Privacy Policy

A. INTRODUCTION

This website is operated by RADIO WEST SIDE LTDA, a private legal entity registered under CNPJ No. 60.420.258/0001-79, headquartered at QD SCN QD 4 S/N, Ed. Varig, Asa Norte, CEP 70714-020, Brasília/DF, Brazil, and its affiliates and products (collectively, "Westside Radio", "We", or "the Radio").

Westside Radio is committed to maintaining, protecting, and managing your information in accordance with our legal responsibilities and under applicable privacy and data protection laws, including the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018).

This Privacy Policy provides information about how we process personal data through the websites westside.tv westside.tv ("Website"), our applications, live broadcasts, and our products and services.

By reading this Privacy Policy, you will be informed about the following:

What personally identifiable information is collected from you through the Website, as well as through the Products and Services;
The organization that collects the information;
How the information is and will be used and disclosed;
With whom the information may be shared;
What choices are available to you regarding the collection, use, and distribution of the information;
The security procedures in place to protect against loss, misuse, or alteration of information;
How you can access and correct any inaccuracies in the information collected.

B. INFORMATION COLLECTED

Personally identifiable information

Some of the Products and Services offered may require registration for a user account. We will only voluntarily request the data necessary for authentication, account operation, participation in interactive features, and provision of services, such as name, email, and user identifiers linked to your account.

Types of data collected

Personal information: name, email, username/artist name, and internal user/account IDs.
Financial information: purchase history, payments, or transactions when you use paid features, support, contracted services, or the Skip-the-Line system. We do not store complete card data.
Photos: profile picture/avatar and images voluntarily uploaded in registrations, profiles, or artist materials.
Audio/music files: tracks, demos, jingles, and other audio files voluntarily uploaded by artists or authorized administrators.
App and website activity: chat messages, interactions, votes, preferences, player/broadcast usage history, access logs, security events, and crash reports.
Technical security data: IP address, date/time, accessed URL, browser type, operating system, and technical identifiers strictly necessary for session management, fraud prevention, diagnostics, and compliance.
Marketing data: preferences regarding receiving communications, newsletters, and notifications, when enabled by you.

Website browsing and interactions

Our servers record HTTP header information (IP, time, URL) when you access the website or interact with the live broadcast to ensure proper operation, maintain security, prevent abuse, measure stability, and improve the user experience. We do not collect precise GPS location through the application.

Authentication via Google Sign-In

When you choose to access the Platform via Google Sign-In (Google Identity Services), we exclusively receive the following data from your Google profile:

Full name (display name);
Email address;
Profile picture (if available).

We do not access your Google password, contact list, calendar, documents, or any other Google account data. You may revoke this access at any time at myaccount.google.com/permissions.

Cookies and similar technologies

We use the following types of cookies:

Strictly necessary: login session (x-listener-token), language preference;
Analytical: Google Analytics (GA4) for audience insights;
Functional: player state (mute/volume), chat preferences.

By accepting the cookie banner displayed on your first visit, you consent to the use of all listed types. You may manage cookies at any time in your browser settings, although this may affect website functionality.

Information relating to children

We do not knowingly collect personal information from children under the age of 16 without verifiable parental or legal guardian consent.

C. USE AND DISCLOSURE OF INFORMATION

We base the processing of personal data on the following legal bases:

Performance of a contract: to provide our services, technical support, and process transactions.
Legitimate interests: statistical analysis, service improvement, and security.
Consent: marketing, newsletters, and communications about new programs and events.
Legal obligation: compliance with laws, including obligations to ECAD and regulatory authorities.

Disclosure to Third Parties

We share personal data only with the following providers, strictly for the indicated purpose:

Google (OAuth): authentication via Google Sign-In — we receive name, email, and profile picture;
Appolis: knowledge vault, accounts, content, and permissions platform operated and managed by us to coordinate the website, Android app, and iOS app;
Mercado Pago: PIX payment processing for the Skip-the-Line system;
Resend: transactional email delivery (account verification, password recovery);
Google Analytics (GA4): aggregated and anonymous audience metrics;
ACRCloud / ECAD: music track identification for copyright compliance;
Infrastructure and hosting: storage, databases, website/app delivery, backups, monitoring, and operational security.

