Privacy Policy

LunaNova Music Group is the data controller responsible for personal information collected through this platform. For questions about this Privacy Policy or your personal information, contact us at privacy@lunanovamusic.group.

This platform is powered by technology provided by enarumusic Benelux. (Netherlands). enarumusic acts solely as a data processor on behalf of LunaNova Music Group and has no independent data controller relationship with users of this platform.

2.1 Account Information

When you create an account, we collect:

• Email address (required for account creation and authentication)
• Password (stored securely using bcrypt hashing)
• Full name (for identification and payment processing)
• Artist or stage name (for profile display and release attribution)
• Profile picture URL (optional, if you choose to upload an avatar)
• Account creation date and last login timestamp

2.2 Payment Information

For royalty payouts, we may collect:

• Bank account details (name, IBAN, BIC) or PayPal email address
• Payment request history, including amounts, dates, and status
• Transaction records for royalty deposits

We do not store credit card information. Financial transactions are processed by our payment partners, which maintain their own privacy policies and security standards.

2.3 Music Content and Metadata

When you upload music releases, we store:

• Audio files (in various formats as you upload them)
• Album artwork and promotional images
• Release metadata including titles, descriptions, genres, release dates, and ISRC codes
• Track listings, durations, and other technical information
• Distribution platform selections and preferences
• Release status (draft, pending, live, or taken down)

2.4 Usage and Technical Data

We automatically collect certain technical information when you use our platform:

• IP address (for security monitoring and fraud prevention)
• Browser type, version, and language preferences
• Operating system and device information
• Pages visited, features used, and time spent on the platform
• Error logs and diagnostic information for troubleshooting

2.5 Communications

We store records of:

• Support tickets and help desk interactions
• Email correspondence with our team
• Notifications and alerts sent to your account
• Feedback, suggestions, and survey responses

2.6 Royalty and Streaming Data

We collect royalty information from streaming platforms, including:

• Stream counts and listener statistics
• Revenue generated by platform and territory
• Historical performance data for your releases

2.7 Age Information

During account registration, you are required to confirm your age in compliance with COPPA and our Terms of Service. We store your confirmed age category for legal compliance purposes. You are responsible for providing accurate age information. Providing false information may result in immediate account termination.

We process your personal information for the following purposes:

3.1 Service Provision

• Creating and maintaining your artist account
• Distributing your music to streaming platforms and digital stores
• Collecting and distributing royalties from your music
• Processing payout requests
• Providing customer support and responding to inquiries

3.2 Platform Improvement

• Analyzing usage patterns to improve platform functionality and user experience
• Developing new features and services based on user needs
• Testing new features

3.3 Security and Fraud Prevention

• Monitoring for fraudulent streaming activity and artificial stream manipulation
• Detecting and preventing unauthorized account access
• Investigating violations of our Terms of Service
• Maintaining the integrity of our platform and payment systems

3.4 Legal Compliance

• Complying with applicable U.S. federal and state laws
• Responding to lawful legal requests, subpoenas, and court orders
• Enforcing our Terms of Service and other agreements
• Meeting regulatory obligations for financial recordkeeping

3.5 Communications

• Sending transactional emails about your account, releases, and royalties
• Notifying you of platform updates and policy changes
• Sending promotional communications (only with your consent, where required by law)

You may opt out of promotional communications at any time by clicking the unsubscribe link in our emails or contacting us at privacy@lunanovamusic.group.

We do not sell your personal information to third parties. We share your information only in the following limited circumstances:

4.1 Platform Technology Provider

This platform is operated on technology infrastructure provided by enarumusic B.V. (Netherlands). enarumusic processes technical platform data solely as a data processor under contract with LunaNova Music Group. enarumusic does not independently use, sell, or disclose your personal information and is not responsible for the actions or omissions of LunaNova Music Group.

4.2 Music Distribution Partners

We share your music, artwork, and associated metadata with streaming platforms (such as Spotify, Apple Music, Amazon Music) and digital stores to fulfill our distribution services. These platforms have their own privacy policies.

4.3 Payment Processors

We use payment processors to handle royalty payouts. When you request a withdrawal, we share the minimum necessary information with our payment processor to complete the transaction.

