Privacy Policy

2. Our Roles

Connect Music as Controller. Connect Music Inc. is the data controller of the Personal Information we collect from you when you create an account, use the Platform, or interact with our Services. As controller, we determine the purposes and means of processing your Personal Information and are responsible for complying with applicable data protection laws.

Connect Music as Processor. In some cases, we act as a data processor when providing Services on behalf of a label, enterprise customer, or distribution partner. In those situations, the label or partner is the controller and our processing is governed by a data processing agreement between Connect Music and that party. If you have questions about who controls your data in a specific context, contact us at legal@connectmusic.com.

3. Information We Collect

We collect information you provide directly, information generated as you use our Platform, and information from third-party partners. The categories below describe what we collect and why.

3.1 Information You Provide

• Name, email address, and account credentials when you register
• Artist or label name, music catalog information, and streaming profiles
• Payment and banking details required to process royalty payouts
• Tax-related information (e.g., W-9 or W-8 forms) where required for payment compliance
• Communications you send us through forms, email, or support channels

3.2 Information Collected Automatically

• Device identifiers, browser type, and operating system
• IP address and approximate geographic location
• Pages visited, links clicked, and time spent on the Platform
• Cookies and similar tracking technologies (see Section 13)

3.3 Information from Third Parties

• Streaming data from DSPs such as Spotify, Apple Music, and Amazon Music that you authorize us to access (see Section 7)
• Distribution partner data related to royalty calculations and reporting
• Payment processor information (e.g., transaction confirmations from our payment processors)

4. How We Use Your Information

We use the information we collect to provide, maintain, and improve the Connect Music Platform and to communicate with you. Specifically, we use your information to:

• Create and manage your account and deliver the Services you request
• Process royalty payments and distribute earnings to you
• Provide streaming analytics, royalty reporting, and catalog insights
• Send service-related communications (account updates, payment notices, policy changes)
• Send marketing communications where you have opted in or where permitted by law
• Detect, investigate, and prevent fraudulent transactions and other illegal activity
• Comply with applicable laws, regulations, and legal processes (including tax reporting and anti-money-laundering obligations)

5. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on the following lawful bases under the General Data Protection Regulation (GDPR) to process your Personal Information:

• Contract Necessity. Processing required to perform our contract with you, including account management, music distribution, royalty calculation, and payout processing.
• Legitimate Interests. Processing necessary for our legitimate business interests, provided those interests are not overridden by your rights. This includes fraud prevention and platform security, product analytics and improvement, and internal reporting.
• Consent. Processing based on your freely given, specific, and informed consent. This applies to marketing communications and optional analytics cookies. You may withdraw consent at any time without affecting the lawfulness of processing performed before withdrawal.
• Legal Obligation. Processing required to comply with a legal obligation to which we are subject, such as tax reporting, accounting record-keeping, and responding to lawful requests from public authorities.

6. How We Share Your Information

We do not sell your Personal Information. We do not share your Personal Information for cross-context behavioral advertising. We share your data only in the limited circumstances described below.

• Distribution partners. We share catalog and artist metadata with music distribution platforms to deliver your content to DSPs.
• Payment processors. We share necessary financial information with our payment processors to execute royalty payouts.
• Service providers. We engage Vendors for analytics, cloud hosting, and customer support, all subject to confidentiality obligations.
• Legal requirements. We may disclose information if required by law, subpoena, or government request, or to protect the rights, safety, or property of Connect Music, our users, or the public.
• Business transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you and provide choices where required by law.

7. Third-Party Integrations

Connect Music integrates with third-party platforms (including Spotify, Apple Music, Amazon Music, and YouTube) to provide streaming analytics and distribution Services.

7.1 Authorization

When you connect a third-party account, you are granting Connect Music permission to access certain data from that platform on your behalf. Authorization typically occurs through an OAuth authorization flow or by providing a public profile identifier (such as an artist profile URL or ID). We access only the data categories described in Section 3.3 and only for the purposes described in Section 4. Connect Music does not request or store your third-party account passwords.

7.2 Revocation

You may revoke Connect Music's access to any connected third-party account at any time by disconnecting the integration in your account settings or by revoking access directly through the third-party platform. Upon revocation, we will stop collecting new data from that platform. Previously collected data will be retained according to our retention schedule (see Section 12) unless you request deletion.

7.3 Third-Party Privacy Terms

Each third-party platform has its own privacy policy and terms of service. Connect Music is not responsible for the privacy practices of these platforms. We encourage you to review their policies before authorizing access.

8. International Data Transfers

Connect Music is headquartered in the United States. Your Personal Information may be transferred to, stored, and processed in the United States or other countries where our Vendors operate. These countries may have data protection laws that differ from those in your country of residence.

When we transfer Personal Information outside the EEA, United Kingdom, or Switzerland, we rely on appropriate safeguards, which may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• The UK International Data Transfer Agreement or Addendum, as applicable
• Adequacy decisions by the European Commission or UK government for the recipient country
• Your explicit consent, where the above mechanisms are not available and where permitted by law

To request more information about the safeguards we use, contact us at legal@connectmusic.com.

9. Your Rights and Choices

Depending on your location, you may have certain rights regarding your Personal Information under applicable law. These rights may include:

• Access. Request a copy of the Personal Information we hold about you.
• Correction. Request that we correct inaccurate or incomplete information.
• Deletion. Request that we delete your Personal Information, subject to certain legal exceptions.
• Portability. Receive your data in a structured, commonly used, machine-readable format.
• Restriction. Request that we restrict processing in certain circumstances (e.g., while we verify accuracy of disputed data).
• Objection. Object to processing based on legitimate interests, including profiling.
• Withdraw consent. Where processing is based on consent, withdraw it at any time.
• Opt-out of marketing. Unsubscribe from marketing emails at any time using the link in any email we send.

