To help you understand what is different in this version of our Privacy Policy, we summarize the material changes below. For the full prior version, please use the "View Previous Policy" link in the Document History section above.
SourceAudio.com provides a music search, licensing, and distribution platform (the "Platform") which hosts branded workspaces ("Branded Workspaces") for client companies ("Clients") who make them available to end users (the "User" or "you"). The Platform is owned and operated by SourceAudio Holdings LLC ("SourceAudio", the "Company", "we", or "us"). Your use of the Platform is also governed by the SourceAudio Terms and Conditions. Clients who create, purchase, or administer Branded Workspaces are also subject to the SourceAudio Branded Workspace Terms and Conditions. SourceAudio acts as a controller of Personal Information that it processes for its own purposes in operating the Platform. Clients may also act as controllers, and the roles of SourceAudio and Clients may vary depending on the particular processing activity, as described below. We have created this privacy policy in order to demonstrate our firm commitment to your privacy. The following discloses our information gathering and dissemination practices for the Platform.
Depending on how you use the Platform, we may collect the following types of Personal Information:
Some of this information is collected automatically when you use the Platform, some is provided directly by you, and some may be provided by a Client whose Branded Workspace you use. If you do not wish to provide information required to create or maintain an account or provide a requested service, you may not be able to create an account, log in, or use certain Platform features. Some Branded Workspaces allow access without logging in and you may access those according to the settings enabled by the Client who created that Branded Workspace.
SourceAudio acts as a controller of Personal Information that it processes for its own purposes in operating and administering the Platform and its network-wide user-account system. This includes account creation and authentication, account security, network-wide account management, customer and technical support, fraud and abuse prevention, system logging and troubleshooting, service communications, administering data rights, and complying with legal obligations.
A SourceAudio account is not exclusive to a particular Branded Workspace. It is maintained by SourceAudio, may persist independently of a User's relationship with a particular Client, and may be used by the User to access other Branded Workspaces that the User chooses to join.
Clients also determine their own purposes for processing Personal Information associated with their Branded Workspaces, including deciding whom the workspace is intended to serve, what content, services, and functionality are made available, what additional information they request from Users, and how they use Personal Information made available to them through the Platform. For those activities, Clients may act as independent controllers of the Personal Information they receive or otherwise process.
For certain processing activities associated with a User joining or interacting with a Branded Workspace, SourceAudio and the applicable Client may each participate in determining the purposes and essential means of the processing and may therefore act as joint controllers under applicable law. In limited circumstances, SourceAudio may also process particular Client-specific Personal Information solely on a Client's documented instructions and for that Client's purposes, in which case SourceAudio acts as a processor for that processing activity.
Where SourceAudio and a Client act as joint controllers, SourceAudio is generally responsible for transparency, network-wide account management, account security, and handling rights requests relating to SourceAudio's network-wide processing. The Client is generally responsible for establishing a lawful basis and providing appropriate transparency for the Client's own Branded Workspace purposes, including additional information the Client requests, Client communications, and the Client's independent use of information made available through the Branded Workspace. SourceAudio and the Client will reasonably cooperate on requests or regulatory inquiries involving joint processing. Regardless of this allocation, where applicable law provides, you may exercise your data-protection rights against either joint controller. This allocation is also reflected in the SourceAudio Branded Workspace Terms and Conditions.
These roles are determined by the nature of the specific processing activity and may differ depending on how a Branded Workspace is configured and used.
The Company is based in the United States, and your Personal Information will be processed in and transferred to the U.S. and other countries where we or our service providers operate. The laws of the U.S. and other countries governing data collection and use may not be as comprehensive or protective as the laws of the country where you live.
When Personal Information is transferred from the European Economic Area, the United Kingdom, or Switzerland to SourceAudio in the United States and applicable law requires a transfer mechanism, we use an appropriate mechanism recognized under applicable law. Depending on the transfer, this may include the Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Agreement or UK Addendum to the Standard Contractual Clauses, or another legally recognized safeguard. SourceAudio is pursuing certification under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework. We will update this Policy when we are entitled to rely on those frameworks. We also require appropriate safeguards for onward transfers where required by applicable law. You may request more information about these safeguards, or a copy of them, by contacting us at privacy@sourceaudio.com.
We use your Personal Information only in the ways described below, each of which is necessary to operate the Platform or is otherwise supported by a legal basis described in the "Legal Bases for Processing" section. Where we rely on your consent for a particular use, you may withdraw that consent at any time as described in that section.
