Privacy policy
Version 2.11 · 6 October 2026 · Just B Entertainment (iDJ Recordpool), KvK 86821083 · support@idjrecordpool.com
iDJ Mobile · contact and remote importing (4 October 2026)
The mobile community is optional. Only after activating your DJ profile can other active members see your chosen DJ name and your chosen avatar or profile photo and send a contact request. Your phone number and account email address are not shared in the member list, chat or calls to other members. Within iDJ, calling takes place via your public profile ID. Chatting is only possible after the recipient accepts the contact request. For every audio or video call, the recipient decides separately whether to accept the call. The microphone and camera are only requested after that acceptance. You can remove or block a contact and hide your profile. Hiding your profile also removes your contact permissions and ends calls.
iDJ stores DJ profiles, the chosen avatar or profile photo, contact choices, block lists and chat messages on its own server for these features. A self-chosen profile photo is only uploaded on Save and stored as a small JPEG without EXIF or GPS metadata. The photo is not available via a public photo link. Other members can only request it via a valid, visible community profile; in the case of mutual blocking this is not possible. You can replace or remove the photo by choosing an avatar or initials. In the case of an account deletion request, the stored profile photo is removed immediately. Chat messages are available for a maximum of 90 days and up to a maximum of 1,000 messages per contact pair. Call signaling is no longer available after two minutes or when the call ends. Expired messages and signaling are removed in the next cleanup round; this runs every minute. Audio and video are transmitted encrypted via the own connection server and are not recorded. In doing so, the server temporarily processes connection data such as the IP address. An accepted contact does not directly see your IP address via this call connection. Chat messages are not end-to-end encrypted messages; the server processes the message text.
Importing from the phone requires a separate, explicit link with your own computer. This processes the account ID, computer name, platform, last connection, a secure link and import status. A link expires after 90 days and can be revoked in the app. Open jobs expire after seven days; completed import jobs disappear from the mobile queue after 30 days. iDJ Importer waits until the chosen DJ program is closed and uses the existing import and backup function. This permission does not grant permission to share play history. Imports that have already started may finish safely. For access to or deletion of mobile data, you can contact us via support@idjrecordpool.com.
1 · Data controller and contact
Just B Entertainment (sole proprietorship, Dutch Chamber of Commerce (KvK 86821083)), trading as iDJ Recordpool and established at Vinckenbrinckstraat 205, 3066 PN Rotterdam, is responsible for the processing described below. Privacy questions and requests: support@idjrecordpool.com. Any data protection officer: not applicable. This statement applies to the website, the account, payments and the importer; a separate cookie statement may be required.
2 · Which data does iDJ process?
| Category | Purpose and possible legal basis | Retention period |
|---|---|---|
| Account data: email address, account ID, secure password representation, membership status | Providing account, authentication and Premium; performance of the agreement | Until deletion of the account, then a maximum of 90 days in backups |
| Login with a confirmation link by email (logging in with only your email address, and at every password login of a Skool member): the link is stored only as a cryptographic hash, together with the IP address of the device that asks to log in. iDJ compares that IP address with the one of the device that opens the link; the login only works from the same IP address or in the browser that asked to log in | Login, security and preventing account sharing; performance of the agreement and legitimate interest | The link is valid for 15 minutes and works once; then the request and the IP addresses are deleted, at most 20 minutes after the request |
| For members of the iDJ Skool community, from the Skool member export: email address, membership tier, price and billing interval, join date. No names, phone numbers or answers to questions. | Granting the access that comes with the Skool membership (Starter or Premium) and ending it after leaving the community; performance of the agreement | As long as the Skool membership or the iDJ account exists; earlier deletion on request |
| DJ rank (EMERGING, RISING, ESTABLISHED, HEADLINER or ICON) that iDJ assigns by hand, with the date, who assigned it and whether you want to be on the ranking | Showing your rank on your Dashboard and on the ranking for logged-in members. From RISING up, other logged-in members see your rank and your DJ name there (without a DJ name you are not listed); your email address is not shown. You can hide yourself via My Account › Privacy. Legitimate interest | As long as the account exists |
