ISRC Direct Privacy Policy
ISRC Direct provides permanent International Standard Recording Code assignments and related purchase services. This policy explains the information handled when you use the Android app and its supporting service.
Information we collect
- Google account information: your Google account identifier, email address, and available display name for authentication and account management.
- Purchase information: Google Play product, order, purchase-token, verification, consumption, test/production environment, refund, and chargeback records.
- Recording information: artist name, song title, version, ownership confirmation, assigned ISRC, and assignment time.
- Security information: limited server logs needed for service reliability, fraud prevention, and abuse protection. Authorization credentials and purchase tokens are redacted from application logs.
How we use information
We use this information to authenticate accounts, verify Google Play purchases, grant and reconcile ISRC inventory, create permanent assignments, provide assignment history, prevent duplicate or fraudulent allocations, respond to support requests, and comply with legal and accounting obligations. We do not sell personal information and the app does not contain ads.
Service providers and sharing
Google provides identity and Play Billing services. Hosting and database providers process information on our behalf to operate the service. We disclose information when required by law or necessary to protect users, the service, or permanent ISRC records.
Security
The Android app communicates with the production service using HTTPS/TLS. Access to customer records is authenticated, operational credentials are kept outside the app and source control, and sensitive request values are redacted from logs.
Retention and account deletion
You can request deletion in the app under Account & privacy, or use the web deletion resource. We restrict the account when an authenticated request is received and target fulfillment within 30 days.
At fulfillment, Google identity fields and the account display name are removed. Purchase, refund, chargeback, fraud-prevention, and ledger records may be retained for up to seven years or longer when required by law. Issued ISRCs are permanent and are never recycled; the ISRC, recording metadata, and minimum assignment audit record are retained for the life of the designation. These retained records are not used to reopen the deleted account.
Your choices
You may request account deletion or ask questions about correction and retention by emailing cash4mcgraw@gmail.com.
Changes
We will update this page when our data practices materially change and revise the effective date above.