Privacy Policy

Frásögn ehf. operates the Frasogn streaming service available at frasogn.com, frasogn.is and related domains. Frásögn ehf. is the data controller for personal data processed through the service. For any privacy request, contact us at info@frasogn.com.

We collect (a) account data you provide when you sign up (email, display name, and for creators handle, IBAN or payout details, and verification information); (b) listening data generated as you use the service (tracks played, listening seconds, wallet purchases, bookmarks, session timestamps); (c) payment metadata returned by our payment processor (transaction reference, amount, currency, status — not full card numbers); and (d) technical data such as IP address, browser, device and diagnostic logs used to operate and secure the service.

We use personal data to operate your account, meter and settle per-second listening, process wallet top-ups, pay out creator earnings, prevent fraud and abuse, provide customer support, comply with legal obligations (including tax and accounting), and improve the service. Legal bases under the GDPR include performance of a contract (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)) in operating a secure and reliable service.

We do not sell personal data. We share data only with subprocessors strictly necessary to run the service, including our cloud database and authentication provider, our AI gateway provider, our payment processor (Rapyd), and our email delivery provider. Each subprocessor processes data on our instructions under a written agreement. We may disclose data when required by law or to protect the rights, safety or property of Frásögn, our users or third parties.

Some subprocessors may process data outside the European Economic Area. Where that happens, we rely on transfer mechanisms permitted under the GDPR, including Standard Contractual Clauses.

Account and listening records are retained for as long as your account is active and for a reasonable period afterwards to comply with tax, accounting and dispute-resolution obligations under Icelandic law. Payment and payout records are retained for the statutory bookkeeping period (currently seven years under Icelandic bookkeeping law). Diagnostic logs are retained for a short operational period and then deleted or aggregated.

Frasogn uses strictly necessary cookies and local storage to keep you signed in, remember your preferences and secure your session. We use limited product analytics to understand aggregate usage and improve the service. We do not use third-party advertising cookies.

Subject to the GDPR and the Icelandic Data Protection Act, you have the right to access, rectify, erase, restrict or object to processing of your personal data, and to data portability. You may withdraw consent at any time where processing is based on consent. To exercise these rights, email info@frasogn.com. You also have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd) at personuvernd.is.

We use industry-standard controls including encryption in transit (HTTPS/TLS), authenticated APIs, row-level access controls in our database, secret management for API keys, and least-privilege access for staff. No online service is perfectly secure; if you believe your account has been compromised, contact us immediately.

Frasogn is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be announced in the app or by email. The "Effective date" above always reflects the current version.

Frásögn ehf., Reykjavík, Iceland · kennitala 650322-1260 · email info@frasogn.com.