SNAPSHOTPR / ARTISTPRO PRIVACY POLICY Effective Date: July 26, 2026 This Privacy Policy explains how OHM Publicity LLC, doing business through the SnapshotPR and ArtistPRO brands ("OHM," "SnapshotPR," "ArtistPRO," "we," "us," or "our"), collects, uses, processes, discloses, retains, and protects personal information. This Policy applies to our websites, submission forms, automated analysis products, digital reports, promotional services, outreach services, marketing communications, and related services that reference this Policy collectively, the "Services." 1. Who operates the Services The Services are operated by: OHM Publicity LLC California Entity No. B20260304793 2108 N ST, STE N Sacramento, CA 95816 Email: support@ohmpublicity.com OHM Publicity LLC is the entity responsible for determining how personal information is used in connection with the Services. 2. Information we collect The information we collect depends on how you use the Services. 2.1 Identity and contact information We may collect: • your name; • artist or professional name; • email address; • company or label name; • country or general location; • customer-support contact information; and • other contact details you voluntarily provide. 2.2 Artist, release, and questionnaire information We may collect: • artist name; • genre; • track title; • release status; • release date or planned release date; • track description; • benchmark or comparable artists; • publicity goals; • marketing concerns; • release plans; • responses to open-ended questions; • rights or clearance status; • whether the track is original, a cover, remix, bootleg, unofficial remix, mashup, or another category; and • other information submitted through a form. 2.3 Uploaded recordings We collect the audio file you choose to upload for analysis or another authorized Service. Uploaded recordings may include unreleased commercial music. Recordings submitted for automated analysis are stored privately and are not made publicly available through the analysis Service. 2.4 Derived audio information Our systems and contracted service providers may create information derived from a recording, including: • tempo; • loudness; • energy measurements; • structural observations; • audio characteristics; • written descriptions; • genre or stylistic observations; • technical measurements; • a lyric transcript where permitted; • excerpts or summaries derived from your answers; and • the final generated report or "read." Derived information is distinct from the uploaded audio file itself. 2.5 Payment and transaction information When you make a purchase, we may receive: • the product purchased; • amount charged; • transaction identifier; • payment status; • billing name or limited billing details; • refund or dispute status; • date and time of purchase; and • fraud-prevention information. Payment-card information is processed by a third-party payment provider. OHM does not ordinarily receive or store your complete card number. 2.6 Consent and contractual records We may collect and retain: • the exact checkbox language presented to you; • consent version identifiers; • Terms version; • Privacy Policy version; • timestamp; • transaction identifier; • submission identifier; • file identifier; • selected rights category; • delivery timestamp; • IP address where collected; • device or browser information; and • other records documenting your submission and consent. 2.7 Communications and marketing preferences We may collect: • support messages; • questions; • complaints; • refund requests; • copyright notices; • survey responses; • email-delivery information; • marketing opt-in records; • unsubscribe records; and • suppression-list information. 2.8 Technical and usage information Our websites, hosting providers, and security systems may automatically collect: • IP address; • browser type; • device type; • operating system; • referring page; • pages requested; • timestamps; • server logs; • error logs; • security-event information; • cookie or session identifiers; and • basic interaction and performance information. 3. How we collect information We collect information: • directly from you; • through upload and questionnaire forms; • through checkout; • when you communicate with us; • automatically through website and service operations; • from payment and email-service providers; • from contracted audio-analysis and report-generation providers; and • from third parties you authorize to provide information to us. 4. How we use information We may use personal information to: • accept and process submissions; • provide the purchased Service; • privately store recordings during the processing period; • analyze recordings; • generate measurements, descriptions, transcripts, and reports; • deliver reports by email; • process payments; • document customer consent; • provide customer support; • reprocess failed reports; • investigate duplicate or unauthorized charges; • manage refunds and payment disputes; • perform customer-authorized promotional outreach; • protect confidential and unreleased recordings; • detect fraud, abuse, infringement, and security incidents; • debug and improve intended service functionality; • maintain service availability; • enforce our Terms; • comply with legal obligations; • establish, exercise, or defend legal claims; • communicate transactional information; and • send marketing communications where permitted. We do not use customer audio to train our own models. 5. How automated audio processing works The automated-analysis workflow involves several legally and technically distinct categories of data handling. 5.1 SnapshotPR-controlled audio storage The uploaded MP3 or other accepted audio file is stored in SnapshotPR's private, access-controlled file-storage environment. For the standard automated-analysis Service, that stored audio file is deleted within seven days after processing. It is not publicly hosted, publicly streamed, or made available for public download through the analysis Service. 5.2 Temporary processing by service providers Contracted service providers may temporarily receive or process a recording to perform tasks such as: • technical audio measurement; • automated listening or description; • transcription where applicable; • security; • data transmission; and • technical processing. Temporary processor handling is separate from SnapshotPR's own private storage. Service providers may process or retain limited information in accordance with their commercial agreements, security procedures, abuse-prevention practices, and legal obligations. 