Privacy Policy

1. Introduction

IMU, LLC ("IMU," "we," "us," or "our"), a Florida limited liability company operating under the trade names IMUTV, IMUP3, and IM Collectibles, is committed to protecting the privacy and security of your personal information. This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect information when you access or use our websites, applications, and services (collectively, the "Service"), including:

• IMUTV (www.imutv.tv) — interactive video streaming and live broadcast platform
• IMUP3 — interactive audio streaming and podcast application
• IM Collectibles (www.imcollectibles.io) — digital collectibles and NFT marketplace on the XRP Ledger
• IMU Merch Store — physical merchandise e-commerce platform

This Policy applies to all users worldwide, including Users, Creators, purchasers, and visitors. By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, please do not use the Service.

2. Information We Collect

We collect information in three categories: information you provide directly, information collected automatically, and information from third-party sources.

2.1 Information You Provide Directly

Account Registration

• Email address
• Username / display name
• Password (stored in encrypted/hashed form)
• Date of birth (for age verification 18+ requirement)
• Country / region of residence

Creator Profile Information

• Artist or brand name, biography, profile photo
• Genre and content category preferences
• Tax identification information (W-9 or W-8BEN for payout processing)
• Payment information for receiving payouts (bank account details or XRPL wallet address)
• PRO affiliation and songwriter/publisher credits

Content and Metadata

• Audio files, video files, images, podcasts, and other creative works submitted by Creators
• Associated metadata: track titles, artist names, ISRCs, UPCs, songwriter credits, cue sheets, album art, content descriptions, and content ratings

Transaction Information

• Purchase history (subscriptions, pay-per-view, merchandise, digital collectibles)
• Billing information (processed by Stripe; we do not store full credit card numbers)
• XRPL wallet addresses for cryptocurrency transactions (public blockchain data)
• XRP dynamic pricing data: Price Quotes (USD amount, XRP/USD exchange rate, calculated XRP amount), Exchange Rate Oracle source and rate at time of transaction, XRPL transaction hashes, and settlement confirmation data
• Shipping addresses for merchandise orders
• RLUSD and XFT transaction data: payment amounts, USD-equivalent values, internal XFT valuation rates at time of transaction, settlement confirmation data, and XRPL transaction hashes
• XFT Streaming Rewards data: per-hour streaming accrual records (qualifying seconds, XFT earned, viewer or creator role), payout transaction hashes, wallet address snapshots at time of accrual, batch payout logs, and Carryover Expiry records
• IM Collectibles Feature data: Burn 2 Earn submissions (design descriptions, X handles, email addresses, reference images, burn transaction hashes), Frequency Fountain snapshot records, Tasks & Rewards point balances and conversion records, Champion of Frequencies gameplay statistics, and IMU Airdrop claim records
• Creator Plan and billing data: Plan tier selection (Hobby, Beginner, Streamer, Devoted), billing status, plan change history, storage add-on purchase records, Subscriber Tier configurations, and Devoted Plan custom configuration details
• Tipping records: tip amounts, payment method (Stripe or XRPL), recipient and sender wallet addresses for XRPL tips, and timestamps

Communications

• Customer support inquiries and correspondence
• DMCA notices, counter-notifications, and rights dispute communications
• Feedback, surveys, and promotional responses

2.2 Information Collected Automatically

Usage and Streaming Data

• Stream and play data: What content was played (track/video title, ISRC), when it was played, duration of play, skip events, and which account initiated the stream. This data is collected to fulfill our legal obligations to report to Performing Rights Organizations (ASCAP, BMI, SESAC, GMR, SOCAN), The Mechanical Licensing Collective (MLC), and other rights administration bodies.
• Browsing behavior: pages visited, search queries, content interactions (likes, saves, playlist additions)
• Live stream viewing data: join/leave times, chat participation