To exercise any of these rights, contact us at legal@connectmusic.com or use our contact form. We will respond within the timeframe required by applicable law (typically 30 to 45 days, depending on jurisdiction). We will not discriminate against you for exercising any of these rights.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

10. US State Privacy Disclosures

This section provides additional disclosures required under state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), and the Utah Consumer Privacy Act (UCPA).

10.1 Categories of Personal Information

In the preceding 12 months, we have collected the following categories of Personal Information as defined by the CCPA:

• Identifiers: name, email address, account username, IP address
• Financial information: bank account details, payment card details (processed via our payment processors)
• Commercial information: royalty earnings, distribution history, catalog metadata
• Internet/electronic activity: browsing history on the Platform, pages visited, interactions with features
• Geolocation data: approximate location derived from IP address
• Professional information: artist name, label affiliation, music industry role

10.2 Sale, Sharing, and Targeted Advertising

We do not “sell” your Personal Information as defined by the CCPA. We do not “share” your Personal Information for cross-context behavioral advertising. We do not use your Personal Information for targeted advertising based on your activity across other websites or services.

10.3 Categories Disclosed to Third Parties

We disclose the following categories of Personal Information to third parties for business purposes:

• Identifiers and financial information to payment processors for royalty payouts
• Commercial information and identifiers to distribution partners for content delivery
• Internet/electronic activity to analytics providers for Platform improvement

10.4 Your State Privacy Rights

Under applicable state privacy laws, you may have the right to:

• Know what Personal Information we collect, use, and disclose
• Request deletion of your Personal Information
• Correct inaccurate Personal Information
• Opt out of the sale or sharing of Personal Information (we do not sell or share)
• Opt out of targeted advertising (we do not engage in targeted advertising)
• Not be discriminated against for exercising your privacy rights

10.5 How to Exercise Your Rights

To submit a request, email legal@connectmusic.com or use our contact form. We will verify your identity before processing your request by matching information you provide against our records.

10.6 Authorized Agents

California residents may designate an authorized agent to submit a privacy request on their behalf. The authorized agent must provide written authorization signed by the consumer, and we may require the consumer to verify their identity directly with us.

10.7 Appeals

If we deny your privacy request, you may appeal by contacting us at legal@connectmusic.com with the subject line “Privacy Appeal.” We will respond within the timeframe required by applicable law. If your appeal is denied, you may contact your state attorney general.

10.8 Do Not Track / Global Privacy Control

We honor Global Privacy Control (GPC) signals as a valid opt-out of the sale or sharing of Personal Information where required by law. We do not currently respond to browser-level “Do Not Track” signals because there is no industry-wide standard for compliance. However, because we do not sell or share Personal Information for advertising, the practical effect is equivalent.

11. Data Security

We maintain technical and organizational safeguards designed to protect your Personal Information. These measures include encryption of data in transit (TLS/HTTPS), access controls limiting personnel access to Personal Information on a need-to-know basis, and reviews of our security practices. Where supported by our infrastructure providers, we use encryption at rest for stored data.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your Personal Information, we cannot guarantee its absolute security. If you become aware of a security incident affecting your account, please contact us immediately at legal@connectmusic.com.

12. Data Retention

We retain your Personal Information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it. Below are representative retention periods:

• Account data: retained while your account is active and for a reasonable period after account closure to resolve outstanding obligations
• Payment and tax records: retained for a minimum of 7 years after the relevant tax year to comply with IRS record-keeping requirements and applicable state law
• Royalty and distribution records: retained for the duration of the account and as required for audit and dispute resolution
• Server logs, analytics, and backups: retention periods for infrastructure managed by our hosting and database providers (such as Vercel and Neon) are governed by those providers' policies and plan terms

If you request deletion of your Personal Information, we will honor that request subject to the retention periods above where we are legally required or have a legitimate business need to retain certain records.

13. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Platform, analyze usage, and improve your experience. We categorize cookies as follows:

• Essential cookies: required for the Platform to function (session management, security, load balancing). These cannot be disabled.
• Analytics cookies: help us understand how visitors interact with the Platform (e.g., Vercel Analytics). These collect page view and performance data without using persistent identifiers.
• Functional cookies: enable enhanced functionality such as remembering your preferences.
• Marketing cookies: we do not currently use marketing or advertising cookies. If this changes, we will update this policy and obtain consent where required.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. We honor Global Privacy Control (GPC) signals as described in Section 10.8. For complete details on the specific cookies we use and how to manage them, see our Cookie Policy.

14. Children's Privacy

The Connect Music Platform is not intended for individuals under 18 years of age. Our Services involve financial transactions (royalty payouts), contractual agreements, and account management that require users to have the legal capacity to enter into binding contracts. We do not knowingly collect Personal Information from anyone under 18.

If you are under 18, do not create an account or provide any Personal Information to us. A parent or legal guardian may contact us to manage music distribution on behalf of a minor, in which case the parent or guardian is the account holder and is responsible for all account activity.

If we become aware that we have collected Personal Information from anyone under 18 without appropriate parental or guardian involvement, we will take steps to delete that information promptly. If you believe we may have collected information from someone under 18, please contact us immediately at legal@connectmusic.com.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page and, where required by law, notify you by email or through a prominent notice on the Platform. Your continued use of Connect Music after changes take effect constitutes your acceptance of the revised policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your Personal Information, please reach out to us:

Connect Music Inc.

158 Vance Ave, Memphis, TN 38103

legal@connectmusic.com

You may also reach us through our contact form.