We do not sell personal data and do not share your data with other companies for third-party behavioral advertising. We share data only with operators necessary to deliver, protect, measure, and fulfill legal obligations of the services. All providers operate under confidentiality, security, and purpose limitation agreements.

ECAD and Copyright

Westside Radio is an active contributor to ECAD (Escritório Central de Arrecadação e Distribuição). Technical music reproduction data is shared with ECAD exclusively for copyright and royalty distribution purposes, as required by Brazilian law.

Audiovisual Content — Music Videos and Clips

Music videos and clips displayed on the Westside Radio platform are official reproductions embedded via YouTube iframe (YouTube Embedded Player), in compliance with the YouTube API Terms of Service .

Westside Radio does not host, store, copy, or redistribute music videos or clips on its servers. All audiovisual content is served directly from YouTube/Google servers through the official embedded player. Responsibility for the availability, licensing, and moderation of audiovisual content lies with YouTube and the respective copyright holders who published the material on that platform.

Regarding music content (audio): Westside Radio exclusively hosts audio files in MP3 format, duly curated and reported to ECAD via integration with ACRCloud for automatic copyright reporting. The radio station is an active contributor to ECAD and operates in full compliance with Brazilian copyright law.

D. YOUR RIGHTS (LGPD)

In accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018), you have the right to:

Confirm the existence of data processing;
Access, rectify, or request the deletion of your personal data;
Request the anonymization, blocking, or elimination of unnecessary data;
Request the portability of data to another provider;
Be informed about entities with which we share your data;
Revoke your consent at any time;
File a complaint with the National Data Protection Authority (ANPD).

How to Delete Your Account and Your Data

In compliance with Google Play Data Safety guidelines and Art. 18, VI of the LGPD, you have the right to request the deletion of your account and all associated personal data.

To exercise your right to data deletion, visit our dedicated deletion page at:
https://westside.tv/deletar-conta

Alternatively, you may access your profile and click on "Delete Account". All your personal data will be permanently removed within 30 days, except for records strictly necessary for compliance with legal or tax obligations (e.g., ECAD reports for artist copyright).

E. YOUR RIGHTS (GDPR — EU/EEA Residents)

If you reside in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) grants you the following additional rights over your personal data:

Right of access (Art. 15): obtain confirmation and a copy of the personal data being processed;
Right to rectification (Art. 16): correct inaccurate or incomplete personal data;
Right to erasure (Art. 17): request the deletion of your personal data ("right to be forgotten");
Right to restriction of processing (Art. 18): restrict processing in certain circumstances;
Right to data portability (Art. 20): receive your data in a structured, commonly used, and machine-readable format;
Right to object (Art. 21): object to processing based on legitimate interests or direct marketing;
Right against automated decision-making (Art. 22): not be subject to decisions based solely on automated processing.

To exercise any of these rights, contact our DPO at dpo@protectdata.com.br. We will respond within 30 days. You also have the right to lodge a complaint with a Data Protection Authority in your country of residence.

F. YOUR RIGHTS (PIPEDA — Canadian Residents)

If you reside in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) grants you the following rights:

Right to knowledge: know what personal data we hold about you and how it is used;
Right of access: request access to your personal data held by us;
Right to correction: challenge the accuracy of your data and request corrections;
Right to withdraw consent: revoke your consent for the collection, use, or disclosure of personal data, subject to legal or contractual restrictions;
Right to complain: file a complaint with the Office of the Privacy Commissioner of Canada (OPC).

To exercise your rights under PIPEDA, contact us at dpo@protectdata.com.br.

G. INTERNATIONAL DATA TRANSFERS

Westside Radio is a Brazilian company and your personal data is primarily stored and processed in Brazil. However, by using our services, your data may be transferred to providers in other countries, including:

Google LLC (USA): authentication (Google Sign-In), analytics (GA4), and video playback (YouTube Embedded Player);
Mercado Pago (Argentina/Brazil): PIX payment processing;
Resend (USA): transactional email delivery;
ACRCloud (International): music track identification for ECAD reports;
Appolis and infrastructure providers: technical processing, databases, backups, logs, security, and service delivery in environments managed by us.

