Privacy Policy
Last updated: 9 September 2026
Who we are
Songado is a done-for-you YouTube advertising service for musicians, operated by NSDL Limited, company registration number 2696104, 19H Maxgrand Plaza, No. 3 Tai Yau Street, San Po Kong, Kowloon, Hong Kong, reachable at hello@songado.com. NSDL Limited is the data controller for the personal data described below.
What we collect
When you submit a campaign request, we collect the details you provide and the records needed to process your order:
- Your name (or band name) and email address
- Your YouTube video link, genre, similar artists and target countries
- Your chosen budget, campaign length and any notes you add
- The Terms version you accept, the server-recorded acceptance time and your separate choice about starting service early
- Order and payment references, refund records and records of the service delivered; we do not collect your full card details
Website analytics
With your analytics consent, we use Google Analytics 4 through Google Tag Manager and PostHog EU Cloud to understand traffic and website use. These services may record pages visited, referral sources, approximate location, device information, anonymous identifiers and engagement events. PostHog also records visits with form inputs masked. Custom events do not contain your name, email, video link or payment recovery token.
Analytics storage is denied until you allow it. If you decline, we store your preference. Google Tag Manager may send consent-state signals without setting analytics or advertising cookies. Analytics and session recording use your consent, which you can change through Analytics settings in the website footer.
Google processes Google Analytics data; PostHog data is hosted in the EU. See the Google Privacy Policy and PostHog Privacy Notice.
How we use it
We use campaign request details to review your request, reply to you and, if you order, set up and run your campaign. Analytics data is used to understand acquisition sources, improve the website and diagnose usability or technical problems. We don't send newsletters, and we don't sell or share your data with third parties for their own marketing.
Legal basis: we process this data to take steps at your request before entering into a contract and to perform that contract (Article 6(1)(b) GDPR), and to keep accounting records where the law requires it (Article 6(1)(c) GDPR).
Form submissions are processed through our secured n8n automation, recorded in a restricted Google Sheet used as our order CRM, and delivered by email through Namecheap Private Email. Payments are processed by Stripe on their own secure pages. We never see your card details. If you proceed with a campaign, Google Ads and YouTube process the campaign data required to deliver and report the advertising service. These providers may process data outside the EU; where they do, transfers are covered by their published data-processing safeguards.
How long we keep it
Requests that don't turn into a campaign are deleted within 12 months. If you order a campaign, we keep the related records and reports for the duration of our cooperation and then for the retention period required by applicable accounting and tax law, after which they are deleted.
Your rights
You can ask us at any time to see, correct or delete the data we hold about you. Just write to hello@songado.com. If you believe we've mishandled your data, you also have the right to lodge a complaint with your local data protection authority.
Analytics controls
Google Analytics custom engagement events and PostHog session recordings run with your analytics consent. Form inputs are masked in recordings. Custom analytics events do not include your name, email address, video link or payment recovery token. You can change your choice using Analytics settings in the website footer.