Privacy Policy

FingerCompass determines how customer information is used for its Ireland-based decision service.

Trader details:
Public trading/service name: FingerCompass
Legal trader name: John Hopkins
Irish geographical business address: Drumalee Manor, Cavan, Co. Cavan

For customer support, privacy, cancellation or refund requests, email support@fingercompass.ie. Include your checkout email and order reference where relevant, but never send card details or passwords.

Checkout may provide your name, email address, billing details where collected, payment status, amount, currency and transaction or checkout references. Stripe handles payment-card entry and processing; FingerCompass does not store full payment-card details.

Campaign Intake collects your artist name, checkout email, release title and optional release date, track or release link, campaign evidence summary, primary market, proposed test budget, campaign goal and optional notes. Evidence and linked pages may contain campaign results or personal information you choose to share. We may also receive support correspondence and technical or security information such as request logs and IP addresses from service providers.

We make a downloadable purchase confirmation available after verified checkout, containing order details, the applicable policy version and your exact early-start request/acknowledgement. Automated confirmation email is not currently configured. Your Decision Report is to be delivered electronically to your checkout/contact email. We also record your express early-start request, its wording/version and the time it is received with the Stripe checkout session and associated payment data. We use order and intake information to verify payment, link your evidence to your order, prepare and deliver your report, answer questions and handle cancellations or refunds. The legal basis is taking steps at your request and performing our contract with you. Required accounting and tax records are kept to meet legal obligations.

Necessary security, fraud prevention and dispute handling rely on our legitimate interests, balanced against your rights. Where optional processing requires consent, we will ask separately and you may withdraw it. An order is not blanket consent to marketing.

Payment checkout is handled through Stripe. Stripe receives checkout/contact and payment information and the recorded early-start consent metadata. FingerCompass uses Stripe payment/session checks to verify orders. Campaign Intake evidence and links are not sent to Stripe by those checks; the verification call sends the checkout-session reference.

Campaign Intake information is stored by the application’s site/data infrastructure for service delivery. The implementation uses ChatGPT Sites and Cloudflare Workers with a D1 database. Order confirmation snapshots and browser-access credential hashes are also stored in the application database. No file-upload or R2 storage mechanism is enabled.

The current application does not automatically transmit submitted Campaign Intake evidence or links to an AI/model provider, does not automatically call an AI/model provider at all, and does not automatically fetch submitted links. No automatic analysis queue or transactional-email provider is implemented. DistroKid, Spotify and Meta are examples of evidence sources, not connected integrations or established processors for this service.

These statements describe the current implementation and may change. Any future AI-assisted or other new processing must be assessed and this notice updated before it begins, with any required information and consent provided. The application does not establish provider-wide AI training/reuse terms, contractual exclusions or manual processing outside the app; we do not promise that customer data can never be used for training.

Authorised people and providers may access information as needed for service delivery, support, security and legal obligations. Exact contractual provider/processor roles and subprocessors remain to be confirmed before launch. Processing countries, international-transfer arrangements and any applicable transfer basis or safeguards have not been established by the implementation and must be confirmed before launch. We do not claim Ireland-only or EEA-only processing or an absence of international transfers.

Opening an external evidence link or Stripe payment page may involve that provider’s own privacy practices. Share only information needed for the report and avoid sensitive personal data or unnecessary personal information about other people.

A necessary secure, HttpOnly browser cookie provides access to the order’s payment verification, Campaign Intake and downloadable confirmation for up to 24 hours after checkout is created. The server stores a hash of this random credential. A checkout reference alone does not grant access. This access expiry is not a data-retention period. If the cookie expires, is cleared, or you change browsers, contact support for help; automated account or email-based recovery is not configured.

The application saves the applicable contractual wording and early-start request as a fixed order confirmation at checkout creation. Later policy edits do not rewrite it. The download becomes available only after successful payment verification and omits the checkout email address. Keep a downloaded copy for your records.

Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected and as required for applicable legal, accounting, transaction, consumer-rights and dispute-resolution obligations. More specific operational retention periods are to be finalised before launch where appropriate.

The current application does not implement automatic retention/deletion jobs. Provider deletion cycles, backup arrangements and deletion from backups have not been established. These operational details and procedures for handling deletion requests must be confirmed before launch. Deletion requests will be assessed against applicable obligations, including any information that must be retained and why.

Depending on the circumstances, you can request access, correction, deletion, restriction, portability or object to processing. You can withdraw consent where we rely on it. We may need proportionate verification to protect your information. We normally respond within one month; if a lawful extension is needed, we will explain it within that month.

You can raise a concern with Ireland’s Data Protection Commission at dataprotection.ie or your local data protection authority. Providing information required for payment verification and analysis is necessary to fulfil an order; without it, we may be unable to provide the service.

For customer support, privacy, cancellation or refund requests, email support@fingercompass.ie. Include your checkout email and order reference where relevant, but never send card details or passwords.