Device and Technical Information

• Device type and model (e.g., Roku, Fire TV, iPhone, Android)
• Operating system and version
• Browser type and version (for web access)
• Screen resolution and display capabilities
• Unique device identifiers (device ID, advertising ID)
• App version

Network and Location Information

• IP address
• Approximate geographic location derived from IP address (city/region level used for content licensing compliance, royalty reporting by territory, and OFAC sanctions screening)
• Internet service provider
• Connection type and speed

Cookies and Tracking Technologies

• Essential Cookies: Required for Service functionality (authentication, session management, security). Cannot be disabled.
• Analytics Cookies: Help us understand how Users interact with the Service (page views, feature usage, performance metrics). Can be disabled.
• Advertising Cookies: Used by our advertising partners to serve relevant ads on the AVOD (free, ad-supported) tier. Can be disabled.

For details on managing cookies, see Section 11 (Cookie Policy).

2.3 Information from Third-Party Sources

• Payment Processors: Stripe may provide us with transaction confirmation data, fraud risk assessments, and payment status updates.
• Blockchain Data: XRPL transaction data is publicly available on the blockchain. We may access public wallet transaction histories to verify Digital Collectible ownership and transaction status.
• App Store Platforms: Apple, Google, Roku, and Amazon may share limited information related to app downloads, subscriptions managed through their platforms, and crash/performance reports.
• Analytics Providers: Third-party analytics services may provide aggregated or de-identified usage insights.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Operations

• To create and manage your account
• To deliver, personalize, and improve the Service
• To process transactions, subscriptions, and merchandise orders
• To distribute Creator content across platforms
• To facilitate XRPL-based transactions for IM Collectibles

3.2 Licensing and Royalty Compliance

This is a critical function of our data collection. We collect and process streaming/play data (including ISRCs, play counts, and territory information) to:

• Report usage to Performing Rights Organizations (ASCAP, BMI, SESAC, GMR, SOCAN) for public performance royalties
• Submit monthly usage reports to The Mechanical Licensing Collective (MLC) for mechanical royalties
• Report to international Collective Management Organizations (CMOs) as required by territory
• Calculate and distribute Creator subscription and pay-per-view revenue based on actual usage
• Maintain records required by the Music Modernization Act and applicable copyright statutes

3.3 Communications

• To respond to inquiries, support requests, and DMCA/rights disputes
• To send transactional notifications (payment confirmations, subscription renewals, content status updates)
• To send promotional communications (with your consent; you may opt out at any time)

3.4 Safety, Security, and Legal Compliance

• To detect, prevent, and respond to fraud, abuse, security incidents, and technical issues
• To enforce our Terms of Service and Acceptable Use Policy
• To comply with legal obligations, including OFAC sanctions screening, AML monitoring, tax reporting (1099/W-9), and law enforcement requests
• To protect the rights, property, and safety of IMU, our Users, Creators, and the public

3.5 Analytics and Improvement

• To analyze usage patterns and improve Service features, content recommendations, and user experience
• To conduct internal research and development
• To measure advertising effectiveness on the AVOD tier

3.6 Advertising

• To serve advertisements on the free, ad-supported (AVOD) tier of the Service
• To provide aggregated, de-identified audience insights to advertisers (we do NOT sell your personal data to advertisers)

3.7 XFT Rewards and Feature Program Calculation

We use streaming, play, and engagement data (content played or watched, duration, user account, device type, heartbeat signals, NFT holdings, and connected wallet addresses) to calculate, distribute, and audit XFT rewards across the XFT Streaming Rewards Program, Frequency Fountain, Tasks & Rewards, Champion of Frequencies, Burn 2 Earn, IMU Airdrops, and Redeem (when activated). This processing is necessary for the operation of these promotional reward programs and is based on our legitimate interest in operating the programs, your participation in them, and our obligation to maintain accurate records for tax reporting and compliance purposes. We also use this data for fraud detection and anti-gaming enforcement. Specific uses include: (a) calculating viewer and creator XFT accruals based on qualifying streaming time; (b) generating daily Frequency Fountain snapshot records based on wallet contents; (c) tracking points earned and converted to XFT through Tasks & Rewards and Champion of Frequencies; (d) processing Burn 2 Earn submissions and matching them to subsequent custom NFT mints; (e) maintaining airdrop eligibility lists and claim records; and (f) calculating Redeem program distributions if and when the program becomes active.

