WAVNOD ← Back to wavnod.com
Legal Document

Privacy
& Cookie Policy

Wavnod is committed to protecting your personal data and being transparent about how we collect, use, and safeguard your information across our platform.

GDPR — European Union UAE Decree-Law No. 45 of 2021 Effective: June 2, 2026
01 — Overview

Who We Are

Wavnod ("Wavnod," "we," "us," or "our") is a music distribution, publishing, and rights-administration company. We operate digital platforms and services that connect artists, rights holders, and distribution partners across the global music ecosystem.

This Privacy Policy explains how Wavnod collects, uses, discloses, and protects personal data when you use our website, applications, APIs, and all related services (collectively, the "Services"). It also includes our Cookie Policy as an integrated section.

This policy applies to all users globally, with specific provisions for individuals in the European Union (GDPR) and the United Arab Emirates (UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection).

By accessing or using our Services, you acknowledge you have read and understood this Privacy Policy. If you do not agree, please discontinue use of our Services.

02 — Data Collection

Information We Collect

Information you provide directly

  • Account data: name, email address, username, password, profile photo
  • Artist / label data: stage name, biography, social links, genre, label affiliation
  • Payment information: bank account details, payment-processor tokens, billing address (we do not store raw card numbers)
  • Content uploads: audio files, artwork, metadata, lyrics, publishing information
  • Communications: support tickets, emails, feedback forms, survey responses
  • Identity verification: government-issued ID, tax identification numbers (where legally required)

Information collected automatically

  • Usage data: pages visited, features used, click paths, session duration
  • Device data: IP address, browser type, operating system, device identifiers
  • Location data: country and region (derived from IP address)
  • Streaming data: play counts, skip rates, listener demographics aggregated by platforms
  • Log data: server logs, error reports, API call records

Information from third parties

  • Digital platforms and streaming services — royalty and analytics data
  • Social media platforms — if you connect accounts or use social login
  • Payment processors and fraud-detection partners
  • Music rights organizations and performing-rights societies
03 — Data Use

How We Use Your Information

  • Provide, operate, and improve the Services
  • Process music distribution, royalty collection, and payments
  • Administer publishing rights, licensing, and sync opportunities
  • Generate analytics and performance reports for your releases
  • Verify identity and prevent fraud, money laundering, and unauthorized use
  • Send transactional communications (payment confirmations, release-status updates)
  • Send marketing communications — only with your explicit consent where required by law
  • Comply with legal obligations including copyright law, tax reporting, and regulatory requirements
  • Enforce our Terms of Service and protect Wavnod's legal rights
  • Conduct internal research and product development
04 — Legal Basis

Legal Basis for Processing

Under GDPR (EU users)

We process your personal data under the following lawful bases:

  • Contract performance: processing necessary to provide our Services to you
  • Legitimate interests: fraud prevention, platform security, product improvement, and analytics
  • Legal obligation: tax reporting, copyright compliance, financial regulations
  • Consent: marketing communications, non-essential cookies, certain data sharing

Under UAE data protection law

We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021. Processing is carried out on the basis of:

  • Your explicit consent where required
  • Performance of contractual obligations
  • Legitimate business interests that do not override your rights
  • Compliance with UAE laws and regulatory requirements
05 — Data Sharing

How We Share Your Data

We do not sell your personal data. We share data only in the following circumstances:

Service providers

Trusted third-party vendors who process data on our behalf under strict data-processing agreements, including cloud infrastructure, payment processors, analytics providers, and customer-support tools.

Distribution partners

Streaming platforms, download stores, and performing-rights organizations — to the extent necessary to distribute your music and collect royalties on your behalf.

Legal requirements

We may disclose your data when required by law, court order, or government authority in the UAE, EU member states, or other applicable jurisdictions.

Business transfers

In the event of a merger, acquisition, or asset sale, your data may be transferred. We will notify you prior to such a transfer and provide opt-out options where legally required.

With your consent

We share data for other purposes only with your explicit prior consent.

06 — Retention

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law:

  • Active accounts: for the duration of your account plus 3 years after closure
  • Financial records: 7 years, as required by UAE and applicable tax regulations
  • Royalty records: 7 years from the date of payment
  • Marketing data: until you withdraw consent or 2 years of inactivity
  • Log data: 12 months from collection
  • Legal-dispute data: for the duration of any active dispute plus applicable statute of limitations

Upon expiry of the retention period, data is securely deleted or anonymized.

07 — International Transfers

International Data Transfers

As a global music platform, your data may be transferred to and processed in countries outside your country of residence, including the UAE, EU member states, the United States, and other territories where our partners operate.

EU users: transfers outside the EEA are conducted using Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms under Chapter V of GDPR.

UAE users: cross-border data transfers are conducted in compliance with Article 22 of UAE Federal Decree-Law No. 45 of 2021, ensuring adequate protection in the receiving jurisdiction.

08 — Your Rights

Your Rights

You have the following rights regarding your personal data. To exercise any right, contact us at privacy@wavnod.com. We will respond within 30 days (GDPR requires response within one calendar month).

A

Right to Access

Request a copy of the personal data we hold about you and how it is used.

B

Right to Rectification

Request correction of inaccurate or incomplete personal data.

C

Right to Erasure

Request deletion of your personal data ("right to be forgotten") where applicable.

D

Right to Restrict

Request that we limit processing of your data in certain circumstances.

E

Right to Portability

Receive your data in a structured, machine-readable format (EU users).

F

Right to Object

Object to processing based on legitimate interests or for direct marketing.

G

Withdraw Consent

Withdraw consent at any time where processing is based on consent.

H

Right to Complain

Lodge a complaint with your local supervisory authority (EU: relevant DPA; UAE: TDRA).

09 — Cookies

Cookies & Tracking

We use cookies and similar technologies to operate the site, remember your preferences, and — with your consent — understand usage and deliver relevant communications. For the full breakdown of cookie categories, durations, and how to manage your preferences, see our dedicated Cookie Policy.

EU users: we operate an opt-in model for non-essential cookies in compliance with the ePrivacy Directive and GDPR. UAE users: we comply with applicable UAE regulations on electronic tracking and data collection.

10 — Minors

Children and Minors

Wavnod's Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately at privacy@wavnod.com and we will take prompt action to delete such data.

11 — Updates

Changes to This Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

  • Update the "Effective" date at the top of this page
  • Send an email notification to registered users
  • Display a prominent notice within the platform
  • Where required by law (e.g., GDPR), obtain fresh consent for material changes affecting your rights

We encourage you to review this policy periodically.

12 — Contact

Contact & Data Protection

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Privacy team:

Privacy Team — Wavnod

Email us directly for all data-subject requests, cookie opt-outs, and privacy inquiries. We respond within 30 days.

privacy@wavnod.com

EU representative

As required by Article 27 of the GDPR, Wavnod has appointed an EU representative. Contact details are available upon request via the email address above.

UAE data protection

In compliance with UAE Federal Decree-Law No. 45 of 2021, inquiries from UAE residents may be directed to the same privacy email address.

Supervisory authorities

If you are not satisfied with our response, you have the right to lodge a complaint with:

  • EU users: the data protection authority in your EU member state of residence
  • UAE users: the Telecommunications and Digital Government Regulatory Authority (TDRA) — tdra.gov.ae