Privacy Policy

1. Who is responsible

Tribe Music Group AG, company number CHE-443.757.160, Altgasse 43, CH-6340 Baar, Zug, Switzerland, operating the Dropbeats brand, is the controller for personal data described in this Policy. Contact us at hello@dropbeats.ai.

For personal data contained in files or information submitted by a customer for processing within its workspace, the customer will normally act as controller and we act as processor under our Data Processing Addendum.

2. Data we collect

Depending on how Dropbeats is used, we may process account and contact details; organisation and workspace information; support communications; device, security and usage information; artist and contributor identifiers; catalogue and release metadata; royalty and income information; audience and consumption data; contracts, ownership information and Data Room files; sharing and access records; and information returned by connected services.

3. Sources

We receive information directly from users and their organisations, from invited collaborators, from services a customer chooses to connect, from public or licensed music-industry sources, and automatically from devices and infrastructure used to access the Service.

4. Why we process data

We process data to provide and administer accounts and workspaces; organise rosters, catalogues and Data Rooms; generate requested analytics and connected-engine outputs; secure, troubleshoot and maintain the Service; provide support; communicate about the Service; comply with law; establish or defend legal claims; and improve functionality using appropriately limited or aggregated information.

5. Legal bases

Where the GDPR or similar rules apply, our legal bases include performance of a contract, legitimate interests in providing and securing a business service, compliance with legal obligations, and consent where consent is required. You may withdraw consent at any time without affecting earlier lawful processing.

6. Sharing

We may share information with infrastructure, hosting, authentication, communications, support and security providers; connected engines or integrations selected for the workspace; professional advisers and authorities where required; and recipients selected by an authorised user through Data Rooms or controlled-sharing features.

We do not sell personal data. Service providers may use data only for contracted purposes and subject to appropriate obligations.

7. International transfers

Data may be processed in Switzerland, the EEA or other countries where our providers operate. Where required, we use recognised safeguards such as adequacy decisions or standard contractual clauses and apply supplementary measures appropriate to the transfer.

8. Retention

We retain account and workspace information while needed to provide the Service and for a reasonable period afterwards for security, backup, contractual, tax and legal purposes. Customer Data is returned or deleted according to the applicable agreement and DPA, subject to legal duties and limited backup cycles. Retention may differ where a customer controls deletion or where a legal hold applies.

9. Security

We use reasonable technical and organisational measures designed to protect personal data, including access controls, authentication, encryption in transit, logging, tenant separation and restricted provider access where appropriate. No system can eliminate all risk.

10. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may complain to a competent data-protection authority. We may need to verify identity and may direct a request to the relevant customer where that customer controls the data.

11. Cookies

Our Cookie Notice explains the limited cookies and similar technologies used on the marketing site and Service.

12. Children

Dropbeats is a business service and is not directed to children. A person using the Service for an organisation must have legal capacity and authority to do so.

13. Changes

We may update this Policy as the Service or legal requirements change. We will update the date above and provide additional notice where a change materially affects how personal data is used.