Privacy Policy

1. Who we are and what this policy covers

EZEPK is operated by Falls+Partners LLC (“EZEPK,” “we,” “us”) and is a product of Roots Music Rambler and Falls+Partners. This policy explains how we handle personal information when you visit ezepk.com, create an account, use our artist research and press-kit tools, subscribe, or view an artist’s EPK. Falls+Partners LLC is responsible for the account and service information described here. An artist or representative decides what information to publish in their EPK.

Contact us at support@ezepk.com for privacy questions, requests or concerns. You do not need an account to make a privacy request.

2. Information we collect

• Account information: your email, artist name and genre, a salted password hash, verification and recovery records, login sessions, and records of your agreement to our terms. We do not store your password in readable form.
• Artist content: biographies, professional contact details, website and social links, quotes, press coverage, release information, talking points, images, artwork, credits, approvals, drafts, and published EPKs. This can include information about collaborators or other people you identify.
• Public research: when requested, public artist information and source links from official websites, social profiles, music services, publications and other search results.
• Billing records: your selected plan, Stripe customer and subscription references, payment status, invoice references, amounts, currency, and billing dates. Stripe collects payment-card and billing details directly; EZEPK does not store full card numbers or security codes.
• Technical information: IP address and request information processed by our hosting infrastructure, browser/device information, session and security identifiers, errors, and usage counters used to run and protect the service.
• Optional analytics: browser identifiers, page visits, approximate location and device information, referral/campaign sources, registrations, plan interest, and subscription payment events, when you allow analytics.
• Communications: messages and attachments you send for help, billing, copyright or privacy requests, and our responses.

We receive information from you, your authorized representative, your device, our service providers, and public sources used for requested artist research. Please use professional contact details and do not upload government identifiers, financial credentials, medical information or other sensitive personal information.

3. How and why we use information

We use information to create and secure accounts; save, format and host EPKs; carry out research you request; publish content you approve; provide an optional directory; process subscriptions; send verification, recovery, service and billing messages; answer requests; prevent abuse; troubleshoot problems; and meet legal obligations. With optional analytics, we measure how people discover and use EZEPK and which channels lead to paid memberships.

Where the GDPR or UK GDPR applies, our legal bases are: performance of a contract for accounts, subscriptions and requested tools; legitimate interests for proportionate security, support, service administration and handling professional public-source information, subject to your rights; legal obligations for required records and lawful requests; and consent for optional analytics and any processing for which consent is required. The research tool also asks for your permission before sending your public links to its provider. You may decline research and enter your content yourself. We do not use AI to make decisions about you that have legal or similarly significant effects.

4. Private drafts, published EPKs and the directory

Drafts are not published automatically. Publishing makes the approved EPK and its included images and contact details available to anyone with its URL. Directory inclusion is a separate, optional choice; opting out of the directory does not make a published EPK private. Edit your information in your workspace and publish again to update the public version. Contact us to withdraw an EPK or close an account.

Public information can be copied, downloaded, shared or retained by visitors and search services. We cannot recall copies already obtained by others. You are responsible for having permission to publish another person’s information. People identified in an EPK can contact us directly about inaccurate or improperly disclosed information.

5. Who receives information

We disclose information as needed to providers that deliver the service, including Hostinger for hosting and infrastructure, our email delivery service for account and support messages, Stripe for billing, OpenAI for requested research, and Google Analytics for opted-in measurement. Authorized people operating EZEPK may access information when necessary for support, security and administration. These providers process information under their applicable terms and privacy arrangements; some, including payment providers, also have independent legal responsibilities.

We may disclose relevant information to comply with law or valid legal process, protect people and the service, investigate misuse, or pursue or defend legal claims. If our business is reorganized or sold, information may transfer as part of that transaction, subject to applicable law and notice of material changes. Publishing an EPK discloses the content you approve to the public.

We do not sell personal information, rent artist contact lists, or share personal information for cross-context behavioral advertising. Optional analytics is used for service and conversion measurement; advertising personalization and Google Signals are disabled. Joining EZEPK does not automatically subscribe you to marketing from Roots Music Rambler or Falls+Partners.

6. AI research and third-party media

When you request EPiK research and confirm its notice, we send your artist name and supplied public website/social/Spotify links to OpenAI’s API. Its web-search feature may retrieve additional public sources. The current research request does not send your password, payment details, account email or complete private draft. Suggestions and sources are returned for your review and become part of your stored draft when you save them.

We request that API responses not be stored as persistent response objects, but this is not a promise of zero provider retention: OpenAI may retain information for security, abuse prevention or legal requirements under its service terms. We do not use your private drafts to train our own general-purpose AI model. AI can produce mistakes, so check identity, quotations, permissions and facts before publishing.

