Privacy
& Cookie Policy
Wavnod is committed to protecting your personal data and being transparent about how we collect, use, and safeguard your information across our platform.
Who We Are
Wavnod ("Wavnod," "we," "us," or "our") is a music distribution, publishing, and rights-administration company. We operate digital platforms and services that connect artists, rights holders, and distribution partners across the global music ecosystem.
This Privacy Policy explains how Wavnod collects, uses, discloses, and protects personal data when you use our website, applications, APIs, and all related services (collectively, the "Services"). It also includes our Cookie Policy as an integrated section.
This policy applies to all users globally, with specific provisions for individuals in the European Union (GDPR) and the United Arab Emirates (UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection).
By accessing or using our Services, you acknowledge you have read and understood this Privacy Policy. If you do not agree, please discontinue use of our Services.
Information We Collect
Information you provide directly
- Account data: name, email address, username, password, profile photo
- Artist / label data: stage name, biography, social links, genre, label affiliation
- Payment information: bank account details, payment-processor tokens, billing address (we do not store raw card numbers)
- Content uploads: audio files, artwork, metadata, lyrics, publishing information
- Communications: support tickets, emails, feedback forms, survey responses
- Identity verification: government-issued ID, tax identification numbers (where legally required)
Information collected automatically
- Usage data: pages visited, features used, click paths, session duration
- Device data: IP address, browser type, operating system, device identifiers
- Location data: country and region (derived from IP address)
- Streaming data: play counts, skip rates, listener demographics aggregated by platforms
- Log data: server logs, error reports, API call records
Information from third parties
- Digital platforms and streaming services — royalty and analytics data
- Social media platforms — if you connect accounts or use social login
- Payment processors and fraud-detection partners
- Music rights organizations and performing-rights societies
How We Use Your Information
- Provide, operate, and improve the Services
- Process music distribution, royalty collection, and payments
- Administer publishing rights, licensing, and sync opportunities
- Generate analytics and performance reports for your releases
- Verify identity and prevent fraud, money laundering, and unauthorized use
- Send transactional communications (payment confirmations, release-status updates)
- Send marketing communications — only with your explicit consent where required by law
- Comply with legal obligations including copyright law, tax reporting, and regulatory requirements
- Enforce our Terms of Service and protect Wavnod's legal rights
- Conduct internal research and product development
Legal Basis for Processing
Under GDPR (EU users)
We process your personal data under the following lawful bases:
- Contract performance: processing necessary to provide our Services to you
- Legitimate interests: fraud prevention, platform security, product improvement, and analytics
- Legal obligation: tax reporting, copyright compliance, financial regulations
- Consent: marketing communications, non-essential cookies, certain data sharing
Under UAE data protection law
We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021. Processing is carried out on the basis of:
- Your explicit consent where required
- Performance of contractual obligations
- Legitimate business interests that do not override your rights
- Compliance with UAE laws and regulatory requirements
How We Share Your Data
We do not sell your personal data. We share data only in the following circumstances:
Service providers
Trusted third-party vendors who process data on our behalf under strict data-processing agreements, including cloud infrastructure, payment processors, analytics providers, and customer-support tools.
Distribution partners
Streaming platforms, download stores, and performing-rights organizations — to the extent necessary to distribute your music and collect royalties on your behalf.
Legal requirements
We may disclose your data when required by law, court order, or government authority in the UAE, EU member states, or other applicable jurisdictions.
Business transfers
In the event of a merger, acquisition, or asset sale, your data may be transferred. We will notify you prior to such a transfer and provide opt-out options where legally required.
With your consent
We share data for other purposes only with your explicit prior consent.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law:
- Active accounts: for the duration of your account plus 3 years after closure
- Financial records: 7 years, as required by UAE and applicable tax regulations
- Royalty records: 7 years from the date of payment
- Marketing data: until you withdraw consent or 2 years of inactivity
- Log data: 12 months from collection
- Legal-dispute data: for the duration of any active dispute plus applicable statute of limitations
Upon expiry of the retention period, data is securely deleted or anonymized.
International Data Transfers
As a global music platform, your data may be transferred to and processed in countries outside your country of residence, including the UAE, EU member states, the United States, and other territories where our partners operate.
EU users: transfers outside the EEA are conducted using Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms under Chapter V of GDPR.
UAE users: cross-border data transfers are conducted in compliance with Article 22 of UAE Federal Decree-Law No. 45 of 2021, ensuring adequate protection in the receiving jurisdiction.
Your Rights
You have the following rights regarding your personal data. To exercise any right, contact us at privacy@wavnod.com. We will respond within 30 days (GDPR requires response within one calendar month).
Right to Access
Request a copy of the personal data we hold about you and how it is used.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten") where applicable.
Right to Restrict
Request that we limit processing of your data in certain circumstances.
Right to Portability
Receive your data in a structured, machine-readable format (EU users).
Right to Object
Object to processing based on legitimate interests or for direct marketing.
Withdraw Consent
Withdraw consent at any time where processing is based on consent.
Right to Complain
Lodge a complaint with your local supervisory authority (EU: relevant DPA; UAE: TDRA).
Cookies & Tracking
We use cookies and similar technologies to operate the site, remember your preferences, and — with your consent — understand usage and deliver relevant communications. For the full breakdown of cookie categories, durations, and how to manage your preferences, see our dedicated Cookie Policy.
EU users: we operate an opt-in model for non-essential cookies in compliance with the ePrivacy Directive and GDPR. UAE users: we comply with applicable UAE regulations on electronic tracking and data collection.
Children and Minors
Wavnod's Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately at privacy@wavnod.com and we will take prompt action to delete such data.
Changes to This Policy
We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:
- Update the "Effective" date at the top of this page
- Send an email notification to registered users
- Display a prominent notice within the platform
- Where required by law (e.g., GDPR), obtain fresh consent for material changes affecting your rights
We encourage you to review this policy periodically.
Contact & Data Protection
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Privacy team:
Privacy Team — Wavnod
Email us directly for all data-subject requests, cookie opt-outs, and privacy inquiries. We respond within 30 days.
privacy@wavnod.comEU representative
As required by Article 27 of the GDPR, Wavnod has appointed an EU representative. Contact details are available upon request via the email address above.
UAE data protection
In compliance with UAE Federal Decree-Law No. 45 of 2021, inquiries from UAE residents may be directed to the same privacy email address.
Supervisory authorities
If you are not satisfied with our response, you have the right to lodge a complaint with:
- EU users: the data protection authority in your EU member state of residence
- UAE users: the Telecommunications and Digital Government Regulatory Authority (TDRA) — tdra.gov.ae