Privacy Policy
Privacy Policy
Effective Date: April 24, 2026
At Sonorous Zen, privacy is not an afterthought. It's part of how we build. We only ask for the information we genuinely need to help you distribute your music, manage your earnings, grow your audience, and protect your rights. Nothing more.
This policy explains what information we collect, why we collect it, how we use it, and just as importantly, how we don't. We've tried to keep it clear and practical. It is longer than we'd like, but that's because we'd rather explain everything properly than leave gaps.
Overview
This Privacy Policy is organized into three parts. Part I covers information Sonorous Zen collects and controls about visitors, prospective users, and registered creators who interact with our website, dashboard, and distribution services. Part II covers information that you entrust to Sonorous Zen when you actively use our tools, such as uploading music, submitting metadata, running fan campaigns, or contacting support. Part III covers general topics that apply to both parts above, including security, children's privacy, legal disclosures, and how we notify you when this policy changes.
Part I — Information Sonorous Zen Collects and Controls
We collect personal information only when there's a clear purpose behind it. Information ends up with us in one of three ways: you give it to us directly, our systems collect it automatically as you use the platform, or a trusted third party shares it with us under lawful grounds. Below is a plain-language breakdown of each.
Information You Provide
Account registration. When you create a Sonorous Zen account, we ask for your full name, a valid email address, and a password. For certain account types such as Artist, Label, Enterprise, or Collaborator, we may also collect a display name, username, and profile photo.
Identity verification (KYC). To protect royalty payouts and comply with anti-fraud regulations, we require creators to complete a Know Your Customer process before withdrawing funds. This typically includes a government-issued ID, a selfie verification, and country of residence. This information is stored in our private, encrypted storage and is only accessed by authorized administrators for review purposes.
Payment and payout information. When you make purchases such as subscriptions, AI Mastering, or Cover Song Licensing, or when you request a withdrawal from your Sonorous Zen wallet, we collect the payment details necessary to complete the transaction. Card payments are handled by our payment gateway, Stripe. We do not see or store your full card number on our servers. For withdrawals, we collect the payout method you choose (bank account, mobile wallet, or similar) so we can deliver your earnings.
Release and catalog data. When you upload a release, you provide artwork, audio files, track titles, ISRC and UPC codes, lyrics, songwriter credits, featured artists, collaborator emails, royalty split percentages, and similar metadata.
Communications with us. If you contact our support team, submit a feedback form, open a dispute, or chat with Soe Soe, our in-app assistant, we may record, review, and analyze those conversations so we can resolve your issue and improve our service.
Information We Collect Automatically
Browser, device, and server logs. When you visit our website or dashboard, we automatically log technical details such as your IP address, browser type, operating system, language preference, time zone, referring URL, and timestamps. This helps us keep the platform secure, debug problems, and understand how our service is being used.
Cookies and tracking technologies. We use first-party and third-party cookies, pixels, tags, and similar technologies to keep you logged in, remember your preferences such as theme and language, measure how our marketing emails and smart links perform, and protect against suspicious activity. You can find full details in our Cookie Policy.
Usage and product analytics. Our internal analytics tools record how you interact with the dashboard, which pages you open, which tools you use such as Fan Blast, LRC Maker, Royalty Splits, Promo Studio, or AI Mastering, how long sessions last, and any errors encountered. This helps us improve features, fix bugs, and prioritize what to build next.
Smart Link and fan engagement data. When fans visit your smart links, pre-saves, or public artist pages, we capture aggregate engagement signals such as clicks, country, device type, and referral source, and attribute them to your release so you can see what's working.
Why We Use Your Information
Beyond the purposes mentioned above, we also use your information to communicate with you about your account, releases, withdrawals, support tickets, and changes to this policy or our Terms; to notify you about new features, upcoming releases, training content, or promotions we think you'd find useful; to set up and maintain your account, including collaborator invitations, team permissions, and royalty split arrangements; to process DSP royalty reports, calculate your share, credit your wallet, and process withdrawals; to detect, prevent, and investigate fraud, impersonation, copyright abuse, fake streams, or any activity that threatens our community, partners, or the integrity of the platform; to train and improve our systems, including automated duplicate detection, metadata validation, content-ID matching, and AI-assisted tools; and to comply with our legal obligations, including tax reporting, anti-money-laundering laws, and DMCA procedures.
If you are in the European Economic Area, the UK, or another region with similar data protection laws, our legal basis for processing your personal data depends on what we're doing and why. In most cases, our legal basis is performance of a contract with you, a legitimate interest of Sonorous Zen or a third party that is not outweighed by your rights, or your consent. Occasionally we may be required by law to collect information, or may need to process it to protect vital interests.
Your Choices
Withdraw consent. Where we rely on your consent, you can withdraw it at any time. This does not affect anything we processed before you withdrew.
Opt out of non-essential emails. Every marketing email from Sonorous Zen includes an unsubscribe link. Essential transactional messages covering account, security, release, payout, and support notifications will continue to be sent as long as you have an active account.