| Press photo (optional) that you add yourself in My Account, stored on iDJ's own server | Only to show your own DJ card on your Dashboard; other members do not see the photo. You can replace or delete it at any time in My Account. Consent | Until you delete the photo; at the latest until the account is deleted (it is deleted with it) |
| Payment and invoice data, transaction references | Payment, subscription management and tax administration; agreement and legal obligation | For tax data usually seven years; determine categories exactly |
| Optionally shared iDJ play data from rekordbox and Serato DJ Pro 4: CuePack and track identification, title, artist, source program, play date and time, session code and sequence number; limited track characteristics, country derived from the IP address and location based on the computer location (rounded to approximately 1 km). No audio, local paths, other tracks or personal notes. | Usage statistics, Trending iDJ Tracks and targeted offers based on what, when and where you play; legal basis: legitimate interest of iDJ (insight into the use of iDJ tracks and compiling the chart), with the right to object. Turning it off has no consequences for downloading or importing. The public chart contains no names or email addresses of members. | As long as the membership is active and a maximum of one year after it ends; earlier deletion via Account or on request. |
| Device link and key/token | Linking the importer to the account, checking access and security; agreement and/or legitimate interest | According to the current design, a maximum of one year per link, unless revoked earlier |
| Import, download and error status, limited technical logs | Operation, support and fault investigation; agreement/legitimate interest | a maximum of 90 days |
| IP address, security events and login attempts | Security and abuse prevention; legitimate interest | server logs a maximum of 30 days; temporary blocks according to the current design approximately 15 minutes |
| Network part of the IP address (/24 for IPv4, /48 for IPv6) and its country, when using the website while logged in, when the iDJ Importer makes contact and when a login email is opened on a different network than the one where it was requested; for computers with the iDJ Importer a hashed hardware ID and the MAC address | Security and preventing account sharing: only to detect shared accounts. The owner or an administrator appointed by the owner reviews every alert; there are no automated decisions or blocks. Legitimate interest | Networks a maximum of 90 days after last use; computer data (also computer name, operating system and the network part of the last contact) until 12 months after the iDJ Importer's last contact, or until you turn off sharing your play history |
| Version of the terms, time and manner of agreement | Demonstrating which contract terms have been accepted; agreement and legitimate interest | as long as the account exists and thereafter a maximum of 5 years (limitation period) |
| Support messages and correspondence | Handling questions and complaints; agreement/legitimate interest or legal obligation | a maximum of 2 years after handling |
The current importer limits reading and sharing to recognized iDJ tracks in the managed iDJ folders and only does so as long as sharing is not turned off. Article 8 of the general terms and conditions describes the fields sent along and how it works. For the play history, rekordbox and Serato libraries are only read; plays are not added or modified. Serato 3 history is not supported. The version and time of the choice are recorded with the account. An earlier choice not to share is retained and the data is not used for new purposes.
3 · Why and on what legal basis?
Account, payment and necessary security data are processed on the appropriate legal basis for each. We use iDJ play data on the basis of our legitimate interest for usage statistics, Trending iDJ Tracks and targeted offers based on what, when and where you play. You can always object to use for offers; then we stop doing so. We have weighed that interest against your privacy: only recognized iDJ tracks, no audio, file paths or other tracks, and you can always object. With this we count all collected real plays of iDJ tracks and compare the ranking with the standing a week earlier. The importer synchronizes at startup and approximately every two minutes while the app is running; during imports or updates this check is skipped. The owner and designated iDJ administrators can view individual data with the account; other members only see the collective chart without names or email addresses of members. This data is not sold or used for targeted advertising. We do not use it for solely automated decisions with legal effects. Objecting and turning off sharing has no consequences for your account access, downloads or imports.
4 · Source, automated processing and consequences
iDJ receives account data from the user, payment status from the payment provider, the membership tier of members of the iDJ Skool community from the Skool member export and the optional iDJ play history from the local rekordbox or Serato environment via the importer. The access control checks the account status for new downloads and imports. Existing music files are not blocked or modified by this. Refusing or withdrawing permission for play data does not lead to an access block. In the case of an unjustified block, the user can contact us via support@idjrecordpool.com.