If you encounter a problem using the Platform and you reach out to us for assistance, we may use your contact information you previously entered to find more information about the issue and help address it.
If the Platform generates an error while you're using it, we may log your name, email, or IP address to help us diagnose and fix the problem. In some rare cases, we may reach out to you once the error has been resolved. Access to these logs is restricted to SourceAudio personnel and service providers who need access to operate, secure, or support the Platform and its infrastructure, subject to applicable contractual and security obligations.
We may also reach out preemptively to notify you of important events, such as downtime, security issues, and new features or services we add.
We will never sell or share your contact information with third parties for marketing or any other purposes not explicitly outlined in this Policy.
SourceAudio.com is a technology platform that other companies ("Clients") use so when you're on a Branded Workspace, you're typically on a workspace we are hosting for a third party. When you access that Branded Workspace and provide it your personal information, the Client who set up the Branded Workspace has access to that information through the Branded Workspace's UI, our API, and downloads of user information.
Your information will not be provided to Clients whose Branded Workspaces you did not proactively join.
Our Clients are not bound by this Policy and may process Personal Information made available to them as independent or joint controllers, as described in the "SourceAudio's Role and the Role of Clients" section above. If you have questions about how a Client uses your information, please review that Client's privacy information or contact the Client directly or by clicking the Help link in the upper right after logging in.
Paying for a Branded Workspace or purchasing a license, a subscription, ISRCs, or SourceAudio File Delivery transfer enters you into a contract with us and/or our Clients. When you do that, some information relating to the transaction may be retained for as long as reasonably necessary to perform or document the transaction, comply with legal, accounting, tax, and contractual obligations, resolve disputes, and enforce applicable agreements.
We use third-party service providers to host and operate the Platform and to provide particular features and services. These providers may process Personal Information on our behalf or, where described below, receive information directly from you.
The Platform and its infrastructure are hosted on Amazon Web Services. Personal Information processed through the Platform may be transmitted to, stored on, and processed using AWS infrastructure.
Please visit AWS Data Privacy Center to learn more about how Amazon Web Services handles personal information.
The Platform uses Braintree Payments to store and process credit cards. When you enter a credit card, you are actually providing your information directly to Braintree who will store and use it for processing payments you authorize. The Platform and its Clients do not see or store your credit card information.
Please visit Braintree Legal Agreements to learn more about how Braintree handles your personal information.
The Platform uses SendGrid to send emails, such as playlist sharing notifications, invoices, etc. When those emails go to you, we provide SendGrid with your email address so they know where to send them and your name as part of the email subject or body, if relevant.
Please visit Twilio Data Privacy to learn more about how SendGrid handles your personal information.
The Platform uses MailChimp to send large scale event and service notification emails. When those emails go to you, we provide MailChimp with your email address so they know where to send them and your name as part of the email subject or body, if relevant.
Please visit MailChimp Legal to learn more about how MailChimp handles your personal information.
The Platform uses Google Analytics to collect usage and technology information that helps us understand aggregate trends and improve the Platform. For example, we may look at trends in which web browsers are used to help determine which ones to support. We do not use Google Analytics to build advertising profiles about Users.
Clients may configure their own Google Analytics tracking on their Branded Workspaces. Those configurations and the Client's use of information collected through them are determined by the Client, and you should review the applicable Client's privacy information for details.
Please visit Google Privacy Policy to learn more about how Google Analytics handles personal information.
SourceAudio uses Google Workspace, including Gmail, Google Drive, and Google Calendar, for business email, communications, and document storage. Personal Information you provide when communicating with SourceAudio, and Personal Information contained in business records and documents we maintain, may therefore be transmitted to, stored by, or processed using Google Workspace.
Please visit Google Privacy Policy to learn more about how Google handles personal information.
The Platform uses HubSpot to manage customer relationships, support requests, and communications. Information you provide when creating a workspace, contacting us, or submitting a support request - including your name, email address, company name, and message content - may be stored in HubSpot. We may use this information to provide support, track feature usage and interest, and send service-related or feature-related communications.
Please visit HubSpot Privacy Policy to learn more about how HubSpot handles your personal information.
The Platform uses some third party technologies that are hosted and owned by other companies. We do not provide your information to these companies directly but your browser may send them requests while you're on our Platform and those requests include your IP address.
