This Privacy Policy explains how Everdistro, a product of EverGreen Empire Ltd ("Everdistro", "EverGreen", "we", "us", "our"), collects, uses, discloses, transfers and stores information when you access our websites, apply for an account, or use the Everdistro platform, APIs and related services (collectively, the "Services").
We act as a data controller for information we collect directly from you as a label, artist, administrator or visitor, and as a data processor when we process information on behalf of a label customer using the Services.
1. Information We Collect
1.1 Information you provide. Account and application data (name, legal entity, country, email, phone, roles), artist and roster data, release metadata, contracts and splits, tax and payout details, KYC / verification documents, support communications and any other information you upload to the Services.
1.2 Information collected automatically. Device data, IP address, browser type, operating system, referring URLs, pages visited, session duration, log data, error reports and cookie identifiers.
1.3 Information from third parties. Data received from digital service providers ("DSPs") such as Spotify, Apple Music, Amazon, YouTube, Tidal and Deezer regarding your releases; data from payment processors, identity verification vendors, anti-fraud vendors, sub-publishers, collection societies and content protection partners.
2. How We Use Information
- Provide, operate, secure and improve the Services.
- Deliver, ingest and manage releases with DSPs and stores.
- Calculate, report and remit royalties, advances and splits.
- Verify identity, prevent fraud, and enforce our Terms.
- Detect and act on artificial streaming, chart manipulation and catalog fraud.
- Respond to support requests and communicate service updates.
- Comply with legal, regulatory, tax and audit obligations.
3. Legal Bases (EEA / UK Users)
We process personal data on the following legal bases: performance of a contract, our legitimate interests (including securing the Services, preventing fraud and improving the platform), compliance with legal obligations, and your consent where required.
4. How We Share Information
- DSPs and stores — release metadata, audio, artwork and reporting data as required to distribute and account for your music.
- Service providers — hosting, payment, analytics, identity verification, anti-fraud, content protection and communications vendors, bound by confidentiality.
- Rights organisations — collecting societies, sub-publishers and neighbouring rights partners where relevant.
- Legal and regulatory — where required by law, subpoena, court order, tax authority or to protect our rights, users or the public.
- Corporate transactions — in connection with a merger, acquisition or asset sale, subject to standard confidentiality.
We do not sell personal information.
5. International Data Transfers
We operate globally and may transfer data to countries other than the one in which you reside, including the United Kingdom, the European Union and the United States. Where required, we rely on Standard Contractual Clauses, the UK IDTA or equivalent safeguards.
6. Data Retention
We retain personal data for as long as your account is active and thereafter for the period required to (i) comply with tax, audit and legal obligations, (ii) resolve disputes, (iii) enforce our agreements, and (iv) maintain accurate royalty and rights records. Financial and rights records are typically retained for a minimum of ten (10) years.
7. Security
We implement administrative, technical and physical safeguards designed to protect personal information, including encryption in transit, access controls, logging, environment separation and periodic security reviews. No system is fully secure; you use the Services at your own risk.
8. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to lodge a complaint with a supervisory authority. To exercise your rights, email privacy@everdistro.com. We may need to verify your identity before responding.
9. Children
The Services are not directed to individuals under 16. We do not knowingly collect personal information from children. Minors must be represented by a parent or legal guardian.
10. Cookies
We use cookies and similar technologies as described in our Cookies Policy.
11. Changes
We may update this Policy from time to time. Material changes will be communicated via the Services or by email. Continued use of the Services after the effective date constitutes acceptance.
12. Contact
EverGreen Empire Ltd — Data Protection
Email: privacy@everdistro.com