Privacy Policy
Effective 10 September 2026. Last updated 10 September 2026.
This policy explains what Musa Music LLC, a New York company trading as Musa Distro, does with personal information — yours as an artist, and a listener's when they pre-save a release on one of our pages.
We do not sell personal information, and we never have.
1. What we collect
When you have an account with us
- Who you are: name, artist name, email, phone, country and city, and the profile photo and biography you add.
- Proof of identity where the law or a payment provider requires it, and the tax form we must hold (W-9, W-8BEN or W-8BEN-E).
- How you get paid: bank or PayPal details. These are stored encrypted and are visible to the staff who process payouts.
- Your catalogue: recordings, artwork, credits, ISRCs, UPCs, release dates, and the splits you set for collaborators.
- What the stores report back: streams, listeners, countries, playlists and earnings.
- Support messages, internal notes our team writes about your account, and contracts you upload.
- Sign-in records: dates, and the verification codes we email you.
When you pre-save a release
If you use one of our Pre-Save pages, we collect the email address you give, and the city and country if you enter them. If you connect Spotify or Apple Music, we hold the access token that store gives us — nothing more. That token lets us add the release to your library on release day, and it is the only thing we do with it. We never see your password, and we cannot read your listening history or post anything.
The artist whose page you used receives your email address so they can tell you about that release. Musa Distro holds it on their behalf.
Automatically
Standard web server records: IP address, browser, pages visited, and the times. Cookies, described in section 8.
2. Why we use it, and on what basis
| What for | Why we may |
|---|---|
| Running your account and distributing your music | Performing our contract with you |
| Paying you, and paying your collaborators | Performing our contract; complying with tax and anti-fraud law |
| Verifying identity, tax forms, and preventing fraud | Legal obligation, and our legitimate interest in a service that is not abused |
| Emailing you about your releases, payouts and account | Performing our contract |
| Pre-Save: saving a release to a listener's library, and telling them it is out | The listener's consent, given when they connect or leave their email |
| Improving the service and keeping it secure | Our legitimate interest |
3. Who we share it with
- Our distribution partner, who delivers releases to the stores. They receive the release, its metadata and its artwork.
- The stores and streaming services your music goes to — Spotify, Apple Music, YouTube Music, Amazon Music, Deezer, TikTok, Tidal and others. They receive the release and its credits, which is how your name appears next to your music.
- Spotify and Apple, when a listener connects an account for a Pre-Save.
- Payment providers, to send a payout.
- Suppliers who run the service for us: hosting, email delivery and error reporting. They act on our instructions and may not use the data for anything else.
- The artist, in the case of a Pre-Save email address.
- Authorities or a court, where the law requires it, and anyone bringing a rights claim, to the extent needed to answer it.
We do not sell personal information and we do not share it for advertising.
4. Where it goes
We are in the United States, and our suppliers and the stores are spread across the world. Using the service means your information is stored and processed in the United States and wherever those stores operate. For people in the European Economic Area or the United Kingdom, we rely on the standard contractual clauses or another approved safeguard with the suppliers who need them.
5. How long we keep it
- Account and catalogue information: while your account is open, and afterwards for as long as we may still receive earnings for your releases.
- Payment, tax and payout records: seven years, because United States tax law requires it.
- Pre-Save emails: while the artist's campaign is running and afterwards until they delete their campaign or you ask us to remove you.
- Store tokens: until they expire, you disconnect them, or the campaign ends.
- Server logs: twelve months.
6. Your rights
Whoever and wherever you are, you can ask us to show you what we hold about you, correct it, delete it, or send it to you in a portable form. Write to info@musadistro.com and we answer within 30 days.
Deleting an account does not delete what we must keep by law (payment and tax records), and it does not take your music down: that is a takedown request, which is separate.
If you are in the EEA or the UK, you also have the right to object to processing based on our legitimate interest, to ask us to restrict processing, to withdraw a consent at any time, and to complain to your data protection authority.
If you are in California, you have the right to know what we collect, to have it deleted, to correct it, and not to be treated differently for asking. We do not sell or share personal information as those words are used in the CCPA.
Pre-Save listeners: to be removed from an artist's list, write to us at the same address, or use the unsubscribe link in the email you receive on release day.
7. Security
Access to payment details is limited to the staff who process payouts, and they are stored encrypted. The admin panel requires a second factor by email on every sign-in. Traffic is encrypted in transit. If a breach happens that puts you at risk, we will tell you and the authorities within the time the law allows.
No system is perfect. Choose a password you use nowhere else.
8. Cookies
We use only what the service needs: a session cookie so you stay signed in, a security token that protects forms from being submitted by another site, a cookie that remembers whether you chose Spanish or English, and — on Pre-Save pages — one that remembers you already pre-saved, so you are not asked twice.
We do not use advertising cookies and we do not let anyone track you across other sites. Blocking cookies in your browser will stop you being able to sign in.
9. Children
Musa Distro is not for children under 13, and we do not knowingly collect their information. If you believe a child has given us theirs, write to us and we will delete it.
10. Changes
If we change this policy in a way that matters, we will say so by email and in your dashboard before it takes effect. The date at the top always shows the current version.
11. Contact
Musa Music LLC Suffolk County, New York, United States info@musadistro.com