4. Legal Bases for Processing (GDPR / International Users)

For Users in the European Economic Area (EEA), United Kingdom, and other jurisdictions that require a legal basis for processing personal data, we process your information based on the following:

You may withdraw consent at any time without affecting the lawfulness of processing performed prior to withdrawal.

5. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

5.1 Rights Administration Bodies

We share streaming/play data with the following organizations as required by law to ensure proper royalty distribution:

• Performing Rights Organizations: ASCAP, BMI, SESAC, GMR (U.S.), SOCAN (Canada), and other international CMOs as applicable
• The Mechanical Licensing Collective (MLC): Monthly usage reports required under the Music Modernization Act
• International CMOs: CMRRA/CSI (Canada), PRS/MCPS (UK), and others as we expand internationally

Data shared with these organizations consists of streaming metadata (ISRCs, play counts, territories) and does not include personal User account information (email, name, payment details).

5.2 Payment Processors

• Stripe: Processes fiat currency transactions. Stripe receives payment card information directly and is PCI-DSS compliant. See Stripe's Privacy Policy at stripe.com/privacy.
• XRPL: XRP, RLUSD, and XFT transactions are recorded on the public XRP Ledger blockchain. Wallet addresses and transaction amounts are publicly visible and immutable. XRPL wallet addresses connected to your IMU account are used for: (a) processing XRPL payment transactions; (b) delivering XFT Streaming Rewards Program payouts; (c) delivering Frequency Fountain daily rewards; (d) processing Burn 2 Earn burn transactions and Firepit Protector deliveries; (e) processing Tasks & Rewards XFT conversions; (f) processing IMU Airdrop claims; and (g) processing Champion of Frequencies game reward distributions. IMU stores a snapshot of your connected wallet address at the time of each accrual or qualifying event for audit, compliance, and tax reporting purposes. IMU does not custody your XRP, RLUSD, XFT, or any other tokens, and does not store your private keys or seed phrases.

5.3 Service Providers

We engage third-party service providers who process data on our behalf under contractual obligations:

• Cloud hosting and content delivery network (CDN) providers
• Email and notification service providers
• Analytics and performance monitoring tools
• Customer support platforms
• Fraud detection and prevention services
• Merchandise fulfillment and shipping partners

5.4 Advertising Partners

On the free, ad-supported (AVOD) tier, advertising partners may use cookies and similar technologies to serve relevant ads. We share:

• Aggregated, de-identified audience demographics
• Contextual information (content genre, platform)

We do NOT share your name, email address, payment information, or any personally identifiable information with advertisers.

5.5 App Store Platforms

Apple, Google, Roku, and Amazon receive limited data necessary for app distribution, in-app purchase processing, and crash reporting, subject to their respective privacy policies.

5.6 Legal and Safety Disclosures

We may disclose information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our Terms of Service or investigate potential violations
• Detect, prevent, or address fraud, security, or technical issues
• Protect the rights, property, or safety of IMU, our Users, or the public

5.7 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of our assets, your information may be transferred to the successor entity, subject to the commitments made in this Privacy Policy.

