Privacy policy
Last updated August 2026
What we collect, why we collect it, and what you can do about it. Written to line up with POPIA.
Template notice: a starting draft. Have it reviewed against POPIA (and GDPR if you serve EU listeners) before launch, and register an Information Officer.
Who we are
Talent is a music streaming platform operating from South Africa. For POPIA purposes we are the responsible party for the personal information described below.
What we collect
- Account details — your name, email address and password (stored only as a bcrypt hash, never in plain text).
- Artist profile — stage name, bio, images and social links, all of which you choose to make public.
- Listening activity — which tracks are played, for how long, and the country the request came from. This drives play counts, charts and artist analytics.
- Your library — likes, follows and playlists.
- Technical data — IP address and browser details, used for security and abuse prevention.
Why we collect it
To run the service: authenticating you, counting plays so artists get credit, recommending music, showing relevant advertising, and keeping the platform free of abuse.
What we share
Aggregate listening statistics are shared with the artist whose music you played — counts and countries, never your identity or email. Advertising partners may set cookies subject to the cookie policy. We do not sell personal information.
We use Cloudflare Web Analytics to count visits. It records the page, referrer and country of a request and nothing else — no cookies, no device fingerprint, no identifier that could follow you to another site. It is switched on only when configured, and it never sees your account or listening history.
How long we keep it
Account data lasts as long as your account does. Individual play records are retained for 24 months, after which only the aggregate counts remain.
Your rights
Under POPIA you can ask us to:
- show you the personal information we hold about you
- correct anything that is wrong
- delete your account and the personal information attached to it
- stop processing your information for a particular purpose
Email privacy@talent.co.za and we will respond within 30 days. You can also complain to the Information Regulator of South Africa.
Security
Passwords are hashed with bcrypt, traffic is served over HTTPS, and access to production data is limited to staff who need it. No system is perfect; if a breach affects you, we will notify you and the Information Regulator as POPIA requires.
Children
Talent is not intended for children under 13. If we learn that we hold a younger child's information, we delete it.