Privacy Policy

Only what we need to run your account and your releases:

• Account & identity: email, legal name, artist / stage name, home / mailing address, country of residence, nationality.
• Profile details: your artist bio and the social / audience links you choose to add (Instagram, TikTok, YouTube, SoundCloud).
• Your music & assets: audio files, artwork, lyrics, and the metadata you enter into the release form (titles, credits, dates, language, explicit flag, ownership splits).
• Distribution identifiers: UPC, ISRC, and the Spotify / Apple Music IDs of you and your collaborators.
• Collaborator details: when you invite a collaborator to a royalty split, the name and email you give us so we can send them their split invitation and agreement.
• Your contract: the signed artist agreement and its e-signature record.
• Technical data: basic log and device information (such as IP address and browser) needed to sign you in, keep the platform secure, and prevent abuse.

• Run your account and your release pipeline.
• Prepare each delivery package and send it to our distribution partner so your music reaches streaming services worldwide.
• Calculate, report, and pay the royalties owed to you.
• Communicate with you about your releases — status changes, review feedback, requested fixes.
• Keep the platform secure and meet our legal, accounting and tax obligations.

We process your personal data on one or more of these grounds:

• Performance of a contract — to provide the services under your artist agreement.
• Your consent — where we ask for it; you can withdraw it at any time.
• Legitimate interests — to operate, secure and improve the platform, balanced against your rights.
• Legal obligation — to comply with accounting, tax and other applicable law.

Outside the label, your data is shared only with the partners we need to distribute your music and pay you:

• Distribution partners — our distribution partner, The Orchard (a Sony Music company), and, for select releases, additional partners, receive your release metadata, audio, artwork and credits so your music can land on Spotify, Apple Music, YouTube Music, Amazon Music and other stores. Sales and performance reports come back through the same channel.

We also rely on a small set of established cloud providers to run the platform (hosting, file storage, email, e-signature and error monitoring). They process data only on our instructions and under their own data-protection terms.

We do not sell your data and we do not share it with advertisers.

We and our providers may process your data in countries outside the one you live in. Where we do, we rely on appropriate safeguards (such as recognised standard contractual terms) to keep it protected.

We keep your account and release data while your relationship with the label is active, plus any period required by accounting and tax law (often up to 10 years for invoices and royalty statements). Audio and artwork are kept for the lifetime of the release; you can ask us to remove anything that has not yet been delivered.

Depending on where you live, you can ask us to access, correct, export or delete your personal data, object to or restrict certain processing, and withdraw consent where processing relies on it. Email legal@crestalacultura.com from the address on your account and we’ll respond within 30 days. You may also have the right to complain to your local data-protection authority.

The platform is for professional artists and is not directed to children. We do not knowingly collect data from anyone under 18; if you believe a minor has provided us data, contact us and we will remove it.

Your data travels over encrypted connections and is stored encrypted at rest. Inside the label, access is limited to the people who actually need a given piece of data to do their job. No system is perfectly secure, but we take reasonable measures to protect it.

The platform and your release pages may link to third-party services (streaming stores, social platforms). We are not responsible for their content or privacy practices — their own policies apply.

If we change anything that materially affects you, we’ll update the date above and notify you inside the platform at least 30 days before the change takes effect.

Questions about this policy or your data: legal@crestalacultura.com. Cresta La Cultura L.L.C-FZ (Licence No. 2646168), Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.