6. Data Retention

We retain your information only as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, and resolve disputes:

Additional Retention Categories. In addition to the categories listed above, the following data categories are subject to specific retention periods: (a) XFT Streaming Rewards Program records (accrual logs, payout transaction hashes, wallet snapshots, Carryover Expiry records) and other XFT distribution records (Frequency Fountain, Tasks & Rewards, Burn 2 Earn, Champion of Frequencies, Airdrops, Redeem) are retained for seven (7) years for financial audit compliance, tax reporting (fair market value documentation), fraud investigation, and reward dispute resolution. (b) Creator Plan and Subscription Data (plan tier history, billing status, plan transition records, storage add-on purchase records, Subscriber Tier configurations) is retained for the duration of the account plus one (1) year for service operation, billing dispute resolution, and plan transition audit purposes. (c) Tipping records (sender/recipient identifiers, amounts, payment method, timestamps) are retained for seven (7) years for tax reporting and dispute resolution. (d) Burn 2 Earn design submissions and reference images are retained for the lifetime of the corresponding Firepit Protector NFT plus three (3) years.

When retention periods expire, data is either deleted or irreversibly anonymized. Anonymized data that cannot reasonably be used to identify any individual may be retained indefinitely for analytics purposes.

7. Data Security

We implement administrative, technical, and organizational safeguards designed to protect your personal information:

7.1 Technical Safeguards

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Secure password hashing (bcrypt or equivalent)
• Regular security assessments and vulnerability scanning
• Access controls and role-based permissions for internal systems
• Intrusion detection and monitoring systems
• Secure API authentication and rate limiting

7.2 Organizational Safeguards

• Employee and contractor confidentiality obligations
• Privacy and security training for personnel handling personal data
• Incident response procedures for data breaches
• Vendor security assessments for third-party service providers

7.3 Payment Security

Credit card and payment information is processed by Stripe, which is PCI-DSS Level 1 certified. IMU does not store, process, or have access to full credit card numbers. XRPL transactions are secured by the blockchain's native cryptographic protocols.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

8.1 Rights Available to All Users

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Opt-Out of Marketing: Unsubscribe from promotional emails at any time using the "unsubscribe" link in any marketing email or by contacting privacy@imutv.tv.
• Cookie Preferences: Manage cookie preferences through our cookie consent banner or browser settings.

8.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: Request the categories and specific pieces of personal information collected about you, the sources, the business purpose, and the categories of third parties with whom it is shared.
• Right to Delete: Request deletion of personal information, subject to exceptions (legal obligations, completing transactions, security, internal analytics).
• Right to Opt-Out of Sale/Sharing: IMU does not sell personal information. IMU does not share personal information for cross-context behavioral advertising. If this practice changes, we will provide a "Do Not Sell or Share My Personal Information" link.
• Right to Limit Use of Sensitive Information: Request that we limit use of sensitive personal information to purposes necessary to perform the Service.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

How to Exercise: Submit requests to privacy@imutv.tv. We will verify your identity before processing requests and respond within 45 days (extendable by an additional 45 days with notice).

8.3 Additional Rights for Virginia, Colorado, Connecticut, and Other State Residents

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah, Montana, Oregon, Texas, and other states with comprehensive privacy laws may have additional rights including:

• Right to access, correct, and delete personal data
• Right to data portability
• Right to opt out of targeted advertising, sale of personal data, and profiling
• Right to appeal a denial of a privacy request

To exercise these rights, contact privacy@imutv.tv. Appeals may be submitted to the same address.

8.4 Additional Rights for EEA, UK, and International Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with GDPR-equivalent laws, you have additional rights:

• Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
• Restriction of Processing: Request that we restrict processing of your data in certain circumstances.
• Object to Processing: Object to processing based on legitimate interests, including direct marketing.
• Withdraw Consent: Withdraw consent at any time for processing based on consent, without affecting prior processing.
• Lodge a Complaint: File a complaint with your local Data Protection Authority (DPA).

8.5 Additional Rights for Canadian Users (PIPEDA)

Canadian users have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access, correct, and challenge compliance. Contact privacy@imutv.tv to exercise these rights or to file a complaint with the Office of the Privacy Commissioner of Canada.

9. Children's Privacy

The Service is restricted to individuals aged 18 and older. We do not knowingly collect, use, or disclose personal information from anyone under the age of 18. We implement age verification at account creation to enforce this requirement.

