Privacy Policy

Klaslead Productions Pvt. Ltd. ("DistriBeats", "we", "us") operates distribeats.com, the DistriBeats Console, the DistriBeats API and related services. For the purposes of India's Digital Personal Data Protection Act, 2023 we are the Data Fiduciary, and for visitors in the EU/UK we are the data controller. If you use a record label's own branded platform powered by DistriBeats, that label also decides how your data is used and its own privacy policy applies alongside this one.

• Account details: name, email address, password (stored only as a secure hash by our sign-in provider), phone number and the verification codes we send to it.
• Artist and label profile: stage or label name, country, social and store profile links, profile photo, biography and press kit content you add.
• Release content: track and release metadata, cover artwork, audio masters, lyrics, credits, split sheets, licences, sample clearances and other rights documents you upload.
• Billing details: plan, invoices, billing name and address, tax details and payment status. Card and UPI details are entered directly with our regulated payment processors — we never see or store full card numbers.
• Payout details: the bank, UPI or PayPal details you give us to receive royalties, and the identity checks needed to release a payout.
• Royalty and performance data: streams, sales and earnings reported by stores and our delivery partners for your releases.
• Communications: support tickets, chat with our assistant, emails and feedback you send us.
• Technical data: IP address, device and browser type, pages visited, log and security events, and cookie choices (see our Cookie Policy).

• To provide the service you signed up for — creating your account, reviewing and delivering releases to stores, collecting and paying royalties, invoicing and support (performance of our contract with you).
• To protect you, other artists and rights holders — fraud and abuse detection, copyright and AI-content screening, and account security (legitimate interests and legal obligations).
• To meet legal duties — tax, accounting, anti-money-laundering and lawful requests from authorities.
• To send service emails you cannot opt out of — receipts, invoices, release status, security and policy notices.
• To send product news, offers and launch announcements by email. Every newsletter has an unsubscribe link, and unsubscribing never affects service emails.
• With your consent only — analytics and advertising cookies, which you control from Cookie settings.

We share personal data only as needed to run DistriBeats, under contracts that require it to be protected:

• Digital stores and our delivery partners — release metadata, audio, artwork and the artist and rights information each store requires.
• Regulated payment processors and banks — to take payments and send payouts.
• Cloud and infrastructure providers — Cloudflare (network, storage, database and email routing), Hostinger (application hosting) and Google Firebase (sign-in).
• Email providers — Amazon Web Services (SES) for account and service emails, and SendPulse for newsletters.
• Analytics and advertising providers, only if you allow them — Google Analytics, Contentsquare and Meta.
• Professional advisers, auditors and insurers, and authorities or courts when the law requires it.
• A buyer or successor if DistriBeats is reorganised or sold, subject to this policy.

Our providers process data in India and in other countries, including the United States and the European Union. Where data leaves your country we rely on the safeguards available under the applicable law, such as contractual commitments from our providers.

• Account and profile data — for as long as your account is open.
• Releases, royalty statements, invoices and payout records — for at least 8 years after the financial year they relate to, as Indian accounting and tax law requires.
• Unsubmitted drafts and their files — removed after a period of inactivity. Releases rejected on the free plan are deleted with their files within 3 days.
• Support conversations and security logs — up to 3 years.
• Backups — rolled over and overwritten on a fixed schedule.

Data is encrypted in transit, access is restricted to staff who need it, administrator accounts use two-factor authentication, and payout changes are held and verified before money moves. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

Depending on where you live, you can ask to access, correct, update or erase your personal data, withdraw consent, object to or restrict certain uses, receive a copy of your data, and (in India) nominate another person to exercise your rights. Many details can be changed directly in the Account section of the Console. Otherwise email artists@distribeats.com; we reply within 30 days. Erasure does not cover records we must keep by law (section 6).

If you are unhappy with our answer you may complain to the Data Protection Board of India or, in the EU/UK, your local data protection authority.

DistriBeats is for people aged 18 and over. Artists under 18 may use it only through a parent or legal guardian who opens and manages the account and accepts these terms on their behalf.

In line with India's Information Technology Rules, 2021 and the Digital Personal Data Protection Act, 2023, privacy concerns and grievances can be sent to our Grievance Officer, Saswata Modak (Managing Director), at artists@distribeats.com (subject line "Grievance"), by phone on +91 33 3592 0141, or by post to Klaslead Productions Private Limited (CIN U72900WB2020PTC241342), 337/286, Balaram Mallick Road, Ghutiyabazar, Chinsurah, Hooghly, West Bengal 712103, India. We acknowledge grievances within 24 hours and resolve them within 15 days.

We will update this page when our practices change and change the date above. Significant changes are announced by email or in the Console before they take effect.