Disable cookies. You can block cookies in your browser at any time. Some parts of the dashboard may not function correctly if you do.
Optional fields. Fields like profile photo, bio, social links, and public artist page content are optional. You can leave them blank, fill them in later, or remove them at any time from Preferences.
Who We Share Your Information With
We share your information only in the ways described in this Privacy Policy, and only with parties who are contractually required to handle it with appropriate confidentiality and security.
Our team. Sonorous Zen employees and authorized administrators access personal information on a strict need-to-know basis, for support, fraud review, KYC verification, and platform operations. All staff are bound by confidentiality obligations.
Service providers. We rely on trusted third-party providers to operate Sonorous Zen, for example Stripe for payment processing, our email delivery provider, cloud storage providers, and analytics tools. These providers are only allowed to use your data to provide the service we hired them for.
Digital Service Providers. When you distribute a release, we share the metadata, audio, and artwork you submit with the DSPs you selected, such as Spotify, Apple Music, YouTube Music, TikTok, Amazon Music, or Deezer. This is essential. Without it, we can't deliver your music.
Collaborators you add. If you add a collaborator to a release or invite someone to accept a royalty split, they will see information related to that collaboration such as the release title, their percentage, and the owner's name.
Other cases. Additional sharing scenarios are described in Part III.
Your Rights
If you are located in the EEA, the UK, or a region with similar data rights, you are entitled to the following. Sonorous Zen voluntarily extends these rights to all users globally, regardless of where you live.
Right of access. Request a copy of the personal data we hold about you, including why and how we process it.
Right to rectification. Correct or update inaccurate or incomplete information we hold about you.
Right to erasure. Ask us to delete your personal data in certain circumstances, for example when it's no longer needed.
Right to restrict processing. Ask us to pause certain uses of your data while we investigate a concern.
Right to data portability. Request a structured, machine-readable copy of your data to move it elsewhere.
Right to object. Object to our processing of your data for direct marketing or based on legitimate interest.
Right to complain. Lodge a complaint with your local data protection authority if you believe we've mishandled your data.
To exercise any of these rights, email us at privacy@sonorouszen.com.
How Long We Keep Your Information
We keep your personal information only as long as needed for the purposes described in this policy, usually for as long as your account remains active, plus a reasonable period afterward to comply with tax, accounting, fraud-prevention, and contractual obligations. Once that period ends, we either delete or anonymize the data, or move it to secure, access-restricted backups until it can be destroyed.
Part II — Information Sonorous Zen Processes on Your Behalf
When you use Sonorous Zen's tools, you entrust us with data that belongs to you and your collaborators, your music files, lyrics, artwork, fan email lists, royalty splits, and more. We treat this data as yours, not ours. We process it only to deliver the service you asked for.
Who Sees Your Service Data
Third-party sub-processors. To run Sonorous Zen reliably, we use vetted sub-processors for cloud storage, email delivery, payment processing, audio fingerprinting such as ACRCloud for Audio Recognition and AI Scan, and streaming catalog searches through Spotify and Deezer APIs for metadata enrichment. These sub-processors only receive the data they need to perform their specific task.
Our employees. Authorized staff may access your service data only for limited, logged reasons, such as resolving a support ticket you opened, manually verifying KYC documents you uploaded, reviewing a release flagged for audio duplication or copyright issues, or investigating suspected fraud. Access is role-based and audited.
Integrations you enable. Some Sonorous Zen features let you connect third-party products to your account, for example Google services such as YouTube, social platforms, or DSP accounts. When you connect an integration, you authorize Sonorous Zen to access, retrieve, and use specific data from that service on your behalf for the purposes described in this policy. We only request the minimum permissions (scopes) required to deliver the feature. We encourage you to review each third party's privacy practices before connecting. For detailed information about how we handle data from Google services specifically, see the "Google API Services — YouTube Data" section below.
Other cases. Additional sharing scenarios are described in Part III.