4.4 Cloud Infrastructure

We use Vercel for application hosting, Supabase for database services, and Vercel Blob Storage for file storage. These providers have access to your data only to the extent necessary to provide their services and are bound by applicable data protection agreements.

4.5 Email Services

We use third-party providers for transactional and promotional email delivery. These providers have access to your email address and the content of emails we send you.

4.6 Legal Requirements

We may disclose your information if required to do so by applicable law, including:

• Valid legal processes such as subpoenas, court orders, or search warrants
• Requests from law enforcement or government authorities
• Emergencies involving potential harm to individuals
• Protection and enforcement of our legal rights

4.7 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the successor entity. We will notify you of any material change in ownership or control of your personal information.

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Account information: Retained while your account is active and for 7 years after account closure for tax and legal compliance under applicable U.S. law
• Payment and financial records: Retained for 7 years after the last transaction as required by U.S. federal tax law (IRS recordkeeping requirements)
• Music content: Retained until you request deletion or close your account
• Royalty and streaming data: Retained indefinitely for historical reporting and accounting purposes
• Usage logs and analytics: Retained for 2 years unless anonymized
• Support communications: Retained for 3 years after resolution

Depending on where you reside, you may have certain rights regarding your personal information.

6.1 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, our sources, our purposes, and the third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we have collected about you, subject to certain legal exceptions.
• Right to Correct: You may request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share your information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your California privacy rights, contact us at privacy@lunanovamusic.group. We will respond within 45 days as required by the CCPA.

6.2 General Privacy Rights (All Users)

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may update most account information directly in your account settings.
• Deletion: You may request deletion of your account by contacting privacy@lunanovamusic.group, subject to our legal retention obligations.
• Opt-Out of Marketing: You may unsubscribe from promotional emails at any time.

6.3 Rights for EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you are protected by the General Data Protection Regulation (GDPR). You retain all rights afforded under the GDPR, including rights of access, rectification, erasure, restriction, portability, and the right to lodge a complaint with your local supervisory authority. For GDPR-related inquiries, contact privacy@lunanovamusic.group.

Note: The technology infrastructure underlying this platform is provided by enarumusic B.V. (Netherlands), which processes data as a data processor under a Data Processing Agreement with LunaNova Music Group in compliance with GDPR Article 28.

LunaNova Music Group does not knowingly collect personal information from children under the age of 13 without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA).

Our platform is not directed at children under 13. If you are under 13, you may not create an account or use our services. If we become aware that we have inadvertently collected personal information from a child under 13 without appropriate consent, we will delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at privacy@lunanovamusic.group. We will take steps to remove that information and terminate the associated account.

Users between 13 and 17 years of age may only use our services with the consent and supervision of a parent or legal guardian who agrees to be bound by these terms on their behalf.

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit using TLS and HTTPS
• Encryption of sensitive data at rest using AES-256 encryption
• Secure password storage using bcrypt hashing with salt
• Access controls and authentication requirements for all team members
• Monitoring and logging of suspicious activity
• Incident response procedures for potential data breaches

While we take reasonable precautions to protect your data, no method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

LunaNova Music Group is a U.S.-based operator. Your information may be processed in the United States or other countries where our service providers operate. By using our platform, you consent to the transfer of your information to the United States and other countries, which may have data protection laws different from those in your country of residence.

The platform infrastructure is provided by enarumusic B.V. (Netherlands). For transfers of personal data from the European Economic Area to the United States, appropriate safeguards are implemented in accordance with applicable law, including Standard Contractual Clauses approved by the European Commission where required.

We use cookies and similar technologies to:

• Maintain your login session and remember your preferences
• Analyze platform usage and improve our services
• Provide security features and prevent fraud

Types of cookies we use:

• Essential cookies: Required for the platform to function, including authentication and security
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Help us understand how you use the platform

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit platform functionality.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform functionality. Material changes will be communicated to you via email or through a notice on the platform. Your continued use of LunaNova Music Group after the effective date of an updated Privacy Policy constitutes your acceptance of the changes.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For California residents submitting CCPA requests, we will respond within 45 days. For all other privacy requests, we will respond within 30 days.