5.3 Text and data derived from recordings The system may create and retain text or data derived from a recording, including measurements, written descriptions, transcripts, observations, and the final report. Derived text is not the same as retaining the original audio file. Deleting the uploaded MP3 does not necessarily delete the final report, consent record, technical measurements, or written descriptions created from it. 5.4 Provider security and system logs Service providers may create limited technical, security, diagnostic, fraud-prevention, or abuse-monitoring logs. Those logs may be retained for periods established under the applicable provider's commercial service terms or legal obligations. SnapshotPR does not control every provider's security-log retention period. 5.5 Not every provider receives the original audio Different providers perform different functions. Not every service provider receives the original recording. Some processing steps receive only: • technical measurements; • questionnaire responses; • written descriptions; • excerpts of derived text; or • other information needed to perform that provider's assigned function. SnapshotPR limits disclosures to information reasonably necessary to perform the relevant service function. 6. Lyric transcription practices For tracks identified as original recordings, SnapshotPR may generate a lyric transcript or partial transcript to inform the analysis. SnapshotPR does not intentionally perform lyric transcription for tracks identified as: • covers; • bootlegs; • unofficial remixes; • official remixes containing third-party lyrics; or • mashups containing third-party lyrical material. A customer's classification of a track affects how the recording is processed. 7. When we disclose information We may disclose personal information to the following categories of recipients. 7.1 Operational service providers We use contracted providers for: • payment processing; • website hosting; • cloud infrastructure; • private file storage; • database and workflow management; • transactional email; • authorized marketing email; • audio measurement; • automated audio analysis; • generative report production; • technical support; • security; • fraud prevention; and • legal or compliance services. Depending on their function, these providers may process contact information, transaction records, consent records, form answers, recordings, measurements, written descriptions, derived text, or generated reports. We do not publicly disclose our complete technical architecture, provider sequence, internal prompts, scoring framework, or proprietary orchestration process. 7.2 Customer-authorized outreach recipients If you separately purchase or authorize promotional outreach, we may provide your recording and related promotional information to recipients reasonably necessary to perform the requested campaign. Recipients may include: • media outlets; • journalists; • blogs; • DJs; • radio contacts; • labels; • music professionals; • curators; • promotional inboxes; and • other recipients within the authorized campaign. The standard automated-analysis Service does not itself authorize public distribution or promotional outreach. 7.3 Legal, safety, and compliance disclosures We may disclose information where reasonably necessary to: • comply with law, legal process, or a court order; • respond to a valid copyright or DMCA notice; • protect rights, property, safety, or security; • investigate fraud or abuse; • enforce our Terms; • defend legal claims; or • cooperate with lawful government requests. 7.4 Business transactions Information may be disclosed or transferred in connection with a proposed or completed: • merger; • acquisition; • financing; • restructuring; • bankruptcy; • sale of assets; or • transfer of all or part of the business. Any successor receiving personal information will be expected to handle it consistently with this Policy and applicable law. 8. No sale or behavioral-advertising sharing SnapshotPR does not sell personal information. SnapshotPR does not share personal information for cross-context behavioral advertising. SnapshotPR does not currently use Meta Pixel, TikTok Pixel, or a comparable third-party behavioral-advertising pixel. We may use essential cookies, session technologies, server logs, security tools, and operational analytics needed to operate, secure, and understand the performance of the Services. 9. Model training OHM does not use customer recordings to train OHM-owned models. OHM submits information to contracted service providers only for functions connected to providing, operating, securing, or supporting the Services, subject to applicable commercial agreements. Some providers may retain limited security or abuse-monitoring logs under their applicable service terms. Such logging is separate from OHM using customer recordings to train its own models. 10. Retention We retain information for only as long as reasonably necessary for the purposes described in this Policy, subject to legal, accounting, security, fraud-prevention, and dispute-resolution requirements. 10.1 Standard audio retention For the standard automated-analysis Service, the uploaded audio file stored in SnapshotPR-controlled active file storage is deleted within seven days after processing. 10.2 Authorized outreach retention If you separately authorize SnapshotPR to use a recording for promotional outreach, the recording may be retained for the period reasonably necessary to perform that authorized campaign. The applicable outreach authorization or product description may provide additional retention information. Once continued retention is no longer reasonably necessary for the authorized outreach, the audio will be scheduled for deletion unless: • you request continued retention; • another active Service requires it; • a technical or security investigation requires limited continued retention; or • applicable law requires preservation. 10.3 Derived information and reports Generated reports, measurements, descriptions, questionnaire answers, and other derived records may be retained for as long as reasonably necessary to: • provide access or support; • maintain transaction and delivery records; • investigate technical problems; • address disputes; • document customer consent; • protect legal rights; • comply with law; or • maintain legitimate business records. A verified deletion request may result in deletion of eligible derived records, subject to applicable exceptions. 10.4 Transaction and consent records Payment, tax, accounting, consent, delivery, refund, fraud-prevention, and dispute records may be retained for the period reasonably required by law and legitimate recordkeeping needs. 10.5 Marketing records Marketing opt-in information is retained while the consent remains active. After an unsubscribe request, we may retain a minimal suppression record so that the address is not inadvertently added back to marketing communications. 10.6 Provider records and logs Contracted processors may retain limited information or security logs under their own commercial terms, security procedures, or legal obligations. 