time zone, venue type, language, music preferences, notes about venue taste, team members and roles.

Billing information. Our payment processor may collect payment method details, billing name and address, and tax information. We may receive customer and subscription identifiers, plan status, invoices, payment status and limited card information such as brand, last four digits and expiration date. We do not receive or store full payment-card numbers.

Searches, requests and settings. Descriptions of music or atmosphere you want, search text, playlists, schedule names, special-day settings, preferences and other information you enter into the Services.

Experience material. If you use a guest-facing Experience, you may provide venue names, text, images, links and other material for publication.

Support and communications. Messages you send to support, information you include in them, and the email address or other reply information you provide.

Website enquiries. If you use a contact form on cxpromusic.com, we collect the information you submit, such as your name, email address, business or venue name, venue type and location, and your message. We use this information to receive, review and respond to your enquiry.

If you choose Sign in with Google, Google may provide us and our authentication provider with basic account information permitted by the sign-in flow, such as your name, email address, profile image and a stable Google account identifier.

We use that information to authenticate you, create or link your CXProMusic account, secure the account and administer the Services.

Using Google for sign-in does not give CXProMusic access to your Gmail messages, Google Drive files, Google Calendar, contacts or other Google content unless a future feature separately requests that access and you expressly authorize it. If we ever request additional Google scopes, we will update this policy and the relevant in-product disclosure before using them.

Playback and activity. Tracks or sets played, venue and zone, playback time, skips, likes, dislikes, favorites, playlists, schedules, special days, searches, recommendation interactions and similar activity.

Players and devices. Player name, device and browser type, operating-system or technical characteristics, whether a player is active, session duration, approximate last-online time, playback authorization and other operational status.

Technical and security logs. Internet Protocol address, browser and device information, pages and requests, timestamps, authentication events, errors, security events and similar logs generated when the Services are used.

Derived information. We may infer or generate music preferences, venue taste profiles, recommendations, match results, usage trends and operational insights from the information described above.

The cxpromusic.com website, public Browse, pricing, previews and other public pages may be used without an account.

We may process search text, request counts, device or browser information and limited network or abuse-prevention signals to provide public features, improve how requests are understood, prevent fraud and abuse, and enforce rate limits.

Where practical for these purposes, we may use truncated, hashed, salted or otherwise reduced identifiers rather than retaining directly identifying network information.

On cxpromusic.com and app.cxpromusic.com, we use Google Analytics to understand how visitors use the website and the platform. Depending on your consent choices and our configuration, Google Analytics may collect information such as pages viewed, referring page or traffic source, interactions with the site, browser and device information, session information, approximate geographic information and a pseudonymous browser or client identifier.

Google Analytics may process an IP address during collection to provide the service and derive approximate location information. Google states that raw IP addresses are not logged or stored in Google Analytics.

A guest may be able to open a public Experience page without creating an account. We may process the ordinary technical logs described above. If a guest chooses to follow an external link, reservation service or other third-party action, that third party’s privacy practices apply to the interaction on its service.

We may receive:

• authentication and account confirmations from identity providers;
• payment, subscription, tax and dispute information from payment providers;
• an email address when another person invites you to an organization;
• security, abuse-prevention or infrastructure information from service providers; and
• information a customer organization provides about its own venues or personnel.

We use cookies and browser storage that are necessary to operate the Services, including to:

• keep users signed in and secure sessions;
• remember preferences and interface state;
• remember player, venue and zone assignments;
• maintain playback state and authorized sessions;
• prevent fraud and abuse; and
• support checkout and billing.

Our authentication and payment providers may set their own essential cookies when providing sign-in, checkout, billing or fraud-prevention functionality.

We do not use advertising cookies and do not use third-party cookies to track users across unrelated websites for behavioral advertising.

You can block or delete browser cookies or storage, but some Services—including sign-in and playback—may stop working properly.

Google Analytics is used on cxpromusic.com and app.cxpromusic.com. We use it to understand traffic and how visitors interact with the website and the platform. Google Analytics may use first-party cookies and similar technologies, including a pseudonymous client identifier.

Google Analytics is optional where consent is required by law. In those regions, analytics does not load or collect analytics information until you choose to allow it. You can change your analytics choice later. On cxpromusic.com, use Cookie Settings in the website footer. On app.cxpromusic.com, use the Cookie preferences link. On both, we also honor the Global Privacy Control signal sent by your browser.

Some pages on cxpromusic.com include YouTube videos using YouTube's Privacy-Enhanced Mode. The YouTube player is not loaded until you choose to play a video. When you do, your browser connects to YouTube, a Google service, which may receive technical information and use cookies or similar technologies in accordance with Google's and YouTube's applicable terms and privacy policies.

