Privacy Policy

Vantil is a shared workspace for songs and albums. Crucially, Vantil does not store your audio or files. When you connect Google Drive or Dropbox and pick a file, Vantil stores a reference (a pointer) to that file in your own storage, never a copy of the file’s contents on our servers. We use narrowly-scoped permissions, we don’t use your data for advertising or AI training, and we don’t sell your data or share it with third parties except the infrastructure needed to run the service.

The data controller is Vantil, Inc., a Delaware corporation, reachable at hello@vantil.app.

Account / identity (Google sign-in)

When you sign in with Google we use the openid, email, and profile scopes to authenticate you and create your account. We store your name, email address, and profile image reference to identify you within the app and display you to your collaborators.

Google Drive: drive.file (file-by-reference)

We request the drive.file scope, which grants access only to files you specifically select through Google’s own file picker, plus files Vantil itself creates in your Drive. Vantil cannot browse, list, or search your Drive and cannot see files you don’t pick. We use this access to:

• Register a file you select onto a song as a reference (we store the file’s identifier and provider, not its contents), and stream it for playback when you or an authorized collaborator plays it;
• Create small, web-optimized cover-image and audio-preview renditions and store those in your own Drive (Vantil stores only a reference to them).

Google Calendar: calendar.events (optional, push-only)

If you choose to connect Google Calendar (this is optional and requested separately, not at sign-in), we use the calendar.events scope to create and delete calendar events that mirror schedule items you create in Vantil. Vantil does not read or list your existing calendar data. We store only the identifier of events Vantil creates, so we can update or remove them if you change the corresponding schedule item.

Dropbox (if connected)

If you connect Dropbox, the app functionally uses files-only scopes (files.content.read, files.content.write, files.metadata.read) for its reference-in-place file model. Dropbox additionally requires account_info.read as a baseline scope for every app; Vantil does not call account-info endpoints and does not read your Dropbox account information. As with Google Drive, files are handled by reference. Vantil stores pointers to files you select and writes only small renditions into your own Dropbox, never copies of your file contents on our servers. We do not request sharing, contacts, or team scopes.

We store:

• Your account identity (name, email, profile image reference).
• References to your files (a storage-provider identifier and the file’s ID), never the file contents/bytes.
• Vantil-originated content you create: song/album metadata and status, comments and threads, split information, payment records you log, schedule items, and collaboration relationships.
• References to the cover/preview renditions Vantil generates in your own storage.
• Your OAuth access and refresh tokens (see Security).

We do NOT store:

• The contents/bytes of your audio files or other Drive/Dropbox files (we hold pointers; the files remain in your own storage).
• The contents of notification emails Vantil sends.
• Your existing Drive listing, email, or calendar data (our scopes don’t permit reading them).

When you play a file, its data is streamed through our service to your browser to enable playback; it is not retained on our servers afterward.

Vantil's purpose is to keep a reliable record of who agreed to what on a song. When you acknowledge a split, Vantil records your account or the email address the request was sent to, the date and time, the IP address the acknowledgment came from, and your browser's user agent string.

We record this because an acknowledgment is evidence. Its value to everyone on the song depends on it being difficult to fabricate, and on it staying intact afterwards. The IP address and browser information are not used to profile you, target you, or build any picture of your behaviour. They are recorded once, at the moment you acknowledge, and are attached only to that record.

You are told this at the moment you acknowledge, before you do it.

An acknowledgment is a record about more than one person. It belongs to the song and to everyone on it, not only to you. For that reason, if you later delete your Vantil account, we remove your name, your email address, and the link to your account from that record, but the acknowledgment itself, including its date, time, IP address, and browser information, remains as part of the other parties' record. This works the same way a receipt does not disappear from someone else's file because you closed your account.

Acknowledgment records are kept for as long as the song record they belong to exists.

We use the data solely to provide Vantil’s functionality: authenticating you, displaying and organizing your songs/albums, enabling collaboration and access control, playing back files you’ve referenced, sending notifications you’ve opted into, and (optionally) syncing schedule items to your calendar.

We do not: use your data for advertising or profiling; use your data to train AI models; or sell your data. Vantil does not send your files to any AI service, does not show advertising, and does not track anyone across other websites. The listening statistics artists see are described under Listen links and Listening pages. Vantil uses Sentry for error reporting. Error reports are configured to exclude your identity, IP address, and the contents of your requests.

Vantil sends transactional notification emails (such as collaboration invites and activity alerts) from its own system mailboxes, invites@vantil.app and notifications@vantil.app. Vantil does not access, read, or send from your personal email account.

