Legal · v1.0 · Updated June 25, 2026

Privacy Policy

This page is maintained by The Music Standard as platform template policy. It is not a substitute for legal advice - final compliance language should be reviewed by qualified counsel before public launch.

What information we collect

  • Account data: name, email, password hash, role, beta status.
  • Artist/label profile data: stage name, bio, locations, social links.
  • Release metadata: titles, contributors, ISRC/UPC, release dates, splits.
  • Audio, video and artwork files you upload to private storage buckets.
  • Contract and agreement files you upload to your vault.
  • Royalty, payout and tax-status placeholder data while in beta.
  • Campaign / order data when you engage marketing services.
  • Academy progress, checklist statuses and onboarding tasks.
  • Device, log, cookie and analytics data subject to your consent.

How we use information

  • Operate the platform: authentication, releases, agreements, dashboards, Academy.
  • Prepare and route releases to DSPs and to manual delivery operators.
  • Provide royalty, payout and reporting workflows.
  • Provide support, security, and audit logging.
  • Improve the product (with consent for analytics where applicable).
  • Send transactional emails (always) and marketing emails (only with consent).

How we share information

  • Service providers that host or operate the platform under contract.
  • Payment/payout providers (placeholder until integrations are connected).
  • DSP and delivery partners that need release metadata and assets.
  • Marketing partners only if you engage a campaign and only as needed.
  • Legal/compliance disclosures when required by law or to protect rights.

We do not sell login credentials, raw bank information, or uploaded contracts. Bank and payment details are intended to be handled by secure third-party providers when connected.

Data retention

We retain account and release records while the account is active and for the period required to fulfill legal, accounting, or operational obligations. You may request deletion via our privacy request form.

Security

TMS uses Row-Level Security on every user-owned table, audit logs on administrative actions, private storage buckets, and signed URLs for sensitive previews. See Trust & Security.

Your privacy rights

  • Access, correct, export or delete your data via the Privacy Request form.
  • Manage cookie categories from the footer or your account privacy settings.
  • Opt out of marketing emails at any time.

California privacy rights (placeholder)

California residents may have additional rights under applicable law, including the right to know, correct, delete, and opt out of sale or sharing of personal information. Final wording to be reviewed with counsel.

EU / UK privacy rights (placeholder)

If you are in the EU/UK, you may have additional rights under GDPR/UK-GDPR including access, rectification, erasure, restriction, portability, and the right to object. Final lawful-basis mapping to be reviewed with counsel.

Cookies

See the Cookie Policy.

Children's privacy

TMS is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a minor has provided personal data, contact privacy@themusicstandard.com.

International users

Your data may be processed in regions outside your country. We rely on appropriate safeguards where required.

Contact

privacy@themusicstandard.com · or submit a request via /privacy-request.