These transfers are carried out based on the following safeguards, as applicable:

Explicit consent of the data subject (Art. 33, II of the LGPD);
Standard contractual clauses approved by the ANPD;
Adequacy decision by the European Commission (for transfers under the GDPR);
Contractual commitments ensuring a level of protection equivalent to that of Brazilian legislation.

All international providers are contractually required to protect your data with security standards equivalent to or higher than those required by the LGPD and the GDPR.

H. DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, tax, and regulatory obligations:

Account data (name, email, photo): for the duration of the active account + 30 days after deletion;
Financial transaction data: 5 years after the transaction (Brazilian tax obligation);
Technical logs (IP, browser): 6 months;
Artistic content data: for as long as there is an active license granted by the artist;
ECAD/ACRCloud reports: permanent (legal copyright obligation).

After the retention period expires, data is anonymized or permanently deleted from our systems.

Security Incident Response (Data Breach)

In the event of a security incident that may pose a risk or relevant harm to data subjects, Westside Radio will:

Notify the National Data Protection Authority (ANPD) within 72 hours of discovering the incident, pursuant to Art. 48 of the LGPD;
Notify the relevant supervisory authority (European DPA, Canadian OPC), as applicable;
Inform affected data subjects within a reasonable timeframe, describing the nature of the compromised data, the measures taken, and recommendations for mitigation;
Internally document all incidents, their causes, and corrective measures implemented.

I. DATA PROTECTION OFFICER (DPO)

To exercise your rights or clarify questions about the processing of personal data, contact our Data Protection Officer (DPO):

Data Protection Officer (DPO)

Email: dpo@protectdata.com.br

J. DATA SAFETY AND GOOGLE PLAY COMPLIANCE

For full transparency and in compliance with Google Play Store requirements (Data Safety), we declare the following details about data collection, use, and sharing in the Android application:

1. Data Collected

Personal information: name, email, and user/account IDs used for login, profile, support, security, and account management.
Financial information: purchase history, payments, or transactions linked to paid features, support, contracted services, or Skip-the-Line, when used.
Photos: profile picture/avatar and images voluntarily uploaded by users, artists, or authorized administrators.
Music/audio files: tracks, demos, jingles, and other audio files voluntarily uploaded by artists or authorized administrators.
App activity: chat messages, interactions, votes, preferences, player/broadcast usage, security events, diagnostics, and crash reports.

2. Purposes of Use

App functionality: login, profile, player, chat, voting, artist portal, publications, payments, and delivery of requested features.
Analytics: audience metrics, stability, performance, and experience improvement.
Developer communications: transactional messages, account notices, support, confirmations, and service-related communications.
Security, fraud prevention, and compliance: authentication, access control, auditing, abuse prevention, fulfillment of legal obligations, and incident response.
Personalization: user preferences, player experience, content, and relevant features.
Account management: creation, authentication, recovery, update, suspension, and deletion of accounts.

3. Data Sharing

We do not sell user data.
We do not share data with other companies for third-party behavioral advertising.
Sharing occurs only with operators necessary for functionality, analytics, communications, payments, security, infrastructure, and compliance, such as Google, Mercado Pago, Resend, Appolis, hosting providers, ACRCloud, and ECAD.

4. Security Practices

Encryption in Transit: All data transferred between your application and our servers is encrypted through a secure HTTPS connection (TLS 1.2+).
Access control: administrative areas are protected by authentication, role-based permissions, secure sessions, and audit logs.
Data deletion and management: We offer a clear and accessible web mechanism for users to request full or partial deletion of their data, available at westside.tv/deletar-conta. This Policy also remains available at westside.tv/politica-de-privacidade.

K. SECURITY AND PROTECTION

We employ appropriate security technologies and procedures (encryption, firewalls, access controls) to protect your personal data against loss, misuse, alteration, or unauthorized destruction.

The operational backbone of Westside is coordinated by Appolis, treated as the content, accounts, permissions, and knowledge vault of the platform. Administrative access is restricted by role, by tenant/client, and by verified sessions, keeping the website, Android, and iOS synchronized through the same data source.

L. CHANGES

This Privacy Policy may be updated periodically. Significant changes will be communicated through our Website. The most recent version will always be available at westside.tv/politica-de-privacidade.