Privacy Policy

01Who we are

AMM Distro is operated by AMM Ventures, LLC (“we,” “us”), based in the United States. We are the controller of the personal data described here, for ammdistro.com, the AMM Distro iOS and Android apps, our API, and the emails we send.

If you are an artist on a label's account, the label also decides how some of your data is used, for example which of its team can see your earnings. Questions about the label's own use go to the label; we'll help.

Contact us about privacy, or to use any of your rights, at team@ammdistro.com. This policy doesn't cover ANTHM, which has its own privacy policy, though both use the same account.

02What we collect

Information you give us

• Account details: your name, email address, and the accounts and roles you belong to.
• Artist and release information: artist names and profiles, songwriter and contributor credits, splits, audio, artwork, lyrics and the other release details you enter.
• Agreements: the agreements you sign, the name you sign with, and the date, IP address and device of the signature. For artists under 18, the same for the parent or guardian who signs.
• Payout details: your PayPal email, or the bank account you connect through our payment provider. We store a reference to the bank account, not its full number.
• Tax information: your legal name, address, tax classification and tax identification number, which we store encrypted, plus the forms we file.
• Messages: what you send our support team, and what you type into our AI assistant.
• Applications: what you tell us when you apply to distribute with us, including links to your music and social accounts.

Information we collect automatically

• A session cookie that keeps you signed in. We don't use advertising cookies or sell access to your activity.
• Request data, such as IP address, browser, device and timestamps, used for security, fraud prevention and fixing errors.
• For the mobile apps, a push notification token for your device, if you allow notifications.

Information from others

• Stores and platforms: sales, stream and audience reports for your releases, including country-level listener data. These don't identify individual listeners.
• Accounts you connect, such as a social media account: the profile and statistics you authorize.
• Teammates and labels: when someone invites you, adds you as a collaborator on a split, or credits you on a release, they give us your name and email.
• Payment and tax providers: whether your payout account and tax form are verified.

03How we use it, and why we're allowed to

The law in the EU, the UK and some other places requires us to name the legal basis for each use. Ours are:

AI features. When you use our AI assistant or AI-based analysis, the content you provide is sent to the AI provider listed on our sub-processors page to produce the answer. Those providers may not use it to train their models. We don't use AI to make decisions that have legal or similarly significant effects on you without a person reviewing them.

04Who receives it

• Stores and platforms receive your releases and their metadata, including artist names, credits, songwriters and contributors, so they can sell and stream them. That information becomes public on those stores.
• Distribution partners who deliver releases to stores and collect revenue for us receive the same release information, and the account information needed to match payments to it.
• People you work with: members of your account, the label that manages your account, and collaborators on a split see the information needed for that work, such as your name, your share and the release's earnings.
• Service providers who process data for us under contract, such as hosting, email, payments, tax forms and support. They're listed on our sub-processors page.
• Authorities and claimants, when the law requires it, or to respond to a copyright claim about a release, in which case we may share the name and contact details of the account that submitted it.
• A successor company if AMM Distro is merged or sold, under the same protections as this policy.

We don't sell your personal information, and we don't share it for targeted advertising.

05How long we keep it

• Account and profile data: while your account is open, and deleted or anonymized within 30 days after you ask us to delete it.
• Signed agreements and signature evidence: for as long as the agreement is in force, and then for as long as a claim under it could be brought, generally up to 7 years.
• Tax forms and payment records: as long as tax law requires, generally 7 years after the last payment.
• Earnings statements: as long as tax and accounting law requires, generally 7 years.
• Security logs: up to 12 months.
• Support conversations: up to 3 years after the last message.

Release metadata already delivered to stores stays on those stores until the release is taken down.

06Your rights

Depending on where you live, you have the right to:

• Access the personal data we hold about you, and get a copy.
• Correct data that is wrong. You can change most of it yourself in Settings.
• Delete your personal data. See Delete your data for how, and what we have to keep.
• Export the data you gave us in a common format.
• Object to uses based on legitimate interests, and to marketing at any time.
• Restrict how we use your data while a complaint is being looked at.
• Withdraw consent where we rely on it, without affecting what we did before.

Email team@ammdistro.com from the address on your account, or use the options in Settings. We answer within one month, or tell you within that month if we need longer. We may ask you to confirm your identity first. We won't treat you differently for using these rights.

If you are in the EU or UK and aren't satisfied with our answer, you can complain to your local data protection authority. California residents have the rights described here under the CCPA, and may use an authorized agent.

07Security

We encrypt data in transit and encrypt tax identification numbers at rest. We sign you in with single-use links instead of passwords, and limit which of our team can see personal data. No system is perfectly secure. If a breach affects your data, we'll tell you and the relevant authorities as the law requires.

08International transfers

We are based in the United States and store data there. If you use AMM Distro from another country, your data is transferred to the United States and to the countries our providers operate in. For data from the EU, UK and Switzerland, we rely on the European Commission's Standard Contractual Clauses and the UK addendum, or on the provider's certification under the Data Privacy Framework.

09Children

AMM Distro isn't for children under 13, and we don't knowingly collect their data. Artists aged 13 to 17 can distribute only with a parent or guardian who signs their agreement with them. If we learn we hold data from a child under 13, we delete it.

10Changes to this policy

If we change this policy in a way that matters, we'll update the effective date above and tell you by email or in AMM Distro before the change takes effect.