Privacy

Privacy Policy

Last updated 5 August 2026

Plain summary: we collect what we need to bill your subscription plan, deliver your music, monetize your channels and pay you 100% of the royalties we collect — nothing more. We never sell your data, and your audio and artwork stay in private storage.

1. What we collect

Account details: your name or artist name, email address, password (stored only as a secure hash), account type and any profile information you add.

Billing details: the plan you subscribe to, billing cycle, and payment information processed by our payment provider. We do not store full card numbers ourselves.

Content you submit: audio files, artwork, track and release metadata, collaborator names and split percentages, and the YouTube channels or assets you connect.

Financial details needed to pay you: bank name, account type, account holder name, account number or IBAN, country, plus your earnings, payout requests and their status.

Service data: earnings and streaming reports returned to us by stores and platforms, notification history, support messages, and basic technical logs such as errors and request timestamps.

2. Why we use it

To run your account, process your subscription billing, review and deliver your releases, add and manage your channels, and register assets to Content ID.

To collect the revenue your content generates, credit 100% of it to your balance, apply collaborator splits and process your bank wire payouts.

To show you analytics, send in-app and email notifications about billing, releases and payouts, and answer support requests.

To detect fraud and artificial streaming or engagement, to comply with tax and accounting obligations, and to enforce our Terms of Service.

We do not sell your personal data, and we do not use your audio, artwork or channel content for anything beyond delivering the services you asked for.

3. Who we share it with

Stores and platforms: the release metadata, audio and artwork needed for delivery, and the channel or asset information needed for monetization and Content ID.

Payment and banking partners: the details required to process your subscription and execute a wire transfer to you.

Infrastructure providers: hosting, database, file storage and email delivery providers that process data on our instructions in order to run the service.

Authorities or advisers: only where we are legally required to disclose information, or to establish or defend a legal claim.

Collaborators you add to a release see the split information relevant to them. Other users cannot see your earnings, billing or bank details.

4. How it is protected

Data is transmitted over encrypted connections and stored in access-controlled managed infrastructure. Access is restricted to the accounts and staff that need it to operate the service.

Uploaded audio and artwork are held in private storage; they are not publicly browsable and are served only through short-lived signed links to people authorised to view them.

Passwords are never stored in readable form, and administrative actions on accounts, billing and payouts are logged.

No system can be guaranteed perfectly secure. If a breach affects your personal data we will notify you and any regulator we are required to inform.

5. How long we keep it

Account, release and channel data is kept while your account is open. If you cancel your subscription and close your account we remove or anonymise your profile data, and remove your content from stores on request.

Billing, earnings, payout and tax records are retained for as long as accounting and tax law requires, even after an account closes, because they document payments already made and received.

Uploaded master files may be purged from storage once a release has been delivered and archived; the release record and its royalties remain in your history.

6. Your choices and rights

You can view and edit most of your data yourself in your profile, releases, channels, billing and payout settings.

You can ask us for a copy of your data, ask us to correct it, ask us to delete what we are not legally required to keep, or object to a particular use. Write to privacy@tuneupdistro.com and we will respond within 30 days.

Creators can disconnect YouTube from their dashboard at any time, which deletes the stored access token, refresh token and channel details. Deleting your account removes your profile, releases, channels and connections, apart from billing and payout records we must keep for tax and accounting.

Transactional emails about billing, releases and payouts are part of the service. Marketing emails, where sent, always include an unsubscribe link.

7. Cookies and analytics

We use essential cookies and local storage to keep you signed in, protect your account and remember interface preferences. These are required for the app to work.

Optional analytics is limited to aggregate product usage, only runs if you accept it on the cookie banner, and is never combined with your bank details or content. Full detail is in our Cookie Policy.

8. Google and YouTube data

We use Google OAuth to access your YouTube channel data (views, subscriber count, video list) solely to display it on your TuneUp dashboard. We do not sell this data. You can disconnect your YouTube account at any time, which deletes our stored access tokens.

Only creator accounts connect a channel this way. Artist and label accounts do not use Google OAuth — they paste a link to their music or channel, which our review team opens manually.

Access and refresh tokens are held encrypted in our database, are never exposed to your browser or to other users, and are used only by our servers to read the analytics shown to you.

Disconnecting from your dashboard, or asking an administrator to disconnect you, removes the access token, refresh token and stored channel details entirely, and we ask Google to revoke the token as well. Reconnecting starts from scratch.

Our use of information received from Google APIs follows Google's API Services User Data Policy, including its Limited Use requirements.

9. Children and international transfers

The service is not intended for children under 13, and accounts for under-18s must be entered into by a parent or guardian.

Because stores, platforms, payment and infrastructure providers operate globally, your data may be processed outside your country. Where that happens we rely on the safeguards our providers offer for international transfers.

10. Where we operate

TuneUp Distro operates through entities in Tanzania, the United Kingdom and Canada, and our users are spread across many more countries.

We aim to handle personal data in a way that is consistent with the data protection laws applicable in the places we operate and serve users. Nothing on this page is legal advice or a formal statement of compliance with a specific statute; this policy is under legal review and may change.

If a specific law gives you rights we have not described here, contact privacy@tuneupdistro.com and we will handle your request under the rules that apply to you.

11. Changes and contact

We will post any update to this policy on this page with a new date, and will tell you about significant changes by email or in the app.

For privacy questions or requests, contact privacy@tuneupdistro.com.

See also: Cookie Policy, Terms of Service, Refund Policy, and eligibility & rights requirements.