Spotify and YouTube players are supplied by those services. Embedded players load automatically when you open a page containing them. Your browser connects to Spotify or YouTube, which may receive your IP address, device information and interactions, and use cookies or similar technology under its policy. Playback begins when you choose to play. EZEPK’s optional analytics preference controls Google Analytics; it does not disable these third-party players. External links take you to sites we do not control.

Provider information: Hostinger · Stripe · OpenAI · Google / YouTube · Spotify.

7. Cookies, analytics and your choices

Our essential ezepk session cookie keeps you signed in and is set for up to eight hours. Security tokens help protect requests. These are needed for account functionality. We save your analytics preference in your browser’s local storage until you change it or clear site data.

Google Analytics is not loaded until you select Allow analytics. If allowed, Google may set _ga and related identifiers and collect visit and interaction information. Analytics identifiers can persist for up to two years, subject to browser settings and Google’s configuration. We remove account-token and email query parameters from the page URLs we send, use generic page titles, and do not intentionally send account emails, passwords, payment-card details or private draft text to Google Analytics.

With your permission at checkout, we associate your browser identifier with billing records so verified subscription payments and renewals can be measured by plan, amount, currency, transaction reference and acquisition source. Necessary billing records exist independently of analytics consent.

Use Analytics preferences in any footer to change your choice. Declining stops future EZEPK analytics events in that browser. If signed in, it also requests removal of the account’s stored analytics connection for future payment reporting; if signed out, sign in and decline again or contact us to remove that connection. A change does not automatically erase information already reported. Contact us for deletion assistance. Preferences are browser-specific. Blocking or clearing essential cookies can sign you out.

We do not currently respond differently to legacy “Do Not Track” signals. Because we do not sell information or share it for targeted advertising, there is no such activity to opt out of through Global Privacy Control. Optional measurement still requires your affirmative choice; we do not treat those signals as permission.

8. Retention and security

We keep account information, drafts and uploads while they are needed to provide your account and requested services. Cancelling a paid plan does not by itself delete the account or its saved draft. You can request account and content deletion by email. We retain limited billing, consent, security and correspondence records where necessary for tax/accounting requirements, disputes, fraud prevention and legal obligations, and restrict them to those purposes.

Retention depends on the purpose, whether you have an active account, the nature of a request or dispute, applicable legal periods, and backup replacement schedules. Removed content may remain in restricted backups or storage until it is deleted or replaced; it is not available through the public EPK after withdrawal. When handling a deletion request, we assess active records, stored files, backups and applicable provider records and explain any legally necessary exceptions. We do not promise that cancelling a subscription or removing a link immediately erases every historical copy.

We use safeguards including protected password hashes, access controls, secure connections and authenticated account requests. No service can guarantee absolute security. Keep your password private and contact us if you suspect unauthorized account access.

9. Privacy requests and regional rights

Email support@ezepk.com to request access, a copy or portable export, correction, deletion, account closure, restriction of processing, withdrawal of consent, or to object to a use of your information. Identify the account or public EPK concerned and the action requested; do not send a password, full card number or unnecessary identity documents. We may verify your identity or an agent’s authority proportionately to protect your information. We will explain any refusal or legal exception and how to seek review. We do not penalize you for exercising applicable privacy rights.

Residents of U.S. states with applicable privacy laws may have rights to know/access, correct, delete, obtain a portable copy, opt out of sale, targeted advertising or certain profiling, and appeal a denial. To appeal, reply to our decision with “Privacy appeal.” These rights depend on the law and whether its coverage thresholds apply. California residents may use an authorized agent and request information about covered collection and disclosure practices. The categories and purposes above describe our current practices.

People in the EEA, UK or Switzerland may have access, rectification, erasure, portability, restriction and objection rights, and may withdraw consent without affecting earlier lawful processing. You may complain to your local data protection authority, including the UK Information Commissioner. We respond within the deadlines that apply—for example, generally one month under GDPR/UK GDPR, or 45 days for many U.S. state requests—with notice of permitted extensions.

10. International processing

EZEPK is operated from the United States. Hosting, payment, email, analytics and AI providers may process information in the United States and other countries where they operate. Privacy protections can differ from those where you live. Where transfer restrictions apply, an appropriate legal transfer mechanism is required, such as an applicable adequacy decision or contractual safeguards. Contact us for information about the relevant providers, locations and safeguards for your data. Using the site is not a blanket waiver of statutory privacy rights or transfer requirements.

11. Age requirements

EZEPK accounts are for adults aged 18 or older who can enter into a binding contract. The service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided information or appears in an EPK without appropriate permission, contact us so we can investigate and take appropriate action. An adult acting for an artist must have the necessary authority and rights to supply that artist’s information.

12. Updates and contact

We will post updates here with a new effective date. For material changes, we will provide appropriate notice, such as an account notice or email, and obtain consent where required before a new use begins. Questions and requests: support@ezepk.com, attention EZEPK Privacy, Falls+Partners LLC.