We do not sell or rent your data. We share data only with the infrastructure required to operate the service:

• Google and Dropbox: file storage you connect and authorise, and sign-in.
• Google: delivery of Vantil's own outbound notification email.
• Replit and Neon: application hosting and the production database.
• Stripe: subscription billing for Vantil plans.
• Sentry: error reporting, configured to exclude your identity, IP address, and request contents.
• Google Fonts: webfont delivery, which discloses your IP address to Google on page load.
• Your browser's push service (such as Google, Mozilla, or Apple): delivery of push notifications you have enabled.

We may disclose information if required by law.

Separately from the providers listed above, you can ask Vantil to send information somewhere on your behalf. Sharing a song or a package by link, sending a document to a collaborator, and exporting a record of contributions to a distributor, a rights organisation, or an industry standards body are all examples.

We do this only when you ask us to, only with what you ask us to send, and only to the destination you choose. We do not send your information to anyone else for these purposes on our own initiative, and we do not sell it.

A record of contributions may include the acknowledgment information described above, because that is what makes the record meaningful to the party receiving it.

Vantil holds some information about people who do not have an account.

If someone invites you to work on a song, we store the email address they used and, if they entered one, your name and role, so the invitation can be delivered and so the song shows who is involved. If you are named on an invoice, we store the billing details entered for you. If you acknowledge a split using a link sent to you, we record that acknowledgment, including the date, time, IP address, and browser information, and you are told this on the page before you acknowledge. If you open an artist’s Listen link, what is recorded is described under Listen links below.

We do not use any of this to send you marketing, and we do not sell it.

If you want to know what we hold about you, or you want it removed, email hello@vantil.app. Where the information is part of a record another person relies on, we will explain what we can and cannot remove and why.

Within Vantil, your content is private to you and the collaborators you grant access to. File visibility is enforced on a per-file basis: a file is visible only to the owner, the person who added it, and the specific collaborators chosen as its audience, unless you mark it visible to everyone on that song. Public share links expose only what’s needed to listen and basic credits (name/role), never your email, payments, splits, or restricted files.

We protect your data with the following measures:

• OAuth tokens are encrypted at rest using AES-256-GCM application-layer encryption before being stored.
• Access to your files and data within Vantil is enforced through a centralized, fail-closed access-control layer.
• Data is transmitted over encrypted connections (HTTPS).
• Our hosting and database provider, Replit, encrypts stored data at rest using AES-256 server-side encryption and protects data in transit with TLS 1.2+. Replit operates on Google Cloud Platform infrastructure and is SOC 2 Type II certified.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Vantil sets one cookie for signed-in users, to keep you signed in. It is required for the service to work and it is not used to track you across other websites.

If you open an artist’s Listen link (a vantil.app link that sends you straight to a song on a streaming service), Vantil sets two cookies on that redirect: a random visitor identifier that lasts up to 13 months and a random session identifier that lasts 30 minutes. They work only on Listen links, contain no name, email address, or account information, are not used on any other website, and are not shared with the streaming service or anyone else. They let the artist see how many different browsers opened the link and how many came back, instead of a bare count of clicks.

If you open an artist’s listening page (a vantil.app page that plays the song in your browser), no cookie is set. The page keeps one random visitor identifier in your browser’s local storage, and uses a second random identifier for that visit, so the artist can tell different browsers apart in totals. They contain no name, email address, or account information, work only on listening pages, and are not shared with anyone. An artist checking their own page can also store a “test visit” mark in their browser’s local storage, which only keeps their own visits out of their totals.

On the signed-out homepage, Vantil counts visits and which of its buttons or sections were used, in its own database. Each page load gets a random identifier kept only in memory; no cookie or browser storage is used, and no account, address, referrer, or page content is recorded. Nothing is sent if your browser has Do Not Track or Global Privacy Control turned on.

When a homepage account button starts Google sign-in, we also carry that button’s label in the temporary sign-in session. After a new account is created or an existing account signs in, we add to a daily total for that label. These totals contain no account or visit identifiers and are not joined to homepage visits. The label is cleared when the sign-in callback is handled. This attribution is also disabled for Do Not Track and Global Privacy Control.

Vantil does not set advertising cookies or third-party trackers, and uses no analytics cookies other than the Listen link cookies described above.

Your browser may store some information locally so the app works offline-ish and remembers your preferences. That information stays on your device.

When someone opens a Listen link, Vantil records the time, which link and variant was opened, the streaming service it was sent to, the kind of device and browser in broad categories (for example “Android, in-app browser”), the website the click came from when the browser reports it (the site name only, such as facebook.com), how long the redirect took, and the two cookie identifiers described under Cookies. Vantil does not record IP addresses, names, or full browser details for these requests, and it cannot see whether the song was played. The artist who owns the link sees totals only, never individual visitors. These records are deleted automatically after 13 months.