We may use information:

To provide the Services. Create and secure accounts; manage organizations, roles, venues and players; stream music; run schedules; control players remotely; provide Insights; publish authorized Experience pages; and answer support requests.

To authenticate users. Verify identity, support Google or other sign-in methods, link accounts, maintain sessions and prevent unauthorized access.

To recommend music. Use a venue’s profile, time context, playlists, plays, skips, likes, dislikes, searches and other interactions to rank and recommend music for that venue.

These recommendations concern music selection and venue operation. They are not intended to make legal, employment, credit, insurance or similarly significant decisions about individuals.

To improve the catalog and Services. Understand what customers search for, play and prefer; improve recommendation and ranking systems; develop features; diagnose issues; test changes; and decide what music or experiences to create next.

For analytics and improvement, we use aggregated or de-identified information where reasonably practical.

To bill and administer accounts. Process payments, apply plan limits, issue invoices and receipts, administer trials and renewals, calculate taxes and manage payment disputes.

To communicate. Send transactional messages, billing notices, security alerts, support responses, service changes, maintenance notices and other administrative communications.

Where permitted by law, we may also send occasional product news, music updates or other marketing communications. You can unsubscribe from marketing messages at any time. Transactional or legally required messages are not marketing and may continue.

To understand and improve our website. Measure visits and use of cxpromusic.com and app.cxpromusic.com; understand which pages and content visitors use; understand traffic sources and navigation patterns; diagnose usability issues; improve the website; and evaluate the effectiveness of CXProMusic marketing.

To protect the Services, Content and users. Prevent and investigate fraud, copying, credential sharing, unauthorized access, automated abuse, security incidents and violations of our Terms.

To comply with law and protect rights. Meet tax, accounting, legal, regulatory and recordkeeping obligations; respond to lawful process; and establish, exercise or defend legal claims.

Where European Economic Area or United Kingdom data-protection law requires us to identify a legal basis, the basis depends on the purpose for which we process the information. We may rely on:

• Contract, where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract;
• Legitimate interests, where processing is necessary for our interests or those of another party in operating, securing, protecting and improving the Services, preventing fraud and abuse, supporting customers and authorized users, understanding service usage, and maintaining appropriate business records, provided those interests are not overridden by your rights and interests;
• Consent, where required, including for optional analytics cookies and certain marketing communications; and
• Legal obligations, where processing is necessary for us to comply with applicable law.

Where we rely on consent, you may withdraw it at any time, subject to applicable law.

We do not sell personal information and do not share personal information for cross-context behavioral advertising.

We may disclose personal information in the following circumstances.

We use service providers for functions such as:

• application, database and cloud hosting;
• authentication and identity;
• payment processing, billing and tax;
• media storage, delivery and streaming infrastructure;
• email delivery and customer communications;
• security, abuse prevention and monitoring;
• technical support and infrastructure; and
• website analytics.

Google Analytics / Google LLC — website analytics and measurement on cxpromusic.com and app.cxpromusic.com.

They may process information on our behalf under contracts or other terms appropriate to the service.

We may change providers as the Services evolve.

Organization owners and administrators may see members, roles, venues, zones, players, schedules and activity associated with the organization.

When you choose an identity provider for sign-in, authentication-related information is exchanged with that provider as necessary to complete sign-in and maintain account security.

We do not provide Google user data obtained through sign-in to data brokers or use it for advertising.

We may disclose information where we believe in good faith that disclosure is required by law, subpoena, court order or other legal process, or is reasonably necessary to:

• protect rights, property or safety;
• investigate fraud or abuse;
• enforce our Terms or other agreements;
• protect the Services or Content; or
• respond to a lawful government request.

Information may be disclosed to potential or actual purchasers, investors, lenders, advisers or successors in connection with financing, due diligence, reorganization, merger, acquisition, sale of assets or change of control, subject to appropriate confidentiality and legal requirements.

We may disclose information when you direct us to do so or otherwise consent.

We may use and disclose information that has been aggregated or de-identified so that it cannot reasonably be linked to an identifiable person, subject to applicable law.

If you publish or ask us to publish an Experience page, information intended for that page—such as venue name, text, images and links—may be publicly visible to anyone who can access the page.

We retain personal information for as long as we reasonably determine is necessary or appropriate for the purposes described in this policy, including providing and improving the Services, maintaining security, protecting Content, resolving disputes, enforcing agreements, preserving records and complying with legal, tax and accounting obligations.

