Privacy Policy

1. Who we are

Track Riot LLC ("TrackRiot", "we", "us"), a Pennsylvania, USA limited liability company, operates the music distribution service at trackriot.com. This Privacy Policy explains what personal information we collect, why, and your choices.

2. Information we collect

• Account information — name, email, password hash, artist/label name, profile details.
• Release content & metadata — audio files, cover art, track titles, contributor credits, ISRC/UPC, release dates, and other distribution metadata you submit.
• Payment & payout information — billing address, last four digits and brand of payment card, payout destination details. Full card numbers are handled by our PCI-compliant payment processor and are never stored on our servers.
• Usage & device data — IP address, browser and device type, pages viewed, actions taken, timestamps, and similar diagnostic data.
• Communications — messages you send to support and our responses.

3. How we use information

• To provide, operate, and improve the Service.
• To deliver your releases and metadata to DSPs.
• To process subscription payments and royalty payouts.
• To detect, prevent, and respond to fraud, abuse, and streaming manipulation.
• To send transactional and service-related emails.
• To comply with legal obligations and enforce our Terms.

4. Legal bases (EEA/UK users)

Where GDPR or UK GDPR applies, we process personal data on the bases of (a) performance of the contract with you, (b) our legitimate interests (operating and securing the Service), (c) compliance with legal obligations, and (d) your consent where required (e.g., certain marketing emails).

5. How we share information

We share information with:

• DSPs and stores (Spotify, Apple Music, TikTok, Amazon Music, YouTube Music, and others) — to deliver and account for your releases.
• Service providers — hosting, database, email, analytics, customer support, payment processing, and fraud-prevention vendors acting on our behalf under appropriate confidentiality and security obligations.
• Legal & safety — when required by law, subpoena, or to protect rights, property, or safety of TrackRiot, our users, or others.
• Business transfers — if we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

We do not sell your personal information.

6. Cookies & analytics

We use first-party and third-party cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies in your browser settings; blocking them may break some functionality.

7. Data retention

We retain personal data for as long as your account is active and as needed to provide the Service. After account closure we may retain limited records (royalty statements, tax, fraud, legal) for as long as required by law or for legitimate business purposes.

8. Security

We use industry-standard technical and organizational measures to protect personal data, including encryption in transit, access controls, and audit logging. No system is 100% secure; please use a strong unique password and notify us immediately if you suspect unauthorized account access.

9. International transfers

TrackRiot operates from the United States. If you access the Service from outside the U.S., your information may be transferred to, processed, and stored in the U.S. and other countries with different data-protection laws. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, to object to certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA. EEA/UK residents have rights under GDPR. To exercise any of these rights, email info@trackriot.com. You also have the right to complain to your local data protection authority.

11. Children

The Service is not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

12. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-product notice. The "Last updated" date above reflects the latest revision.

13. Contact

Track Riot LLC — Pennsylvania, USA.
Privacy questions and rights requests: info@trackriot.com