How Urganize handles your data

Urganize (“we”, “our”, “us”) is a release management workspace for music teams, operated by The Urganization Ltd, a company registered in Nigeria.

For privacy questions, email contact@urganize.app.

Urganize is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal data, contact us and we will delete it.

Account data. Email address and password (or your Google account email if you sign in with Google), your name and role if you provide them, and your workspace settings.

Release data. Everything you put into the workspace: artists, releases, dates, tasks, comments, event milestones, teammates you invite (their email addresses), and the files you upload: masters, artwork, contracts, split sheets.

Billing data. Your plan, payment references, amounts, and subscription status. Card details go directly to Paystack and never touch our servers.

Usage and device data. Pages viewed, features used, IP address, browser and device information, and server logs for debugging and security.

Waitlist and survey data. If you joined our earlier waitlist or answer an in-product survey (via Formbricks), we keep what you submitted, typically your email and your answers.

— To provide and operate Urganize.

— To generate your release rollout plan and, when AI features are enabled, AI-tailored plans and status updates (see section 05).

— To improve performance, reliability, and the product itself.

— To communicate with you about your account and the product.

— To prevent fraud, abuse, and security issues.

We do not sell your personal data, and we do not share your release data with anyone except the service providers listed on our subprocessors page.

Urganize has two AI features: tailoring your release plan to your context, and generating a written status update from your release's current state. When you use them, the relevant release context (release details, task progress, not your uploaded files) is sent through our AI gateway to a third-party AI model provider solely to generate the output you asked for.

We do not use your content to train AI models, and we use providers whose terms do not train on customer API data. AI output is a draft for you to edit. The product works without it.

We use Google Analytics and Vercel Analytics on our marketing site, and PostHog and Vercel Analytics inside the app, to understand how Urganize is used. These tools may set cookies or collect device identifiers and usage events.

The app also stores your session and some workspace state in your browser's local storage so it loads fast and keeps you signed in. Clearing your browser storage signs you out.

In-app support runs through WhatsApp: the “chat with the founder” button opens a WhatsApp conversation. Anything you send there is processed by WhatsApp (Meta) under their own privacy policy. Don't send passwords or card details over chat; we will never ask for them.

App data and uploaded files are stored with Supabase; waitlist data is stored with Neon; the product is hosted on Vercel. These run on global cloud infrastructure, so your information may be stored and processed outside your country of residence. The full list of providers is on the subprocessors page.

Depending on where you live (including under the Nigeria Data Protection Act and the GDPR), you may have the right to access, correct, export, or delete your personal data, and to withdraw consent where processing is based on it.

To make a request, email contact@urganize.app from the address associated with your account.

You can delete your account yourself from Settings. It takes effect immediately and removes your releases, tasks, profile, and sign-in, and deletes your uploaded files. We may retain minimal payment records where required for accounting and legal compliance, and residual copies may persist briefly in encrypted backups before being overwritten.

Your data is protected with encryption in transit, row-level access controls in our database, and signed, expiring links for file access. No system can guarantee absolute security. If we learn of a breach affecting your data, we will notify you.

We update this policy when how we handle data actually changes, post the new version here, and change the date at the top. The date only moves when the text does.