Google API Services — YouTube Data
Sonorous Zen's CMS Network feature allows eligible creators to connect their YouTube channel to view channel performance analytics and estimated earnings directly inside the Sonorous Zen dashboard. This integration uses the YouTube Data API v3 and the YouTube Analytics API, both provided by Google. Sonorous Zen's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What Google data we access. When you connect your YouTube channel through the CMS Network feature, we request permission to access the following data from your Google account:
Your Google account email address (used to identify the OAuth connection)
Your YouTube channel ID, channel name, and channel thumbnail
Your YouTube channel statistics, including subscriber count, total view count, and video count
Your YouTube Analytics data, including daily views, watch time (minutes), and estimated revenue over the last 30 days
Your top-performing videos by estimated revenue over the last 28 days
Whether your channel has access to the YouTube Analytics Monetary API (monetization status)
How we use this data. We use the YouTube data described above solely to:
Display your channel performance metrics (views, watch time, estimated revenue) on your personal CMS Network dashboard within Sonorous Zen
Show trend comparisons (current period vs. previous period) so you can track your channel's growth
Verify channel eligibility during the CMS Network application process (minimum subscriber threshold)
Cache aggregated statistics to reduce repeated API calls and improve dashboard load times
How we store this data. YouTube data retrieved through the Google APIs is stored in a secure, encrypted-at-rest database record associated with your Sonorous Zen account. Specifically:
OAuth tokens (access token and refresh token) are stored in encrypted fields and are never exposed to the frontend or to other users Cached channel statistics (subscriber count, 30-day views, watch time, revenue, top videos) are stored alongside your connection record and are refreshed periodically or on your manual request
Time-series performance data is stored as a serialized cache for rendering your dashboard charts
How we share this data. We do not sell, rent, license, or share your YouTube data with any third party. Your YouTube data is visible only to you on your personal dashboard and to authorized Sonorous Zen administrators for support and fraud-prevention purposes. We do not use your YouTube data for advertising, profiling, or any purpose unrelated to the CMS Network feature described above.
Limited Use disclosure. Sonorous Zen's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we limit our use of Google user data to providing and improving the CMS Network feature. We do not use Google user data for serving advertisements. We do not allow humans to read your Google user data unless we have your affirmative agreement for specific messages, it is necessary for security purposes such as investigating abuse, it is necessary to comply with applicable law, or our use is limited to internal operations and the data has been aggregated and anonymized.
How to disconnect and revoke access. You can disconnect your YouTube channel from Sonorous Zen at any time by clicking the "Disconnect" button on the CMS Network page in your dashboard. When you disconnect:
Sonorous Zen sends a revocation request to Google's OAuth endpoint to invalidate the stored tokens
All cached YouTube data, tokens, and analytics associated with your connection are permanently deleted from our database You will need to complete a new application and reconnect if you wish to use the CMS Network feature again You can also revoke Sonorous Zen's access to your Google account at any time by visiting your Google Account Permissions page and removing Sonorous Zen from the list of authorized applications.
Retention of Service Data
We retain the content in your account, including releases, tracks, wallet records, analytics, fan lists, splits, and so on, for as long as your Sonorous Zen account remains active. If you close your account, we begin a deletion process during our next scheduled cleanup cycle, typically within six months, followed by removal from our backup archives within another three months. Certain records, such as financial transactions, royalty reports, and KYC documents, may be retained longer when required by law, for example tax or anti-money-laundering rules.
Data Subject Requests for Service Data
If you believe Sonorous Zen holds information about you that was submitted by another user, for example you were added as a collaborator or included in a fan list, and you want to access, correct, or delete it, please email privacy@sonorouszen.com. We'll route your request to the account holder responsible for that data or act directly where the law allows.
Part III — General
Children's Privacy
Sonorous Zen is built for music professionals and is not directed to children. We do not knowingly collect personal information from anyone under the age of 16. If we discover that a child under 16 has given us personal information, we will delete it. If you're a parent or guardian who believes your child has provided us with data, contact privacy@sonorouszen.com and we'll take appropriate action.
How We Protect Your Information
Security is embedded in how Sonorous Zen is built. We use encryption in transit via HTTPS, encryption at rest for sensitive fields, role-based access controls, audit logging, rate limiting, KYC gating on withdrawals, idempotent wallet transactions, and regular reviews of our systems and code. That said, no platform can guarantee 100% security. We strongly recommend using a strong, unique password and keeping your login credentials private.
Disclosures Required by Law
We may be required to preserve or disclose your personal information or service data to comply with applicable laws, valid subpoenas, court orders, government requests, or regulatory investigations, including obligations related to taxation, sanctions, and anti-money-laundering compliance.
Enforcing Our Rights
We may disclose personal information or service data if we reasonably believe it's necessary to prevent fraud, investigate suspected illegal activity or Terms of Service violations, enforce our agreements, protect our users and partners, or defend the safety and rights of Sonorous Zen, our community, and the public.
Business Transfers
If Sonorous Zen is ever acquired, merged, restructured, or sells part of its business, your information may be transferred to the new entity as part of that transaction. We will ensure the acquiring party is bound to honor the commitments in this Privacy Policy, and we'll notify you by email or a prominent notice on our platform before any such transfer takes effect.
Compliance and Oversight
We review this policy periodically to ensure we're meeting our commitments. If you feel we've fallen short, or if you just have a question about how your information is used, email privacy@sonorouszen.com and we'll investigate and respond.
Changes to This Policy
We may update this Privacy Policy from time to time. Minor edits such as clarifications or typo fixes may be made without notice. For any significant change that affects your rights, we will notify you at least 30 days in advance by email to your account's primary address or through an in-app notice. If you disagree with a change, you may close your account before it takes effect. Continued use of Sonorous Zen after the effective date constitutes acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or how Sonorous Zen handles your data, please reach us at privacy@sonorouszen.com. Sonorous Zen LLC.