Privacy Policy
Last updated: March 2026
JasonMusicLab Inc. ("Ooh! Tracks")
1. Our Commitment to Privacy
JasonMusicLab Inc. and its affiliates (collectively, "Ooh! Tracks," "Company," "we," "us," or "our") are committed to protecting your personal information in compliance with applicable global data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act, as amended by the CPRA (CCPA/CPRA).
We process personal data in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.
2. Legal Bases for Processing Personal Data
We process personal data based on one or more of the following legal grounds, as applicable:
- Performance of a contract (GDPR Art. 6(1)(b))
- Compliance with legal obligations (GDPR Art. 6(1)(c))
- Legitimate interests pursued by the Company (GDPR Art. 6(1)(f))
- User consent, where required
- Permitted business purposes under CCPA/CPRA
You are not legally required to provide personal data; however, failure to do so may limit your ability to access certain features of the Services.
3. Categories of Personal Data We Collect
Account and Registration Information
- Name, email address, and contact details
- Account credentials (managed via authentication service)
- Subscription and billing-related information
Payment information is processed by third-party payment processors. Ooh! Tracks does not store full payment card details.
Information You Voluntarily Provide
- Communications with customer support or inquiries
- Survey responses and feedback
AI Mastering Service Data (QuackTracks)
When you use the QuackTracks mastering service, we process:
- Audio files uploaded for mastering (temporarily stored during processing)
- Mastering preferences and settings (LUFS presets, format preferences)
- Processing job metadata (timestamps, entitlement usage, subscription period usage, job status)
Data Handling:
- Uploaded audio files are processed on Cloudflare Workers edge runtime
- Original upload files are stored temporarily in Cloudflare R2 during processing
- Mastered output files are available for download for a limited period
- Files are automatically deleted after the retention period expires
Usage and Device Information
- IP address
- Device type, operating system, and browser information
- Session data and service usage logs
Information from Third Parties
- Basic identification data from social login (Google, Apple) via authentication service
4. Purposes of Processing Personal Data
We use personal data solely for the following purposes:
- Providing and managing the Services and user accounts
- AI-based audio mastering processing (QuackTracks)
- Customer support and communications
- Service reliability, security, and quality improvement
- Compliance with legal obligations and prevention of fraud or misuse
5. Cookies and Tracking Technologies
We may use cookies and similar technologies to operate, secure, and analyze the Services. Users may manage or disable cookies through browser or device settings.
This reflects our respect for user choice and opt-out rights under CCPA/CPRA, as well as consent management principles under GDPR.
6. Disclosure of Personal Data
We may disclose personal data only in the following circumstances:
- To service providers acting on our behalf under contractual safeguards (e.g., Cloudflare for infrastructure, BetterAuth for authentication)
- To governmental or regulatory authorities where required by law
- To successor entities in the event of a merger, acquisition, or asset transfer
We do not sell personal data and do not engage in activities that constitute a "sale" or "sharing" of personal information under CCPA/CPRA.
7. Security Measures
We implement appropriate technical and organizational measures to protect personal data, including:
- Access controls and role-based permissions
- Encryption and pseudonymization where appropriate
- Edge-based processing via Cloudflare Workers for data minimization
- Internal privacy governance and training programs
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our policies.
Audio files uploaded for mastering are retained only during processing and for a limited download period. Data is securely deleted or anonymized once retention is no longer required.
9. Your Rights (GDPR & CCPA/CPRA)
Depending on your jurisdiction, you may have the right to:
| Right | Description |
|---|---|
| Access | Request access to your personal data |
| Correction | Correct inaccurate personal data |
| Deletion | Request deletion of your personal data |
| Object/Restrict | Object to or restrict certain processing |
| Withdraw Consent | Withdraw consent at any time |
| Portability | Request data portability (GDPR) |
| Opt-Out | Opt out of sale/sharing of personal data (CCPA/CPRA) |
10. Contact Information
For questions or requests related to this Privacy Policy or the processing of personal data, please contact:
Ooh! Tracks (JasonMusicLab Inc.) 21, Baekbeomro 3-gil, Mapo-gu, Seoul, Republic of Korea (Startup Hub Bldg. 3F) CEO: Jin-hyun Cho | Business Reg. No: 268-86-03631
11. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, technology, or our Services. Updated versions will be posted on our website, and continued use of the Services constitutes acceptance of the revised Policy.
12. Personal Data Collection for Refund Processing
Data Collected
The following personal data is collected for refund processing:
- Order number, payment method information
- Refund account details (bank name, account number, account holder) — for virtual account refunds
Legal Basis: Article 15(1)(4) of the Personal Information Protection Act (performance of contract)
Retention Period
Refund-related personal data is retained for 5 years as records of payment settlement and supply of goods/services, pursuant to Article 6(3) of the Act on Consumer Protection in Electronic Commerce and Article 6 of its Enforcement Decree.
Entrustment of Personal Data Processing
Personal data processing is entrusted as follows for refund processing:
- Entrusted party: Toss Payments Co., Ltd.
- Entrusted tasks: Payment cancellation and refund processing