When someone opens an artist’s listening page, Vantil records the time, which page and campaign variant was opened, whether the page tried to start the song on arrival and whether the browser allowed it, whether Play was pressed, how many seconds of the song were actually heard and how far it got (including whether it reached the end), counts of pauses, skips, loading stalls and playback errors, whether the “Listen on Spotify” or “Share” buttons were tapped and how much had been heard at that moment, the kind of device and browser in broad categories, the website the visit came from when the browser reports it (the site name only), the browser’s time zone, and the two random identifiers described under Cookies. Vantil does not record IP addresses, names, or full browser details, and no account is needed to listen. The artist who owns the page sees totals only, never individual visitors, except for their own test visits, which are marked as such in their browser and kept out of the totals. Known crawlers and link previews are left out. These records are deleted automatically after 13 months.

• Account deletion: You can delete your account at any time from Settings (“Delete account”). This erases your songs, albums, files, collaborators, payment and split records, comments, schedule, and contacts. Your original files in Google Drive and Dropbox are left untouched. The small audio previews Vantil created are removed from your storage. Cover images are not deleted. If someone else has already acknowledged a record, it stays as their record, with your name, email, and account link removed. Vantil's stored access is deleted, and we ask Google and Dropbox to revoke the connection. This cannot be undone.
• Your original files are not affected: Because Vantil stores only references, deleting a file in Vantil, or deleting your account, does not delete the original files in your own Google Drive or Dropbox; those remain in your storage under your control. (Vantil makes a best-effort attempt to remove only the small preview renditions it created.)
• Disconnecting a provider: You can disconnect Dropbox or Google Calendar at any time, which removes the associated stored tokens.

See and export your data. You can see your songs, files, splits, payments, and messages in the app at any time. If you want a copy of what we hold in a portable form, email hello@vantil.app and we will provide it.

Correct your data. You can edit your name and profile in Settings. If something else is wrong, email us.

Delete your account. You can do this yourself in Settings, under Delete account. What is removed and what remains is described above.

Disconnect a service. You can disconnect Dropbox or Google Calendar at any time in Settings. Vantil's stored access is deleted and we ask the provider to revoke it.

Turn off notifications. You can choose how each song notifies you, including muting it, from that song's page, and you can turn push notifications on or off in Settings.

Object to how we use something. Where we rely on a legitimate interest, described below, you can object. Email hello@vantil.app and tell us what you object to. We will respond. Where the information is part of a record other people rely on, we may not be able to remove it, and we will tell you that plainly rather than ignoring the request.

Complain. If you are in the UK or the EEA and you think we have handled your information badly, you can complain to your national data protection authority. We would rather you told us first, but you do not have to.

We answer these requests at hello@vantil.app and aim to respond within 30 days.

If you are in the UK or the European Economic Area, we use your information on the following bases.

To provide the service you asked for. Creating your account, storing your songs and records, showing you files you have connected, delivering invitations and notifications you have enabled, and processing your subscription if you buy one.

Because we have a legitimate interest. Keeping the service secure and working, and keeping acknowledgment records intact.

On acknowledgment records specifically: the interest is not primarily ours. When two or more people record an agreement about a song, each of them has an interest in that record remaining reliable afterwards, including if one of them later leaves. We have weighed that against your privacy. The information recorded is limited to the date, time, IP address, and browser used at the single moment you acknowledged. It is not used to profile you, is not combined with anything else, is not sold, and is not shared other than as part of the record itself. You are told at the point of collection. If you want to object, see above.

Because you have consented. Where we ask for consent, such as connecting your calendar or enabling push notifications, you can withdraw it at any time in Settings.

Vantil, Inc. is a Delaware company and the service runs on infrastructure in the United States. If you use Vantil from outside the United States, your information is transferred there.

Our providers are listed above. Where information about people in the UK or the EEA is transferred to the United States, we rely on the safeguards our providers offer for those transfers.

Vantil’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide and improve the user-facing features described in this policy; we do not transfer or use it for advertising, and we do not use it for AI/ML model training.

Vantil is not intended for children. You must be at least 13 years old to create an account, or older if the law where you live sets a higher minimum age. If we learn that we hold information from someone below the applicable age, we will delete it. If you believe that has happened, email hello@vantil.app.

We may update this policy; we’ll update the “Last updated” date and, for material changes, provide notice in-app.

Questions: hello@vantil.app

Vantil, Inc. c/o Legalinc Corporate Services Inc. (Registered Agent) 131 Continental Dr, Suite 305 Newark, DE 19713, USA