Privacy Policy

How Coasta handles your information.

Effective September 5, 2026 · Last updated October 4, 2026

Coasta is operated by MARTIAL! Music Studios LLC, a California limited liability company doing business as Coasta (“Coasta,” “we,” “us”). This policy explains what we collect when you visit our website, get in touch, or work with us — and the choices you have. We wrote it in plain English on purpose.

1. What this policy covers

This policy applies to coasta.io, getcoasta.com, coasta.studio and any other site or page we run that links to it (the “Site”), and to the ways you reach us from the Site — email, a call booking, or a form. If you become a Coasta client, the agreement we sign with you governs how we handle your business data; section 11 summarizes how that works.

2. What we collect

Information you give us

When you email us, book a call, or fill in a form, we receive what you send: typically your name, email address, company or project name, the links you share (for example a Spotify, Instagram or YouTube profile), and anything you write in your message. Email to contact@coasta.io is handled through our Google Workspace business inbox. Calls are booked through a short form on the Site; the answers you give, project link, email, required phone number and required Instagram profile URL are stored on Cloudflare (Workers KV), sent to our business inbox, and added to our Google Calendar, which sends you the invitation. If you check the optional text-reminder consent, we also store that choice, its timestamp, the exact consent wording and its version. Text reminders are not active and we do not send SMS messages. We use the phone number for contact and only for transactional reminders if an SMS service is later configured. If you become a client we also collect billing details, which our payment provider stores; we do not store full card numbers.

Information collected automatically

• Server logs. The Site is hosted and delivered by Cloudflare (Cloudflare Pages and its content-delivery network). Cloudflare records standard technical data when pages load — IP address, browser type, device, referring page, pages viewed, and timestamps — to serve the Site and protect it from abuse, and may set a strictly necessary security cookie to tell people from bots. Cloudflare processes this on our behalf; we do not run our own analytics on it.
• Your audience preference. When you pick “Musician,” “Brand,” “Filmmaker,” or “Public figure,” we store that single choice in your browser’s local storage so the page stays personalized. It never leaves your device and we cannot see it.
• Link previews. If you paste a Spotify or SoundCloud link into the interactive preview, your browser asks that service for the public title and artwork of the link (their oEmbed endpoints), under their privacy policies. The request goes straight from your browser to them; the link, the title, and anything you type into the preview never reach our servers and are not stored anywhere.
• Fonts. The Site loads typefaces from Google Fonts. To deliver them, Google receives your IP address and browser details. Google’s privacy policy governs that processing.
• Analytics and advertising measurement. We may use privacy-focused analytics that do not use cookies or identify you, and — because we advertise Coasta on Meta platforms — we use the Meta Pixel and Conversions API to measure our own ads and show relevant ads to people who visited the Site. When measurement is on for you, Meta receives the pages you view, that you opened the booking survey and that you booked a call; for a booked call our server also sends Meta your email address in hashed (SHA-256) form, your IP address and your browser type so the booking can be matched to an ad. Your survey answers, your project link and the time you booked are not sent. Section 6 explains when this is on and how to turn it off.

3. How we use it

• To reply to you, schedule and hold calls, and evaluate whether we are a fit to work together. When calendar and Gmail are connected, we send email reminders around 24 hours and one hour before the call using the current calendar time and meeting link. Calendar RSVP state helps us track whether you accepted the invitation; our team can record attendance or a no-show after the call. We do not automatically cancel calls for an unanswered invitation.
• To run our business — invoicing, records, and communicating with clients.
• To operate, secure, and improve the Site and understand which parts of it people use.
• To measure and improve our own marketing, including ads for Coasta.
• To comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use it to make automated decisions that have legal or similarly significant effects on you.

4. Legal bases (visitors in the EU, EEA, UK and Switzerland)

Where these laws apply, we rely on: contract or steps toward one (responding to your inquiry, working with you as a client); legitimate interests (running and securing the Site, understanding how it is used, marketing Coasta in ways you would reasonably expect); consent (advertising cookies and any marketing email, which you can withdraw at any time); and legal obligation.

5. Who we share it with

We share personal information only with the people and services that help us run Coasta:

• Service providers who process data on our instructions — currently Cloudflare (hosting, DNS, call booking storage), Google (fonts, Calendar invitations and transactional email reminders), Resend (email delivery), and, for clients, our payment and cloud-storage providers.
• Advertising platforms — Meta, through the Pixel and Conversions API described in sections 2 and 6, to measure and deliver our own ads.
• Professional advisers (lawyers, accountants) under confidentiality.
• Authorities or other parties when required by law, to protect rights and safety, or as part of a merger, financing or sale of the business.