5 · Recipients and processors
Within iDJ, only authorized persons get access for their task. The owner and the designated Premium administrator can view individual iDJ play data with the account via their protected portal and usage reports. The public Trending iDJ chart contains only collective play counts and rank movements, no names or email addresses of members. Suppliers for the service may include, among others, OVH (hosting), Stripe (payments), Dropbox (storage and delivery) and the email service provider, insofar as they are used for the relevant function. Data is not sold.
6 · Transfer outside the EEA
If a supplier processes data outside the European Economic Area or makes it accessible from there, iDJ states the country, the transfer mechanism and the available safeguards: Stripe, Supabase and Dropbox may process data in the United States; that transfer takes place on the basis of the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. A mention of a European server location alone does not prove that there is no transfer. The user can request information about the relevant safeguards via the privacy contact.
The native iDJ app uses secure app sessions with an account ID, device name, creation and expiry time and only hashes of access tokens on the server. An access token is valid for 15 minutes. The refresh token rotates on use; the session expires at the latest 30 days after login and can be revoked earlier. Expired or revoked sessions and tokens are cleaned up after one day on the next app request. For community reports, iDJ stores the reporter, the reported profile, reason, optional explanation and, in the case of a reported message, a copy of it for authorized administrators. Handled reports are removed after 90 days on the next administration or reporting action; handling notes in the administration log and handled deletion requests after 180 days. Open cases remain available for handling. Via Delete account in the app or idjrecordpool.com/account-deletion, a user can submit a deletion request with password confirmation. This immediately disables the mobile sessions, community access and linked import devices. The actual account and data deletion is assessed and handled manually; a request confirmation is not a completed deletion. Imports that have already started on your own computer are not forcibly aborted.
7 · Retention, deletion and backups
iDJ does not retain personal data longer than necessary for the stated purpose, except where a statutory retention obligation or a specific dispute justifies longer retention. Via My Account → Privacy, the user can turn off sharing (object) and delete shared history. The active history and link are then removed. A minimal record of that choice prevents a subsequent import from automatically enabling sharing again. Limited copies in backups disappear according to the applicable retention period of a maximum of 90 days and are not reused for ordinary purposes in the meantime. Requests can also be sent to support@idjrecordpool.com.
8 · Rights of data subjects
Depending on the situation, the user can request access, correction, deletion, restriction and portability of data. He or she can object to processing on the basis of legitimate interest and withdraw consent for processing on the basis of consent. For direct marketing there is an unconditional right to object. iDJ responds in principle within one month and may, for a complex request, extend within the legal limits with an explanation. Identity verification takes place proportionally. A complaint can be filed with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and a dispute can be submitted to the competent court.
These rights continue to apply even if a user has accepted the terms. Objection to the use of iDJ play data can always be made, without losing access to downloads or imports. For necessary account, security and administrative data, the separate purposes and legal bases in this statement apply.
9 · Security and incidents
iDJ uses appropriate technical and organizational measures, including HTTPS, access restriction and secure storage of authentication means. After verification, also describe encryption, logging, backups, management of administrator rights and incident procedures: passwords and device keys are stored only as a hash (PBKDF2 and SHA-256 respectively), connections run via HTTPS, administration functions are shielded for the owner and the designated administrator, login attempts are limited, and backups are made before changes to the database. Passwords should be stored hashed with a suitable method; do not call them “encrypted” without technical verification. In the case of a data breach, iDJ acts in accordance with the notification and information obligations of the GDPR.
10 · Cookies, changes and contact
The website may use necessary cookies for login and security. iDJ uses only necessary cookies for login, security and language choice; no analytics, tracking or marketing cookies are placed. This privacy statement may change when the service or processing changes. In the case of material changes, iDJ informs users appropriately before the change; a new processing activity is given the required legal basis and information. The version and date are shown at the top. Questions: support@idjrecordpool.com.
Terms and conditions · Privacy policy · Back to the recordpool →