The Platform allows Clients to use Olark to chat with you, typically to provide real time assistance with using their Branded Workspace. This feature is not enabled on every workspace.
Please visit Olark Privacy Policy to learn more about how Olark handles your personal information.
The Platform uses Font Awesome to generate small icons that appear across the Branded Workspaces and therefore improve usability.
Please visit Font Awesome Privacy Policy to learn more about how Font Awesome handles your personal information.
The Platform uses Google Fonts to deliver the text font used on Branded Workspaces.
Please visit Google Privacy Policy to learn more about how Google Fonts handles your personal information.
SourceAudio uses cdnjs to speed up delivery of common JavaScript libraries.
Please visit Cloudflare Privacy Policy to learn more about how cdnjs handles your personal information.
SourceAudio uses Google Hosted Libraries to speed up delivery of common JavaScript libraries.
Please visit Google Privacy Policy to learn more about how Google Hosted Libraries handles your personal information.
SourceAudio may disclose content, records, or electronic communications, including Personal Information or private electronic communications transmitted on the Platform, where reasonably necessary: (i) to comply with applicable law, regulation, legal process, or lawful requests by public authorities, including requests made to meet national security or law enforcement requirements; (ii) to operate, protect, secure, or maintain the Platform; or (iii) to protect the rights, safety, or property of SourceAudio, its Users, Clients, providers, licensors, or others. SourceAudio also reserves the right to reject any order or to request additional information from any customer where appropriate.
If you are located in the European Economic Area, the United Kingdom, or Switzerland, data protection law requires us to have a legal basis for each way we process your Personal Information. We rely on the following legal bases:
We process your Personal Information to create and maintain your account, to provide the Platform and the Branded Workspaces you join, to handle customer service requests, and to fulfill purchases such as licenses, subscriptions, ISRCs, or SourceAudio File Delivery transfers.
We process your Personal Information to secure and improve the Platform, to diagnose and fix errors, to notify you of important events such as downtime, security issues, and new features, and to provide Clients with information about the Users who join their Branded Workspaces. We rely on these legitimate interests only where they are not overridden by your rights and freedoms.
We rely on your consent for non-essential cookies and similar analytics technologies, which you can manage at any time through our cookie consent banner and as described in our Cookie Policy. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.
We process your Personal Information where necessary to comply with our legal obligations, such as retaining transaction records for tax and accounting purposes and responding to lawful requests as described in the "Meeting legal requirements" section above.
We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:
Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us through our representative, Prighter, or make use of your data subject rights through the representative, please visit: https://app.prighter.com/portal/sourceaudio
The Platform uses cookies for several reasons. When you first visit the Platform, our cookie consent banner lets you choose which categories of non-essential cookies to allow, and you can change your choices at any time. You can read more about our cookie usage in our Cookie Policy.
The Platform may only be used or otherwise accessed by persons 18 years of age or older. If we reasonably believe that someone under 18 years of age has provided us with personal information, we will make reasonable efforts to remove such personal information from the Platform.
We generally retain personal data for so long as it may be relevant to the purposes identified herein. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the information, the purposes for which we process it, whether we can achieve those purposes through other means, and applicable legal, tax, and accounting requirements. For example, we retain account information for as long as your account is active, and we retain records relating to licenses and other purchases for as long as necessary to perform the contract and to meet our legal obligations. To dispose of personal data, we may anonymize it, delete it, or take other appropriate steps. Data may persist in copies made for backup and business continuity purposes for additional time.
We take reasonable steps to protect the information provided to the Platform from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from the Platform may not be secure. Therefore, you should take special care in deciding what information you send to us via email. Please keep this in mind when disclosing any information via the Internet.
You may, at any time, request an export of the Personal Information we have collected about you. The button to submit such a request can be found here or on any Branded Workspace you've joined by navigating to "Account" section of the "Dashboard". When you submit a request for your Personal Information, SourceAudio will send you a download link within 30 days.