Retention depends on the type of information and why it is processed. For example:

• account and organization information may be retained while the account or organization is active and for a reasonable period afterward;
• billing, invoice, tax and transaction records may be retained for legally required accounting and tax periods;
• technical, security and abuse-prevention logs are generally retained for shorter operational periods unless needed to investigate an incident;
• support records may be retained while relevant to the account, dispute, security or service history;
• backups may persist for a limited period according to backup-rotation schedules;
• website analytics information is retained according to our configured Google Analytics retention settings and applicable requirements; and
• aggregated or de-identified information may be retained indefinitely where it cannot reasonably be linked back to an identifiable person.

When an account or organization is closed, we may delete, aggregate, de-identify, archive or retain information as reasonably necessary for the purposes and exceptions described above.

If applicable law requires a specific retention period or deletion deadline, we will follow it.

We use administrative, technical and organizational safeguards appropriate to the nature of the Services and information we process. These may include encryption in transit, access controls, tenant separation, restricted administrative access, authentication controls, logging, playback authorization and service-provider security measures.

No service or method of transmission is completely secure. We cannot guarantee that information will never be accessed, disclosed, altered, corrupted or lost.

You are responsible for protecting account credentials, using appropriate access controls within your organization and promptly notifying us of suspected unauthorized access.

Where applicable law requires notice of a qualifying data breach or security incident, we will provide notice in accordance with that law.

Depending on your role and the features available, you may be able to:

• review or update your profile;
• update organization, venue and team information;
• remove team members;
• manage billing information through License & Billing;
• unsubscribe from marketing emails; and
• request account closure.

Where required by law, optional website analytics are disabled until you choose to allow them. You may decline analytics or change your choice later using Cookie Settings on cxpromusic.com or the Cookie preferences link on app.cxpromusic.com. We also honor the Global Privacy Control signal sent by your browser.

Depending on where you live and whether a particular privacy law applies to us, you may have rights to:

• know or access personal information;
• receive a copy of certain personal information;
• correct inaccurate information;
• delete personal information;
• restrict or object to certain processing;
• withdraw consent where processing is based on consent;
• appeal a decision on a privacy request; and
• not be discriminated against for exercising privacy rights.

Residents of the European Economic Area, United Kingdom or Switzerland may also have the right to complain to an applicable data-protection authority.

Email contact@cxpromusic.com with the subject "Privacy Request" or use the public contact page at https://cxpromusic.com/contact.

We may need to verify your identity and authority before acting on a request.

Where information is controlled by a customer organization, we may refer your request to that organization or coordinate with it as appropriate.

We may deny, limit or retain information where permitted or required by law, including where necessary for security, fraud prevention, legal compliance, recordkeeping, dispute resolution or the rights of others.

This section applies to the extent a U.S. state privacy law applies to Coexist Group LLC and the individual making a request.

During the preceding 12 months, depending on how the Services were used, we may have collected the following categories of personal information:

• Identifiers, such as name, email address, account identifiers and IP address;
• Customer or commercial information, such as organization, Subscription, invoices, payment status and service history;
• Internet or electronic activity, such as pages, requests, device information, playback, searches, likes, skips and interaction history;
• Professional or employment-related information, such as business affiliation, organization role and business contact information;
• Geolocation-related information, such as venue location or approximate location inferred from technical information where used;
• User-provided content, such as support messages, search text and Experience material; and
• Inferences, such as venue taste profiles, recommendation preferences and likely music interests.

Sources may include you, your organization, your devices and browsers, identity providers, payment providers and other service providers.

We use these categories for the purposes described in Section 4 and may disclose them to the categories of recipients described in Section 5.

We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined under applicable U.S. state privacy laws.

We do not use or disclose sensitive personal information for purposes that require a right to limit under California law, to the extent that law applies.

If these practices change, we will update this policy and provide any required opt-out mechanism.

Coexist Group LLC is based in the United States.

We and our service providers may process information in the United States and other countries where they operate. Those countries may have data-protection laws that differ from the laws where you live.

Where applicable law requires safeguards for international transfers, we use recognized transfer mechanisms, contractual protections or other lawful safeguards, such as applicable standard contractual clauses.

If we become subject to a legal requirement to appoint an EU, UK or other local representative, we will publish the representative’s contact details in this policy or another legally permitted location.

CXProMusic is not directed to children. Accounts and paid business services are intended for people aged 18 or older.

We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided us with personal information, contact us so we can review the information and delete it where appropriate.

We may update this policy as the Services, our practices or the law changes.

The date at the top identifies the current version.

For material changes, we may provide notice by email, through the Services, at sign-in or by another reasonable method before the change takes effect where required.

If consent is legally required for a new use, we will request it.

Coexist Group LLC — CXProMusic

• Website: https://cxpromusic.com
• Platform: https://app.cxpromusic.com
• Email: contact@cxpromusic.com

For privacy requests, use the subject line: Privacy Request

Signed-in customers may also contact us through the Support page.