Privacy Policy

The data controller is Nordic Bridge Music Oy, Business ID 3473594-5, Sahaajankatu 24, 00880 Helsinki, Finland ("we"). Syncskai is a product of Nordic Bridge Music Oy; in this policy, "Syncskai" refers to Nordic Bridge Music Oy.

For privacy questions, email management@nordicbridgemusic.com.

Access to Syncskai is invite-only. You get an account through an agreement between Syncskai and your organization. Where that agreement includes a data processing agreement (DPA), the DPA takes precedence over this policy.

Account data: your name, work email, the company you belong to, and your role. If you sign in with Google, we receive your Google name and email.

Usage data: searches, tracks you play, download or place in a project, playlists, favorites, and licensing history. We use this to run the service, to keep licensing records, and to report to rights holders.

Content you submit: reference links and the still frames we extract from videos you use for search (we never upload or store the full video), prompts for AI-generated music, and support or contact messages.

Rights-holder uploads: audio, stems, versions and metadata that catalog partners upload, including names of artists and publishers.

Technical data: device and browser information, IP address, connected plugin devices (for example Adobe Premiere Pro), and error logs.

We don't collect special categories of personal data, and we don't sell personal data.

• To provide the service under our agreement with your organization: accounts, search, playback, downloads, licensing and support.
• To meet legal and contractual obligations, such as license records and royalty and cue-sheet reporting.
• For our legitimate interest in keeping the service secure, preventing misuse, and improving the product based on aggregated usage.

Some features, such as AI search, video and link search, and music generation, send your input to AI model providers so we can process it. Providers handle this data only to give us the result. Our agreements with them don't allow them to use it to train their models.

We share data only with service providers who need it to run Syncskai and who are bound by data processing terms. These cover cloud hosting and database, authentication, AI processing, email delivery, and error and usage analytics.

Where a license requires it, we report usage to the music catalogs whose content you license, for example track IDs and the licensing organization. We don't send these catalogs your personal contact details unless the license requires it.

Some providers may process data outside the EU/EEA. In those cases we rely on appropriate safeguards, such as EU Standard Contractual Clauses.

We respect your privacy and retain personal data only for as long as necessary to provide our services and fulfil our legal and contractual obligations. We keep account and usage data for as long as your organization's agreement is active. When account is closed, we delete or anonymise personal data that is no longer needed. Certain records relating to your account, agreements, music licensing activities and transactions may be retained for three years after account closure, or longer where required by license term, applicable law like accounting law or contractual obligations.

All data is encrypted in transit. Access is restricted by role and by company, and administrative access is limited to authorized Syncskai staff. Plugin sessions use revocable device tokens.

Under the GDPR you can ask to access, correct, delete or export your personal data, and you can object to or restrict how we process it. Email management@nordicbridgemusic.com. If your organization manages your account, we may coordinate the request with your organization's administrator.

You can also lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).

We use only the cookies and local storage needed for sign-in, your preferences (such as theme and player settings) and basic usage analytics.

If we make material changes to this policy, we'll update it here and notify account administrators.