Skip to content

Privacy Policy

Last updated: March 14, 2026

Overview

MonteraHQ (“Montera,” “we,” “us”) is an artist management platform operated by The Cabin Music Company Inc. dba Good People Only. This privacy policy describes how we collect, use, store, protect, and delete your data when you use MonteraHQ.

What We Collect

When you connect social media accounts to MonteraHQ, we collect the following data from platforms you explicitly authorize:

  • YouTube: Channel statistics, video metrics, recent subscriber information, and engagement data via the YouTube Data API.
  • Instagram: Profile information, follower counts, post metrics, and engagement data via the Instagram Graph API.
  • TikTok: Profile information, video metrics, and engagement data via the TikTok API.

We also collect your name, email address, and organization details when you create a MonteraHQ account.

How We Use Your Data

Data is used exclusively within MonteraHQ to:

  • Generate performance reports and analytics dashboards for managed artists
  • Track growth trends and engagement metrics over time
  • Build media kits and artist profiles for management use

We do not sell, rent, or share your data with third parties. We do not use your data for advertising or profiling purposes. Data collected from platform APIs is not used for any purpose beyond the features described above.

Data Protection Mechanisms

We implement the following measures to protect your data, including sensitive data obtained from connected platform APIs:

  • Encryption in transit: All data transmitted between your browser and MonteraHQ servers is encrypted using TLS 1.2 or higher. All API calls to third-party platforms (YouTube, Instagram, TikTok) are made over HTTPS.
  • Encryption at rest: OAuth access tokens, refresh tokens, and API credentials are encrypted at rest using AES-256 encryption before being stored in our database. Database backups are stored in encrypted S3 buckets with server-side encryption enabled.
  • Access controls: Access to user data is restricted by role-based access control (RBAC). Only authenticated users with the appropriate role (Admin, Manager, Marketing, or Partner) can access data within their authorized scope.
  • Infrastructure security: Our servers are hosted on Amazon Web Services (AWS) with security groups restricting inbound access. SSH access requires key-based authentication. Secrets and credentials are stored in a dedicated secrets manager, not in source code.
  • Regular security audits: We conduct periodic security audits of our codebase and infrastructure to identify and remediate vulnerabilities.

Data Retention

YouTube statistics and content retrieved via the YouTube Data API (including subscriber counts, view counts, and video metrics) are stored for no longer than 30 days, after which they are automatically refreshed from the YouTube API or deleted, in accordance with the YouTube API Services Terms of Service. Aggregated historical trend analytics are sourced from licensed third-party providers rather than the YouTube API. OAuth access tokens are retained only while the associated platform connection is active; when you disconnect a platform, the associated tokens are deleted immediately.

Data Deletion

You can request deletion of your data at any time by contacting us at contact@goodpeopleonly.com. Upon request, we will:

  • Delete all stored OAuth tokens and API credentials within 24 hours
  • Delete all collected social media data and analytics within 30 days
  • Remove your account and personal information from our systems within 30 days

When you disconnect a social media account from MonteraHQ, associated access tokens are deleted immediately and collected data for that platform is removed within 30 days.

Google API Services

MonteraHQ's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only request the minimum YouTube Data API scopes necessary to provide our analytics features.

This application uses YouTube API Services. By using these features you also agree to the YouTube Terms of Service and the Google Privacy Policy. You can revoke this application's access to your YouTube data at any time via the Google security settings page.

Your Rights

You have the right to:

  • Access the data we hold about you and your connected accounts
  • Request correction of inaccurate data
  • Request deletion of your data (see Data Deletion above)
  • Revoke platform access at any time through your MonteraHQ settings or directly through the connected platform

Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by updating the date at the top of this page. Continued use of MonteraHQ after changes constitutes acceptance of the updated policy.

Contact

The Cabin Music Company Inc. dba Good People Only
Toronto, Ontario, Canada
contact@goodpeopleonly.com