Privacy
Policy

Epical Tune Records ("we", "the label") operates the digital platform available at epicaltune.com. This Policy explains how we collect, use, store and protect the personal information of our users, registered artists and visitors.

By using our Platform, creating an account or purchasing any service, you accept the practices described in this document. If you do not agree, please do not use our services.

This policy complies with Colombian Law 1581 of 2012 and the EU General Data Protection Regulation (GDPR).

We collect only the information necessary to provide you with our services:

Permissions we request from Google:

• Email address — to identify your account and send you communications about your services.
• Name and profile picture — to personalize your experience and create your artist profile.
• Unique account identifier — to securely associate your session.

What we do NOT do with your Google account:

• We do not access your email inbox.
• We do not read your contacts, calendars or any other Google data.
• We do not publish content on your behalf.
• We do not share Google data with advertisers or third parties for advertising purposes.
• We do not store your Google password.

You can revoke Epical Tune Records' access at any time from your Google Account Permissions.

Epical Tune Records' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Service delivery: managing your account, processing distribution, mixing, mastering, charts and other purchased services.
• Essential communications: order confirmations, project updates and critical notifications.
• Platform improvement: aggregated, anonymous analysis to improve features and experience.
• Contract management: signing and storing distribution agreements, split sheets and legal instruments.
• Music marketing tools: smart links, download gates and campaigns you activate from your panel.
• Legal compliance: tax, regulatory and copyright obligations.
• Security: detecting and preventing fraudulent activity or unauthorized access.

We do not use your data for third-party advertising, nor do we sell or transfer it to advertisers.

We do not sell your personal information. We only share data when strictly necessary:

• Essential service providers: under confidentiality agreements — certified payment processors, secure storage, digital signature and authentication. They receive only the minimum data required.
• Music distribution platforms: when you request distribution, your artist metadata is transmitted to the corresponding streaming platforms, which is the explicit purpose of the service.
• Legal requirements: if required by law or a competent authority, we will disclose only to the extent strictly required.
• With your express consent: in any other case, we will request your specific authorization.

• Data transmission encrypted using industry-standard protocols.
• Access to personal data restricted to staff who need it for their duties.
• Role-based authentication and authorization systems — each user accesses only their own information.
• Payments processed securely via ePayco and Wise (PCI-DSS). We do not store card data in our systems.
• Regular monitoring and review of our security practices.

If we detect a security breach that compromises your data, we will notify you within the timeframes required by law.

• Active account: as long as you keep your account active on the Platform.
• Contractual data: the time required by tax and commercial legislation (generally 5–10 years).
• Audio files: deleted when the service is completed or within a maximum of 90 days after delivery.
• Communication data: the time needed to handle your request plus a reasonable period thereafter.
• Anonymous usage data: may be retained indefinitely as it is not identifiable.

• Access: knowing what data of yours we store.
• Rectification: correcting inaccurate or incomplete data.
• Cancellation / Erasure: requesting deletion when it is no longer necessary.
• Objection: objecting to processing for specific purposes.
• Portability: receiving a copy in a structured format.
• Withdrawal of consent: withdrawing your consent at any time.

Our services are intended for people over 18 years of age. We do not knowingly collect information from minors. If you are a parent or legal guardian and believe your child has provided data, contact us so we can delete it immediately.

• Essential cookies: required for authentication and sessions. They cannot be disabled.
• Usage analytics: aggregated traffic metrics to improve the Platform.
• Music marketing pixels: the tools you configure in your panel may use pixels under your responsibility and control.

Most browsers let you manage or reject cookies from their settings.

We may update this Policy from time to time. For material changes, we will notify you by email or with a prominent notice on the Platform before they take effect.