top of page

Shpap Privacy Policy

Effective date: September 23, 2026
 

Shpap Inc. (“Shpap,” “we,” “us”) is a Delaware corporation with its principal office at 408 Bryant Cir, Ojai, California 93023. This policy explains what information we collect through shpap.net, the Shpap service and our software (together, the “Service”), how we use it, and the choices you have. By using the Service you agree to this policy.

The Service is offered only to people and businesses in the United States. We do not accept registrations or accounts from the European Economic Area, the United Kingdom or Switzerland.
 

1. What Shpap does

Shpap registers sound recordings for their owners. When a recording is registered, an inaudible identifier is embedded in the audio, and a registration record naming the owner is created. A cryptographic fingerprint of that record (a hash) is written to a public blockchain so the date of registration can be proven later. If the recording is later found in use, Shpap can read the identifier back from the audio and produce a report of what was measured.


2. Information we collect

Information you give us

  • Contact details: name, email address, and anything you write to us through the contact form or by email.

  • Account and registration details: your name, email address, and the ownership information you supply for a recording, such as owner name, copyright line, and credits.

  • Audio files: the recordings you upload for registration, and the registered copies we return to you.

  • Authorizations: if you register a recording on behalf of an artist, the artist’s signed authorization, or a record that it was signed.

  • Payment details: if you buy a paid service, payment is handled by our payment processor. We do not store full card numbers.

Information created when you use the Service

  • Registration records: the registration record for each recording, which includes the owner name you supplied, file hashes, the identifier embedded in the recording, and the date.

  • Reports: reports we produce for you, including information about where and when a registered recording was found.

Information collected automatically

  • Usage and device information: IP address, browser type, pages visited, and similar technical data, collected by our website host and service providers when you visit shpap.net or use the Service.

  • Cookies: see section 6.

Information about other people that we process for you

When we monitor for a registered recording, we process public information about online content, such as video titles, channel names, and web addresses. This is information that uploaders have made public. We process it only to look for your registered recordings.


3. How we use information

  • To provide the Service: register recordings, create and keep registration records, produce reports, and respond to you.

  • To confirm that a person registering a recording owns it or is authorized to register it.

  • To communicate with you about your account, your registrations, and changes to the Service.

  • To keep the Service secure, prevent misuse, and meet legal obligations.

  • To improve the Service, using aggregated information that does not identify you.

We do not sell your personal information. We do not use your information for advertising.
 

4. How we share information

  • Service providers that host, store, or process data for us, under terms that limit their use of it to providing services to Shpap. These include our cloud hosting provider, our code and record storage provider, our website host, our audio recognition provider, and, when we take payments, our payment processor.

  • The public blockchain. The hash of each registration record is written to a public blockchain. A hash does not reveal the record’s contents, but it is public and permanent.

  • People you choose to share with. A registration certificate or report is yours to share. If you give one to a lawyer, a buyer, or a platform, that is your choice.

  • Legal reasons. When required by law, subpoena or court order, or to protect the rights, safety or property of Shpap, our users, or others.

  • Business transfers. If Shpap is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction, and this policy will continue to apply to it.
     

5. YouTube API Services

The Service uses YouTube API Services to search public information about videos on YouTube. By using the Service you are also subject to the Google Privacy Policy, available at http://www.google.com/policies/privacy.

  • We use YouTube API Services to search public video information, such as titles, descriptions, channel names, and web addresses.

  • We do not access any YouTube account, and we do not ask you to connect one.

  • You can review or remove any app's access to your Google account at any time on the Google security settings page, https://security.google.com/settings/security/permissions.

  • We keep information obtained from YouTube API Services for no more than 30 days, after which we delete or refresh it. We do not keep public statistics, such as view counts, for more than 30 days.

  • If a report delivered to you refers to a YouTube video, the report keeps only the video's ID and the date it was checked.

  • We do not create new data or metrics derived from YouTube API data.

​

6. Cookies and similar technologies

shpap.net is hosted on Wix, which places cookies and similar technologies on your device. Strictly necessary cookies (for example, Wix’s security and session cookies) run the site and keep it secure, and are always set. Other cookies, such as those that remember preferences or measure site traffic, are set only where you allow them. Where the law requires it, we ask for your consent before non-essential cookies are set. You can control cookies through your browser settings; blocking some cookies may affect how the site works.

We do not allow third parties to serve advertisements on shpap.net.
Our cookie banner is provided by Usercentrics and uses its standard wording; shpap.net does not display advertisements or use cookies for advertising.

Do Not Track. Browsers can send a “Do Not Track” signal. There is no common standard for responding to it, and the Service does not currently change its behavior when it receives one.
 

7. Registration records are permanent

A registration record is a dated record of who registered a recording. Its value depends on nobody, including Shpap, being able to change or backdate it. For that reason:

  • A registration record is never edited after it is created. Corrections are made by a new record that refers to the original.

  • The hash written to the public blockchain cannot be removed by anyone.

  • If you ask us to delete a registration, we will mark the record withdrawn, stop monitoring for the recording, and delete the contact details and files we hold outside the record. The record itself, including the owner name in it, and the blockchain entry remain.

Please consider this before you register a recording.
 

8. How long we keep information

  • Registration records: permanently, as described in section 7.

  • Audio files you upload: for as long as needed to provide the Service to you, or as you instruct us.

  • Reports: for as long as your account is active, and afterward as long as needed to support the report’s reliability and to meet legal obligations.

  • Contact form messages and email: as long as needed to respond and keep a record of the conversation.

  • YouTube API data: as described in section 5.
     

9. Your choices and rights

You can ask us to:

  • tell you what personal information we hold about you,

  • correct information that is wrong (for registration records, by a correcting record, as in section 7),

  • delete information, subject to section 7 and to what the law requires us to keep, or

  • stop sending you non-essential email.

To make a request, email us at the address in section 12. We will respond within 30 days. Depending on where you live, you may have additional rights under local law, and we will honor them.
 

10. Security

We use reasonable administrative, technical and physical measures to protect information, including access controls and encrypted connections. No system is completely secure, and we cannot guarantee the security of information sent over the internet.
 

11. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. A person under 18 who wants to register a recording must do so through a parent or legal guardian. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes and contact

We will post any change to this policy on this page with a new effective date. If a change is material, we will also notify registered users by email before it takes effect.
 

Questions or requests: privacy@shpap.net, or by mail to Shpap Inc., 408 Bryant Cir, Ojai, California 93023.

bottom of page