Privacy Policy

1. Data we collect

• Account information: full legal name, email, password (stored only as a bcrypt hash — we cannot read the original).
• Artist identity: your artist name and store profile links (Spotify, Apple Music, ZingMP3) if provided.
• Release content: audio files, cover art, lyrics, composer credits and related metadata.
• Payout profile: personal details, address, PayPal email or bank account numbers you enter.
• Operational data: review history, stream and revenue figures, and security logs.

2. How we use it

• Operating the distribution service: delivering your releases and metadata to the stores you selected.
• Reconciling and paying out your revenue.
• Sending transactional email: account verification, password resets, release review status.
• Preventing fraud and abuse and keeping the platform secure.

We never sell your personal data to anyone.

3. Cookies and sessions

WDM uses strictly functional cookies: accessToken (30-minute session), refreshToken (keeps you signed in for up to 14 days, httpOnly) and wdm_locale (remembers your language). We use no advertising or third-party tracking cookies.

4. Data sharing

Release metadata (title, artist name, cover art, audio, ISRC/UPC) is delivered to the stores you chose — that is the nature of the service. Payment details are used only to pay you. Transactional email goes through an SMTP provider; beyond that, data is not shared with third parties unless required by law.

5. Storage and security

Data and files live on servers operated by WDM. Passwords are bcrypt-hashed; email-verification and password-reset tokens are stored only as single-use, expiring SHA-256 hashes. Internal access is role-restricted (admin/staff).

6. Your rights

• View and update your display name and password under Preferences, and your payout profile under Payout Settings.
• Request takedowns of your releases from stores.
• Request an export or deletion of your account and personal data by emailing artists@wondermusicgroup.com (revenue reconciliation data may be retained for accounting obligations).

7. Retention

Account and catalog data is kept while you use the service. After account deletion, personal data is removed within 90 days, except revenue/payout records retained under accounting and tax rules.

8. Age, changes and contact

The service is intended for users aged 16 and over. This policy may be updated; material changes are announced by email or on the platform.

Privacy questions: artists@wondermusicgroup.com.