Skip to main content
Legal & Privacy

Privacy Policy

Last updated October 18, 2026

Last updated: October 17, 2026

1. Who we are

DJSTUBE is the data controller for personal data processed through this website. Contact our data protection team at privacy@djstube.com.

2. Data we collect

  • Account data: name, email, password hash, and — if you use Google or Apple sign-in — your provider ID and profile picture.
  • Billing data: plan, amounts, payment references. Card details are processed by our payment providers (Paystack, Flutterwave, PayPal, M-Pesa) and never stored by us.
  • Usage data: downloads, credits, favourites, crates, IP address, device and browser information, security logs.
  • Cookies: see our Cookie Policy.

3. Why we use it (legal bases)

  • Contract: to provide your membership, credits and downloads.
  • Legitimate interests: fraud prevention, security, rights-holder reporting, service improvement.
  • Legal obligation: tax, accounting and copyright compliance.
  • Consent: marketing emails and non-essential cookies — withdrawable at any time.

4. Sharing

We share data only with processors that help us run the Service (hosting, storage, email delivery, payment gateways) and with rights holders in aggregated download reports. We never sell your personal data.

5. International transfers

Where data is transferred outside your country, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Retention

Account data is kept while your account is active and up to 24 months afterwards; financial records are retained as required by law (typically 7 years).

7. Your rights

You have the right to access, rectify, erase, restrict, port and object to processing of your data, and to withdraw consent. See Your Data Protection Rights.

8. Security

We use encryption in transit, hashed passwords, encrypted secrets, role-based access and audit logging.

9. Complaints

You may lodge a complaint with your local supervisory authority (e.g. the ODPC in Kenya, the ICO in the UK, or your EU data protection authority).