10.7 Backups Deleted information may remain temporarily in restricted backup or disaster-recovery systems until those systems are overwritten through the ordinary backup cycle. Backup copies are not used for ordinary business operations and remain subject to applicable safeguards. 11. Security We use commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information and nonpublic recordings. These measures may include: • private storage; • access controls; • token-gated file access; • encrypted transmission; • restricted administrative access; • authentication controls; • deletion processes; • service-provider agreements; • logging; • incident detection; and • operational security practices. No system can guarantee perfect security. You should use caution when transmitting confidential or commercially sensitive information through the internet. 12. Email communications 12.1 Transactional email We may send transactional or relationship messages necessary to provide the Services, including: • purchase confirmations; • report delivery; • technical notices; • support communications; • security messages; • refund communications; and • legal notices. Transactional messages are not optional marketing messages. 12.2 Marketing email Marketing consent is collected separately where required. Marketing opt-in boxes are not preselected. You may unsubscribe through the link or method included in a marketing message. We may retain a suppression record to honor the request. 13. Cookies and Do Not Track The Services may use necessary cookies, session identifiers, local storage, server logs, and similar technologies for: • basic site operation; • security; • fraud prevention; • form continuity; • checkout; • user preferences; • troubleshooting; and • performance monitoring. SnapshotPR does not currently track users across unaffiliated websites for cross-context behavioral advertising. Because there is no universally accepted standard governing browser "Do Not Track" signals, the Services do not currently respond to those signals in a separate manner. Other parties may collect limited technical information through the operational tools they provide to us, subject to their contractual role and applicable privacy terms. 14. Your privacy choices and requests Depending on your location and applicable law, you may have the right to: • request access to personal information; • request correction of inaccurate information; • request deletion; • request a portable copy of certain information; • object to or restrict certain processing; • withdraw marketing consent; • request information about categories of disclosures; • appeal a denied privacy request; or • lodge a complaint with a privacy regulator. To submit a request, contact: OHM Publicity LLC Email: support@ohmpublicity.com Mail: 2108 N ST, STE N, Sacramento, CA 95816 Please write "Privacy Request" in the subject line or at the top of the request. We may need to verify your identity and authority before acting on a request. Verification may include confirming access to the email address associated with the submission or asking for information reasonably related to the transaction. We may deny or limit a request where permitted by law, including where information must be retained for: • transaction records; • tax or accounting obligations; • fraud prevention; • security; • legal claims; • rights of another person; • copyright complaints; or • other lawful exceptions. 15. California privacy disclosures California law requires commercial website operators to disclose the categories of personal information collected and the categories of third parties with whom that information may be shared. The categories collected are described in Section 2. The categories of recipients are described in Section 7. SnapshotPR does not sell personal information or share it for cross-context behavioral advertising. If OHM becomes subject to the California Consumer Privacy Act or another California privacy statute that provides additional rights, OHM will provide and honor those rights as required by law. California residents may contact us to request information, correction, or deletion using the process in Section 14. California "Shine the Light" OHM does not disclose customers' personal information to unaffiliated third parties for those third parties' own direct-marketing purposes in exchange for money. 16. International users The Services are operated from the United States. If you access the Services from another country, your personal information may be transferred to and processed in the United States and other locations where contracted service providers operate. Those locations may have data-protection laws different from those in your jurisdiction. EEA, UK, and similar jurisdictions Where applicable, our legal bases for processing may include: • performance of a contract, to process your submission and deliver a purchased Service; • consent, for optional marketing or another processing activity requiring consent; • legitimate interests, including security, fraud prevention, service administration, customer support, and protection of legal rights; • compliance with legal obligations; and • establishment, exercise, or defense of legal claims. Depending on applicable law, you may have rights of access, correction, deletion, restriction, objection, portability, and withdrawal of consent. You may also have the right to complain to the data-protection authority in your country. International transfers may be supported by contractual safeguards, provider terms, statutory mechanisms, or another lawful transfer basis where required. 17. Children The Services are not directed to children under 13. Purchases and audio submissions are intended for persons who are at least 18 years old or the age of legal majority in their jurisdiction. If we learn that we collected personal information from a child in violation of applicable law, we will take reasonable steps to delete it. 18. Third-party websites and recipients The Services may contain links to third-party sites or may, with your authorization, submit material to third-party recipients. This Policy does not govern the independent privacy practices of a third party after that party receives information outside its role as our contracted service provider. You should review the privacy practices of independent recipients and third-party websites where appropriate. 19. Changes to this Policy We may update this Policy to reflect: • changes in the Services; • new products; • changes in data practices; • new legal requirements; • security changes; or • changes in service providers. We will post the updated Policy with a revised effective date. Where required, we will provide additional notice or request consent before applying a materially different practice to previously collected information. 20. Contact us Questions or requests concerning this Privacy Policy may be directed to: OHM Publicity LLC 2108 N ST, STE N Sacramento, CA 95816 Email: support@ohmpublicity.com