Privacy Policy
Last updated: August 21, 2025
Overview
Sonda provides digital music distribution, monetization, and royalty services. This Privacy Policy explains what we collect, how we use it, and the choices you have.
Information We Collect
Account & Support
- Contact details (name, email) to create and secure your account and to respond to support requests.
- Authentication, session, and fraud‑prevention signals (IP, user agent) to protect your account.
Distribution Data
- Release metadata (artist names, titles, contributors, ISRC/UPC, artwork) and delivery preferences needed to distribute your music.
- Rights and ownership declarations (e.g., master rights, splits, licenses) provided by you.
Usage & Analytics
- Product interaction events and diagnostics to improve reliability and UX.
- Device and performance data (approximate geolocation, app/version, language).
Financial & Payouts
- Payout account information, tax details (where required by law), and transaction history to process royalties and payments.
Cookies & Similar Technologies
- Essential cookies for security and session continuity; optional analytics cookies to understand feature usage. You can adjust preferences via your browser settings.
How We Use Data
- Provide and improve the service: distribution, reporting, payouts, support.
- Protect rights and prevent abuse, including fraud and policy violations.
- Comply with legal obligations (tax, accounting, KYC/AML where applicable).
- Communicate service updates and required notices.
Sharing
- Digital services & partners: We share the metadata and assets required to deliver and monetize your content.
- Service providers: Hosting, storage, analytics, payment, communications, and security vendors under contract.
- Compliance: When required by law or to enforce our terms, we may disclose data to competent authorities.
We do not sell personal data. A current list of core sub‑processors is available on request.
Security
- Access control and least‑privilege practices; audit logging for sensitive operations.
- Encryption in transit (TLS) and at rest where supported by our providers.
- Business continuity and backups with tested recovery procedures.
Retention
- Account profile and release metadata: retained while your account remains active and as needed to operate the service.
- Operational logs: typically 12–24 months.
- Financial records: kept for the period required by tax and accounting law (often 7 years).
Your Rights
- Access, correct, or delete your information where applicable.
- Object to or restrict certain processing; portability of data you provided.
- Opt‑out of non‑essential communications.
To exercise rights or ask questions, contact support@sondaglobal.com. If you are in a region with a data protection authority, you may have the right to lodge a complaint.
Contact
Remote‑first, Canada‑based. Email: support@sondaglobal.com