If we discover that we have inadvertently collected personal information from an individual under 18, we will promptly delete such information. If you believe a minor has provided us with personal information, please contact us immediately at privacy@imutv.tv.

10. International Data Transfers

IMU is based in the United States (Florida). If you access the Service from outside the United States, your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country.

10.1 EEA/UK Transfers

For transfers of personal data from the EEA or UK to the United States, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• The EU-U.S. Data Privacy Framework, where applicable
• Your explicit consent where no other mechanism is available

10.2 Canadian Transfers

We process data in the United States under contractual safeguards consistent with PIPEDA requirements for cross-border transfers. Canadian users acknowledge that their personal information may be processed in the United States.

By using the Service, you consent to the transfer of your information to the United States and the application of U.S. law to the processing of your data, subject to the protections described in this Policy.

11. Cookie Policy

We use cookies and similar tracking technologies on our websites and applications. This section describes what cookies we use and how you can manage them.

11.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. Similar technologies include web beacons, pixels, local storage, and device fingerprinting.

11.2 Types of Cookies We Use

11.3 Managing Cookies

• Browser Settings: Most browsers allow you to block or delete cookies through their settings menu.
• Do Not Track: We honor "Do Not Track" (DNT) signals sent by your browser. When DNT is enabled, we will not use non-essential tracking cookies.
• Mobile Devices: You can manage advertising identifiers through your device settings (iOS: Settings > Privacy > Tracking; Android: Settings > Privacy > Ads).

12. Blockchain and Digital Collectible Privacy

IM Collectibles operates on the XRP Ledger (XRPL), a public, decentralized blockchain. Users should be aware of the following unique privacy considerations:

• Public Ledger: XRPL transactions (wallet addresses, transaction amounts, NFT minting/transfers) are recorded on a public, immutable blockchain. This data is permanently visible to anyone and cannot be deleted or modified by IMU or any party.
• Wallet Address Pseudonymity: Your XRPL wallet address is pseudonymous. While it does not inherently contain your name or personal details, it may be linked to your identity if you have associated it with your IMU account or if third parties perform blockchain analysis.
• No Deletion of On-Chain Data: Deletion rights under CCPA, GDPR, and other privacy laws apply to data held in IMU's databases. They do NOT apply to data recorded on the XRPL blockchain, which is outside IMU's control. If you delete your IMU account, the association between your account and your wallet address will be removed from our systems, but on-chain transaction history will remain on the blockchain.
• Metadata Hosting: Digital content associated with NFTs may be hosted on IMU servers or decentralized storage (IPFS). If hosted by IMU, the content may be removed upon account deletion or rights dispute, but the NFT token itself will remain on-chain.

13. Third-Party Links and Services

The Service may contain links to third-party websites, apps, or services not operated by IMU. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party service before providing personal information. Key third-party services include:

• Stripe (payment processing): stripe.com/privacy
• Apple App Store (app distribution): apple.com/privacy
• Google Play (app distribution): policies.google.com/privacy
• Roku (CTV distribution): roku.com/legal/privacy-policy
• Amazon (Fire TV distribution): amazon.com/privacy

14. Do Not Sell or Share My Personal Information

IMU does not sell personal information. IMU does not share personal information for cross-context behavioral advertising as defined under the CCPA/CPRA.

If our practices change in the future, we will update this Policy, provide notice, and offer a clear opt-out mechanism, including a "Do Not Sell or Share My Personal Information" link accessible from every page of our website and applications.

To submit a privacy-related request, contact privacy@imutv.tv.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Service. When we make material changes:

• We will post the updated Policy on this page with a new "Last Updated" date.
• We will provide notice via email (to the address associated with your account) at least thirty (30) days before material changes take effect.
• We will display a prominent notice within the Service (app banner or in-app notification).

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Policy. If you do not agree with the changes, you should stop using the Service and delete your account.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: