Privacy Policy.

1. Corporate Entity & Scope of Service

This Privacy Policy governs the collection and handling of personal data across the digital distribution platform operated by Distrophonic Music LLC ("Company", "We", "Us", or "Our"), a limited liability company organized and existing under the laws of the United States, having its principal place of business located in Denver, Colorado, USA.

This policy applies to all artists, songwriters, record labels, catalogue managers, and authorized account users ("End User", "You", or "Your") interacting with our platform, website at https://distrophonic.com, administrative ingestion interfaces, and client dashboards.

2. Information We Collect

Depending on your chosen subscription tier and release volume, we process the following categories of data:

Identity & Account Credentials

• Legal personal names, artist aliases, label business entities, and portal usernames.
• Direct corporate emails, telephone numbers, and residential or operational business addresses.
• Cryptographically hashed password strings and multi-factor authentication (2FA) verification states.
• Taxpayer identification, government-issued photo identity, or corporate registry certificates when mandated for royalty withdrawals or copyright ownership verification.

End User Content & Release Metadata

• Audio sound recording files (lossless WAV, FLAC) and accompanying acoustic fingerprint data.
• Cover artworks (3000x3000px high-resolution image files), graphic banners, and visual assets.
• Track titles, album arrangements, genre classifications, language indicators, and explicit lyric flags.
• Assigned or custom International Standard Recording Codes (ISRC) and Universal Product Codes (UPC).
• Songwriter names, composer credits, producer attributions, and contractual royalty split percentages.

Financial, Wallet & Transaction Data

• Subscription billing records, transaction reference IDs, and payment gateway confirmation tokens.
• Itemized monthly royalty reporting statements delivered by participating Digital Music Services (DSPs).
• Account wallet payout details (including linked PayPal addresses, bank routing details, or automated clearing credentials).

Technical Telemetry & Network Logs

• Internet Protocol (IP) addresses, browser engine configurations, and device identifiers.
• Portal login timestamps, session authentications, and API transaction calls.

3. Purpose & Service Delivery

We process collected information solely to execute our contractual digital distribution mandate:

• To validate, register, and maintain your Distrophonic artist or label portal account.
• To encode, format, and deliver your sound recordings and metadata directly to over 100+ DSPs (including Spotify, Apple Music, YouTube Music, TIDAL, Amazon Music, TikTok, and VEVO).
• To reconcile incoming DSP stream accounting and disburse 100% of earned Net Income directly to your portal wallet.
• To enforce mandatory platform security and verify mechanical clearances, sync licenses, or author split sheets.
• To administer catalogue migrations, release takedowns, and preserve original ISRC/UPC streaming continuity.
• To transmit critical account notifications, monthly sales statement alerts, and legal compliance updates.

4. Statutory Legal Bases for Processing

In accordance with GDPR, UK GDPR, and international data standards, our processing relies on specific statutory grounds:

5. Music Metadata & ISRC/UPC Barcode Records

Digital distribution necessitates publishing certain artistic metadata across public consumer platforms. By submitting releases, you grant Us the operational mandate to deliver titles, artist names, artwork, and songwriter credits to DSPs for worldwide streaming and public indexing.

Permanent identifiers (ISRC and UPC codes) assigned to your catalog are permanently logged in our registry to prevent duplicate allocations and maintain historical streaming momentum across DSP databases.

6. Subscriptions, Fees & Strict No-Refund Policy

All recurring subscription fee transactions (for Artist, Pro, and White-Label Label Plans) and administrative setup charges are executed through PCI-DSS Level-1 certified billing gateways.

7. DSP Ingestion & Authorized Data Sharing

We do not sell, license, or monetize End User data to advertising brokers. We share data strictly with authorized technical partners:

Digital Music Services (DSPs)

Ingestion of master audio files, metadata split sheets, and cover artwork to contracted streaming platforms, digital retailers, and video networks via direct DDEX transmission.

Infrastructure & Encoding Networks

Enterprise cloud hosting providers, automated audio fingerprinting systems, and automated email transmission gateways bound by strict non-disclosure agreements.

Judicial & Regulatory Disclosures

Disclosures compelled by statutory legal obligations, federal subpoenas, or where strictly required to protect corporate assets against criminal fraud.

8. Anti-Fraud & Artificial Stream Telemetry

In strict compliance with our Anti-Fraud Policy, Distrophonic Music LLC deploys proprietary monitoring scripts alongside DSP telemetry to detect artificial, automated, or bot-manipulated stream volumes.

Account activity logs and stream geographic distributions are systematically audited. Evidence of artificial manipulation may be shared with affected DSPs and will result in immediate royalty withholding and release delisting.

9. Copyright Enforcement & 3-Strike Audit Records

Under Section 7.2 and 7.3 of our Terms of Use, Distrophonic enforces an uncompromising Three-Strike Copyright Policy. Records related to intellectual property disputes are processed as follows:

• Audit Notice Logging: Upon receipt of a formal DMCA takedown or store ownership dispute, the flagged asset details and timestamps are logged. You are granted mandatory forty-eight (48) hours to submit verifiable master recording licenses or split agreements.
• Strike Accumulation & Blacklisting: If an account reaches three (3) strikes or fails to produce legal documentation, all personal identity data, artist profiles, and catalog identifiers are permanently logged in our global compliance blacklist.
• Escrow Records: Records of frozen or forfeited wallet royalties are retained for twenty-four (24) months to satisfy potential third-party statutory damage claims and store penalty indemnifications.

10. Data Retention & Takedown Processing

Personal data, catalogue metadata, and release files are retained for the duration of your active subscription and as long as releases remain live on our distribution network.

Upon receipt of a voluntary catalog takedown request, releases are purged from DSPs within 2 to 7 business days. However, corporate financial statements, tax records, and barcode registries are retained for a statutory period of up to seven (7) years to satisfy federal tax audit requirements.

11. Account Integrity & Cryptographic Security

We implement industry-standard technical safeguards, including TLS 1.3 encryption protocols for data in transit and AES-256 bit encryption for sensitive database records at rest.

You are exclusively responsible for preserving account credential confidentiality. Do not distribute access tokens, API secrets, or master passwords to third-party representatives.

12. Your Statutory Privacy Rights

Depending on your domestic jurisdiction, you may exercise legal privacy rights, including:

• Right to Access: Request a comprehensive export of personal credentials and catalog records stored on our servers.
• Right to Rectification: Request correction of inaccurate biographical information or collaborator split details.
• Right to Erasure: Request deletion of non-statutory personal data, subject to mandatory tax retention obligations.
• Right to Restrict Processing: Request suspension of non-essential data handling during active legal disputes.

Formal requests must be directed to support@distrophonic.com with the subject header "Privacy Statutory Request."

13. California Consumer Privacy Rights (CCPA / CPRA)

Under California statutory regulations, eligible residents may request disclosure of data categories collected, sources utilized, and institutional disclosures. Distrophonic Music LLC does not sell personal information or exchange data for cross-context behavioral marketing.

14. Minor Protection & COPPA Compliance

Our distribution platform is strictly intended for individuals who have attained the legal age of majority. We do not knowingly collect information from minors under thirteen (13) years of age. Accounts registered for artists aged 13 to the age of majority must be operated under verified parental or legal guardian supervision.

15. Cross-Border International Data Transfers

As a global distribution network, Distrophonic processes information across digital cloud centers in the United States and international partner hubs. All international data transmissions comply strictly with European Commission Standard Contractual Clauses (SCCs) to ensure equivalent data protection abroad.

16. Policy Amendments & Updates

Distrophonic Music LLC reserves the right to modify this Privacy Policy at our discretion. Revisions become effective immediately upon posting to this URL. Material amendments will be accompanied by an updated effective date and a prominent announcement within your dashboard.