Identity & Financial Privacy
Artist KYC records, legal identities, and banking details are encrypted. Only public attribution metadata (track credits, ISRC) is published to global DSPs.
Roster & Contract Protection
Signed artist rosters, private split percentages, and commercial contracts are treated as confidential trade secrets protected from competing labels.
Strict Logical Quarantine
Distributors operate within hard database tenant partitions. Cross-tenant queries are blocked at the engine level to ensure zero data leakage.
Munex Digital does not sell, rent, or trade your personal information, sound recordings, or catalog financial ledgers to advertising networks or third-party data brokers. We process data strictly to distribute your catalog across authorized DSPs, accurately calculate transparent royalties, and maintain regulatory compliance under international copyright and financial laws.
1. Privacy Governance for Artists
- Public Attribution vs Private KYC: Your stage name, track titles, and cover art are published to streaming services worldwide. Your legal identity documents, personal telephone, and bank routing credentials remain strictly encrypted and confidential.
- Earnings Confidentiality: Your streaming statement logs and payout ledgers are strictly private and accessible only to your account and authorized compliance officers.
- Account Portability & Takedowns: You retain the statutory right to request catalogue takedown from DSP storefronts and request data erasure following financial settlement periods.
1.1 What We Collect from Artists
We collect your Stage/Artist Name, Legal Full Name (for KYC identity validation), Email, Mobile Phone Number, Country of Residence, WAV/FLAC Master Sound Recordings, High-Resolution Artwork, and Financial Destination Details (Bank Routing / SWIFT or registered electronic payment gateways).
1.2 Distribution Disclosure vs. Confidentiality
In order to publish your music, metadata including Track Titles, Artist Names, Release Dates, Genre, ISRC, and UPC codes are formatted into DDEX ERN 3.8.3 XML feeds and transmitted to digital stores (Spotify, Apple Music, YouTube Music, etc.). Your personal legal name, government ID numbers, and financial payout destinations are strictly withheld and never transmitted to DSP storefronts.
1.3 Earnings & Financial Privacy
Your royalty ledger, payout requests, statement archives, and transaction receipts are stored behind strict role-based access controls in Neon PostgreSQL and are never visible to other artists or external organizations.
2. Privacy Governance for Record Labels
- Roster Confidentiality: Your roster of signed performers, internal split sheets, and contractual recoupment schedules are classified as proprietary trade secrets and stored encrypted.
- Isolation from Competing Entities: Competing record labels and independent distributors have zero visibility into your catalogue analytics or revenue streams.
- Audit Logging: All mutations and catalog submissions performed by label staff are recorded in immutable audit trails with timestamps and user identifiers.
2.1 Corporate Information & Authorized Signatories
We collect Trade License / Incorporation Documents, Corporate Tax Identification, Authorized Corporate Signatory Details, Brand Imprint Trademarks, and Master Catalog Rights Documentation.
2.2 Signed Artist Roster Confidentiality
The roster of signed performers, internal royalty split formulas, advance recoupment schedules, and private artist contracts uploaded by a Record Label are classified as confidential trade secrets. This data is segregated and inaccessible to any competing record label or independent distributor on the platform.
2.3 Imprint Metadata Protection
Custom C-Line, P-Line, and publishing catalog data is injected solely into official DDEX delivery packets sent to DSPs and is never shared with third-party aggregators without your explicit authorization.
3. Privacy & Tenant Isolation for Distributors
- Hard Database Partitioning: Distributors can only query and view artists, labels, and catalog mapped to their own unique tenant company ID.
- Commercial Confidentiality: Wholesale commission schedules and settlement ledgers are strictly encrypted and segregated.
- Immutable Audit Trails: Every release submission, metadata modification, and payout credential change is permanently recorded with actor ID and IP addresses.
3.1 Strict Logical Tenancy Partitioning
Munex Digital enforces hard multi-tenant boundaries at the database engine level (Neon PostgreSQL). A Distributor workspace is partitioned by an immutable organization identifier. Under no circumstance can queries issued from a Distributor workspace access, scan, or modify records belonging to other distributors, platform-direct artists, or administrative channels.
3.2 B2B Commercial & Financial Ledger Isolation
Distributor master commission splits, wholesale deduction matrices, sub-creator waterfall configurations, and custom settlement agreements are treated with strict enterprise-grade confidentiality. No pricing data or catalog metrics are cross-shared between distributor organizations.
3.3 Tamper-Evident Audit Logging
In compliance with enterprise governance standards, every mutation performed inside a Distributor workspace—including adding artists, updating bank details, submitting releases, and editing track metadata—produces an immutable, cryptographically verifiable record in the system audit log (`audit_logs` table), logging the actor ID, IP address, before-state, and after-state.
4Data Security, Encryption & Serverless Architecture
We implement defense-in-depth security across our entire technical infrastructure to guarantee the confidentiality and integrity of your assets:
All databases in Neon PostgreSQL utilize AES-256 encryption at rest. All web and API traffic is strictly enforced over TLS 1.3 with HTTPS-only transport.
Sensitive credentials (DSP SFTP passwords, OpenIMP API tokens, database connection strings) reside exclusively in server-side environment variables and are never bundled into client browser code.
5Third-Party Data Disclosure Protocols
We share catalog information exclusively with entities strictly necessary to perform music distribution and financial settlements:
1. Digital Streaming Services: Public release metadata (track titles, artist credits, ISRCs, audio files, artwork) are delivered to Spotify, Apple, YouTube, Tidal, etc., to allow public streaming.
2. Ingestion Gateways: Ingestion pipelines such as OpenIMP REST and CI/State51 DDEX SFTP servers receive XML manifests to route your catalog into DSP delivery nodes.
3. Financial Clearing Networks: Electronic banking switches, SWIFT, and authorized local payout gateways receive your account number and name solely to complete requested royalty transfers.
4. Law Enforcement & Statutory Authorities: Information is disclosed only when mandated by formal court order, legal subpoena, or to combat criminal copyright infringement.
6Your Rights to Access, Rectification & Takedowns
Export your catalog metadata, audio files, and historical royalty statements in standardized CSV/JSON formats at any time.
Correct typographical errors in your profile, stage name, or bank account settings directly within the Creator or Admin dashboard.
Submit catalog takedown requests at will. DDEX takedown notices are dispatched to DSP stores within 48 hours.
Request deletion of non-essential personal information following the conclusion of active distribution and financial settlement periods.
7Data Protection Officer & Privacy Inquiries
If you have questions regarding this Privacy Policy, wish to exercise your statutory privacy rights, or suspect any security vulnerability, please contact our Data Protection Office:
Data Protection Officer: Munex Digital Media Pvt. Ltd.
Privacy Inquiries: privacy@munexdigital.com
Corporate Operations: operations@munexdigital.com
Headquarters: Dhaka, Bangladesh