Privacy.

This privacy policy explains what personal data we collect when you visit labelflow.ai or apply for the private beta, how we use it, and what rights you have under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

The short version: we collect as little as possible, we use it only for the purpose you gave it to us, we don't sell or share it for marketing, and you can ask for it back or have it deleted at any time.

1 · Who we are (Data controller)

The data controller responsible for processing personal data on this website is:

Till Antonio Mahler
Digital Music Systems
Am Berlin Museum 12
10969 Berlin, Germany
Email: hello@labelflow.ai

For privacy questions or requests under GDPR, write to hello@labelflow.ai. We respond within 30 days.

2 · What we collect, and why

Beta application form

When you submit the beta application form on this site, we collect: your name, role, email address, label name, the answers to our intake questions about your label (releases per year, time running, current operations stack, why Labelflow). This data is stored in our private Airtable workspace and used solely to evaluate your application and contact you about beta access.

Legal basis: Art. 6(1)(b) GDPR — processing necessary for steps prior to entering into a contract.

Retention: we keep beta application records for as long as your application is active plus 24 months thereafter, so we can re-contact you if a future cohort opens. You can request deletion at any time.

Server logs

Our hosting provider (Vercel Inc., USA) and CDN (Cloudflare Inc., USA) automatically log standard web request data: IP address, user agent string, requested URL, response status, timestamp. These logs are retained for security and operational purposes and are not used for marketing or profiling.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in the security and operational integrity of our services.

Analytics

We use Vercel Web Analytics on labelflow.ai. It is a privacy-friendly analytics service: it does not use cookies, does not track users across sites, and does not collect personally identifiable information. Vercel processes only aggregate, anonymized request data — URL, referrer, browser, country — to give us page-view and unique-visitor counts. No data is shared with third parties for advertising or marketing purposes.

You can read Vercel's analytics privacy approach at vercel.com/docs/analytics/privacy.

Cookies

This website does not use cookies for tracking or advertising purposes. Strictly necessary cookies may be set by our hosting infrastructure for security or session management; these are not used for analytics or marketing.

3 · Who we share data with (subprocessors)

We share data only with the service providers we use to operate Labelflow. Each is contractually bound to GDPR-compliant data protection agreements:

• Vercel Inc. (USA) — website hosting
• Cloudflare Inc. (USA) — DNS and CDN
• Airtable Inc. (USA) — storage of beta application records
• Google Workspace (Google Ireland Ltd.) — email correspondence

Where data transfers to non-EU countries occur, they are protected by EU Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework where applicable.

We do not sell, rent, or share personal data with third parties for advertising or marketing purposes.

4 · Your rights under GDPR

Under GDPR, you have the right to:

• Access the personal data we hold about you (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data — the "right to be forgotten" (Art. 17)
• Restrict processing in certain circumstances (Art. 18)
• Data portability — receive your data in a machine-readable format (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time, where consent is the legal basis
• Lodge a complaint with a supervisory authority (in Germany: the Berliner Beauftragte für Datenschutz und Informationsfreiheit)

To exercise any of these rights, email label@deep-tales.world. We respond within 30 days.

5 · Children

Labelflow is a B2B service for independent record labels. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted information through this site, contact us and we will delete it.

6 · Changes to this policy

We may update this privacy policy from time to time as the product and operations evolve. Material changes will be reflected in the "last updated" date below. For active beta participants, we will email notification of significant changes.

Last updated: 2026-04-29.