Privacy Policy

TeamStems is a platform for sharing stems and collaborating on music projects. TeamStems is operated by Spring Morning Software, reachable via springmorning.nl and by email at info@springmorning.nl. Spring Morning Software is the data controller for the personal data processed through TeamStems.

• Account data: the name and email address you provide when registering, and the record that you accepted our terms and this privacy policy (document, version and moment of acceptance).
• Invitation data: invitations sent to you or by you, including the invited email address, an optional label, the expiry date and whether the invitation has been used or withdrawn.
• Project data: projects, participations, comments and submissions you create, including related metadata such as titles, notes and timestamps, and your acceptance of the project conditions.
• Files: audio and other files you upload within projects. These are private and accessible only to authorised project members.
• Creator access data: your request for permission to create projects, its status, and the storage and project limits that apply to your account.
• Activity data: technical logging of actions within projects (for example who downloaded which file), so that misuse can be detected and agreements can be evidenced.
• Notifications and email logs: in-app messages and emails we send you about events in your projects, your email preferences, and a record of which reminders have already been sent so that you do not receive them twice.

• Providing the service: managing accounts and invitations, enabling project collaboration, and storing and serving files securely (legal basis: performance of a contract).
• Notifications and reminders: informing you about events that are relevant to you, such as an approved access request, a new submission, an unanswered invitation or an approaching deadline (legal basis: legitimate interest).
• Security and administration: preventing misuse, checking uploaded files and archives, enforcing storage limits, protecting access and resolving issues (legal basis: legitimate interest).
• Legal obligations: keeping records of accepted terms and handling requests concerning your rights (legal basis: legal obligation).

We do not sell your data. We use processors for hosting, database and file storage, and for sending email from our own notification domain. Where required, data processing agreements are in place with these parties. Personal data is in principle processed within the European Economic Area; where a processor operates outside the EEA, this is done with appropriate safeguards such as the EU Standard Contractual Clauses.

Within a project, your name and the work you submit are visible to the project owner and, where applicable, to other participants of that project.

Account data is kept for as long as your account is active. Within projects the following periods apply during the beta, for projects of users without an administrator role: source files are deleted 60 days after a project is closed, submitted files 90 days after closing, and the project as a whole no later than 180 days after it was created, including the files, submissions, comments and participations attached to it. The project owner is warned in advance.

Invitations expire automatically on their expiry date. Temporary download files (such as generated zip archives) are deleted automatically once their validity period expires. After your account is deleted we erase or anonymise your personal data, unless a legal obligation requires longer retention.

We apply appropriate technical and organisational measures, including encrypted connections, per-project access control, temporary download links, server-side authorisation at file level and automatic inspection of uploaded files and archives.

In your profile you can switch off emails about project activity and reminders; you will still see those messages inside the platform. Emails that are necessary for your account, such as confirming your email address, are always sent.

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing. You can send a request to info@springmorning.nl. We respond within four weeks.

Not satisfied with how we handle your data? You can lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) or with the supervisory authority in your own country.

TeamStems only uses functional storage that is necessary for signing in and using the platform securely. We do not use tracking or advertising cookies.

We may update this policy. The most recent version, together with its version history, is always published on this page; in case of significant changes we will inform active users in advance.