You may, at any time, request to delete your account and Personal Information associated with your account, subject to information that SourceAudio is permitted or required to retain for legal, tax, accounting, contractual, security, fraud-prevention, dispute-resolution, or similar legitimate purposes. The button to submit such a request can be found on the "Account & User Info" tab here or on any Branded Workspace you've joined by navigating to the "Account" section of the "Dashboard". Your account is not specific to a Branded Workspace, and using the "Delete My Data" button in any location on the Platform will cause SourceAudio to delete or anonymize Personal Information associated with your account across the Platform and Branded Workspaces, subject to the retention exceptions described above and in the "Data Retention" section. Clients may have independently retained copies of Personal Information previously made available to them through their Branded Workspace, including through the Platform's user interface, API, or downloads. SourceAudio does not control Personal Information independently retained by a Client, and deleting your SourceAudio account does not necessarily delete those copies. You may contact the applicable Client regarding information it independently controls. When you submit a request to delete your Personal Information, SourceAudio will process that request within 30 days and you may cancel your request prior to our processing of it by sending an email to privacy@sourceaudio.com.
You may request that SourceAudio restrict certain processing of your Personal Information where applicable law gives you that right. You may submit a restriction request by emailing privacy@sourceaudio.com. Where a valid restriction applies, we will limit our processing of the affected Personal Information as required by applicable law.
If you request to delete your account after requesting an export of your Personal Information, it's possible your information will be deleted before you download the export, in which case there will be nothing to download.
If you would like to make sure that the information we do have about you is accurate, if you wish to change your information in our database, or if you object to your Personal Information being used by SourceAudio, just send an e-mail message explaining the request to: privacy@sourceaudio.com
Depending on where you live, you may have additional rights, including the right to access a copy of your Personal Information, to correct inaccurate information, to receive your information in a portable format, to object to or restrict certain processing, and to withdraw any consent you have given. The export and deletion tools described above allow you to exercise your access, portability, and erasure rights directly, and you can exercise any other right by emailing privacy@sourceaudio.com. We will not discriminate against you for exercising any of these rights.
We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing without human involvement.
If you are located in the European Economic Area, the United Kingdom, or Switzerland and believe we have not handled your Personal Information in accordance with applicable law, you have the right to lodge a complaint with your local data protection supervisory authority. We would, however, appreciate the chance to address your concerns directly before you do so.
This section provides additional information for California residents, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"). It supplements the rest of this Privacy Policy.
In the preceding 12 months, we have collected the following categories of personal information, as defined by the CCPA: identifiers (such as your name, email address, and IP address); commercial information (such as records of licenses, subscriptions, and other purchases); internet or other electronic network activity information (such as how you interact with the Platform); and any additional information you voluntarily provide to a Branded Workspace. We collect this information from you directly, automatically as you use the Platform, and from the Clients whose Branded Workspaces you join.
We use each category for the business and commercial purposes described in the "How We Use Your Personal Information" and "Legal Bases for Processing" sections. We disclose personal information to the service providers and Clients described in this Policy for those same purposes.
We do not sell your personal information for money or other valuable consideration, and we have not sold personal information in the preceding 12 months. We also do not "share" your personal information for cross-context behavioral advertising, and we have not done so in the preceding 12 months. We do not sell or share the personal information of consumers we know to be under 16 years of age.
SourceAudio may process sensitive personal information where necessary to provide, secure, or administer the Platform, such as account authentication information, or where you voluntarily provide information through a Branded Workspace. SourceAudio does not use or disclose sensitive personal information for purposes that require us to offer a right to limit under the CCPA. A Client may choose to request additional information through its Branded Workspace. The Client is responsible for its own collection and use of that information as described in the "SourceAudio's Role and the Role of Clients" section above.
Subject to certain exceptions, California residents have the right to know what personal information we have collected and how we use and disclose it, the right to request deletion of their personal information, the right to correct inaccurate personal information, and the right not to be discriminated against for exercising these rights. You can exercise your rights to know, delete, and correct using the tools and contact methods described in the "Your Data Rights and Choices" section above. You may use an authorized agent to submit a request on your behalf, and we may ask you to verify your identity before we respond.
Because we do not sell or share personal information, you do not need to opt out. If our practices change, we will honor opt-out preference signals, such as the Global Privacy Control (GPC), that your browser sends to us.
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we update it, we will post the revised policy and update the "Last updated" date above. Where required by applicable law, we will provide additional notice or choice before using Personal Information previously collected in a materially different manner. Please review this Policy periodically for updates.
Please feel free to contact us at any time if you have any questions about this Privacy Policy or how SourceAudio handles your Personal Information at privacy@sourceaudio.com.
SourceAudio Holdings LLC
PO Box 2069
Palos Verdes, CA 90274-9998