6. Cookies and similar technology

The Site uses one advertising tool: the Meta Pixel, on the home page and its audience versions (not on this page or the Terms). When it is on it sets Meta’s first-party cookies _fbp and, if you arrived from one of our ads, _fbc. Apart from that, the only things stored on your device are the audience preference described above and your measurement choice — both essential to the feature you chose, neither of which tracks you — and any strictly necessary security cookie our host Cloudflare needs to protect the Site.

If your browser’s time zone places you in the EU, EEA, UK or Switzerland, the Pixel stays off until you choose “Allow” in the notice. Elsewhere it is on by default, the notice tells you so on your first visit, and “Turn off” stops it and removes its cookies. If your browser sends a Global Privacy Control signal, the Pixel stays off without your having to do anything. You can change your mind at any time from the Cookie settings link in the footer. When measurement is off for you, nothing is sent to Meta from your browser or from our server. You can also block cookies in your browser, and Meta offers ad controls at facebook.com/adpreferences. Our analytics, where used, are configured not to use cookies or identify individuals.

7. How long we keep it

Inquiries we keep for up to 24 months after our last exchange so we can pick the conversation back up; client records for the length of the engagement plus the period tax and accounting law requires (generally seven years); server logs for up to 90 days; advertising measurement data for the retention period set on the platform, which we keep as short as the tools allow. We delete or anonymize information when it is no longer needed.

8. Security

We use reputable providers, encrypted connections (HTTPS), access controls and two-factor authentication on the accounts that hold your data. No method of transmission or storage is completely secure, so we cannot promise absolute security, but we will notify you and regulators as the law requires if a breach affects you.

9. Your rights and choices

Depending on where you live you may have the right to access the personal information we hold about you, correct it, delete it, object to or restrict certain processing, receive a copy in a portable format, withdraw consent, and complain to your data protection authority. To exercise any of these, email contact@coasta.io with “Privacy request” in the subject. We will verify it is you, respond within one month (or 45 days for California requests) and will not treat you differently for asking. You can unsubscribe from any marketing email using the link in the email.

10. California residents

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) may give you the rights to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of the “sale” or “sharing” of personal information; to limit use of sensitive personal information; and not to be discriminated against for exercising these rights. Coasta may fall below the law’s revenue and volume thresholds, but we honor these requests for everyone regardless.

In the past twelve months we have collected the categories described in section 2 (identifiers, commercial information, internet activity) from you directly and from your device, for the purposes in section 3, and disclosed them to the service providers in section 5. We do not sell personal information. If the Meta Pixel is active, its use may count as “sharing” for cross-context behavioral advertising under California law; you can opt out by emailing us or by using the cookie settings link in the footer, and we honor Global Privacy Control signals where our tools support them.

11. Data we handle for clients

When an artist, brand, filmmaker or public figure works with Coasta, we handle their material and accounts on their behalf: audio, footage and other content they give us; access to social and advertising accounts they authorize; and the audience, performance and spend data those platforms report. In legal terms our client is the controller (or “business”) and Coasta acts as a service provider (or “processor”): we use this data only to deliver the services in the client agreement, keep it confidential, secure it as described above, post to client-owned properties only from devices they have authorized and never through shared credentials, and return or delete it at the end of the engagement on request. We do not sell client data or use it to build profiles for anyone else. Where our owned media network carries a client’s message, we disclose it as a paid partnership in line with platform rules and the FTC’s endorsement guidance.

12. Data deletion instructions

You can ask us to delete the personal information we hold about you at any time — including any data obtained through Meta platforms or other connected apps. Email contact@coasta.io with the subject “Data deletion request” and the email address or account you used with us. We will confirm receipt, verify the request, delete the data from our systems and those of our service providers within 30 days (unless the law requires us to keep it, in which case we will tell you what we kept and why), and confirm when it is done. If you connected a Meta account or app to Coasta, you can also remove it from your Meta settings under Apps and Websites; removing it there does not delete data already in our systems, so please email us as well.

13. International visitors

Coasta is based in the United States and processes information there and wherever our service providers operate; Cloudflare serves the Site from data centers around the world, so pages may be delivered from a location near you. If you visit from outside the US, your information will be transferred to the US, where privacy laws may differ from your own. Where required, we rely on appropriate safeguards such as standard contractual clauses with our providers.

14. Children

The Site and our services are for adults and businesses. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, email us and we will delete it.

15. Changes to this policy

When we change this policy we will update the date at the top and, for material changes, say so on the Site or by email. Earlier versions are available on request.

16. Contact

MARTIAL! Music Studios LLC, doing business as Coasta
Los Angeles, California
Email: contact@coasta.io
Mail: c/o Northwest Registered Agent, 2108 N St Ste N, Sacramento, CA 95816