Privacy Policy

Effective date: May 17, 2026 · Last updated: May 17, 2026

Khaled Media, LLC ("Khaled Media," "we," "us," "our") is the data controller for personal data collected through khaledmedia.com and our music distribution, publishing administration, rights management, and related services. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how long we keep it, who we share it with, and your rights — including rights under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

For privacy questions, email privacy@khaledmedia.com or write to Khaled Media, LLC, 976 Avenida del Vista, Apt C-06, Corona, California 92882, USA.

1. Scope

This policy applies to khaledmedia.com, our artist dashboard, our contract-signing system, our customer support channels (chat, phone, email), and all related services. It applies to anyone who: (a) visits our website; (b) submits an artist application; (c) signs an Artist Agreement with us; (d) receives royalty payments from us; or (e) is identified in metadata we process (e.g., co-writers, featured artists, producers).

2. Data we collect

2.1 Information you provide directly

• Application data: name, email, artist/project name, music description, links to existing releases, streaming metrics
• Account info: legal name, stage name, email, password (stored as a salted bcrypt hash — never in plaintext), optional profile photo, phone number, communication preferences
• Identity verification: government-issued ID, selfie photo, and short selfie video, collected during contract signing for fraud prevention and legal verification (per our contract-sign system)
• Tax & payee information: W-9 (US) or W-8BEN/W-8BEN-E (non-US), bank account / Stripe / wire details, EIN/SSN/TIN as required by US tax law
• Music & metadata: sound recordings, audiovisual works, artwork, song titles, ISRC/UPC codes, co-writer splits, lyrics, performer credits, release dates
• Co-writer/co-performer data: if you list co-writers, featured artists, or producers, you must have authority to provide their names and split information. We process this on the assumption you have such authority.
• Support communications: chat transcripts, call recordings (with consent where required), email correspondence

2.2 Information we collect automatically

• Usage data: which features you use, dashboard interactions, login times
• Device & connection info: IP address, browser type, OS, referring URL — used for security, fraud detection, and analytics
• Cookies: session cookies to keep you signed in, plus minimal analytics cookies (see Section 13)

2.3 Information we receive from third parties

• Authorized Platforms (Spotify, Apple Music, YouTube, Amazon, TikTok, Anghami, Boomplay, JioSaavn, Deezer, Tidal, Pandora, SoundCloud, Audiomack, and others): stream counts, royalty data, listener demographics, geographic breakdowns, fraud-related signals
• Collection societies & PROs (BMI, ASCAP, MLC, HFA, SoundExchange, international PROs): publishing royalty data, payment records, registration data, performance data
• Payment processors (Stripe, bank wire systems): transaction confirmations, chargeback notifications
• Sub-publishers and sub-distributors: foreign territory royalty data and collections
• Fraud detection partners and platforms: streaming fraud signals, flagged accounts

3. How we use your data

We use your data only for these purposes:

• Provide the Services — deliver your music to Authorized Platforms, collect royalties, pay you, manage your account, provide customer support, file tax forms
• Identity verification — verify you are who you claim to be, prevent contract fraud, comply with our legal obligations (e.g., tax reporting, anti-money-laundering)
• Royalty accounting — calculate, report, and pay royalties accurately
• Publishing administration (Tier 2) — register your compositions with PROs and collection societies, collect on your behalf, pitch for sync
• Rights enforcement (Tier 3) — manage your YouTube channels via our YouTube Certified Partner status, file Content ID claims, issue DMCA takedowns, register copyrights
• Streaming fraud detection — run our SongCheck NOVA system on your catalog to protect you and the platforms from fraud
• Communicate with you — send transactional emails (royalty statements, payout notifications, account alerts), respond to support requests, send service updates
• Improve our services — analyze aggregate, de-identified usage trends to make the platform better
• Comply with law — tax reporting, court orders, subpoenas, regulatory requirements
• Detect and prevent fraud, abuse, and security incidents

4. Legal bases for processing (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing your personal data are:

• Contract performance (Art. 6(1)(b) GDPR) — to perform the Artist Agreement you sign with us
• Legal obligation (Art. 6(1)(c) GDPR) — tax reporting, royalty obligations to PROs/MLC, AML compliance
• Legitimate interests (Art. 6(1)(f) GDPR) — fraud prevention, network security, service improvement, debt collection
• Consent (Art. 6(1)(a) GDPR) — where we ask for specific consent (e.g., marketing emails, call recording in some jurisdictions)

5. Who we share with

We share data only with these categories of recipients, only as necessary to provide the Services:

6. International data transfers

Khaled Media is based in California, USA. Our servers are hosted in the European Union (Hostinger). Royalty data flows between us, Authorized Platforms (worldwide), PROs (worldwide), and sub-publishers (worldwide).

For transfers of personal data from the EEA, UK, or Switzerland to the United States or other third countries, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Your consent where applicable
• Performance of contract exemptions under GDPR Art. 49 where applicable

7. How long we keep it

Where you exercise a right to erasure (Section 8), we will delete or anonymize your data within 30 days, subject to overriding legal obligations (tax, audit, anti-money-laundering, ongoing legal disputes).

8. Your rights (GDPR & general)

If you are in the EEA, UK, Switzerland, or wherever similar rights apply, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (subject to legal retention obligations)
• Restrict processing in certain circumstances
• Object to processing based on legitimate interests
• Data portability — receive your data in a structured, commonly used format
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email privacy@khaledmedia.com. We will respond within 30 days.

9. California rights (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what categories of personal information we collect, the sources, the purposes, and the categories of third parties with whom we share it (this Privacy Policy provides those disclosures)
• Request access to the specific pieces of personal information we hold about you
• Request deletion of your personal information (subject to legal exceptions including tax and royalty audit retention)
• Request correction of inaccurate personal information
• Opt out of sale or sharing of personal information — Khaled Media does NOT sell or share your personal information for cross-context behavioral advertising, so there is nothing to opt out of, but we acknowledge the right
• Limit use and disclosure of sensitive personal information — we collect sensitive personal information (government ID, SSN/TIN, financial account) only for purposes you would reasonably expect (identity verification, tax compliance, payment) and do not use it for any other purpose
• Non-discrimination — we will not deny services, charge different prices, or provide different quality of services because you exercised a CCPA right

To exercise CCPA rights, email privacy@khaledmedia.com with "CCPA Request" in the subject line. We will verify your identity before fulfilling the request and respond within 45 days (extendable by 45 more days where reasonably necessary).

Authorized agents: California residents may designate an authorized agent to make a request on their behalf. We will require the agent to provide proof of designation (signed permission, power of attorney) and may also verify the consumer's identity directly.

10. How to delete your data

To request deletion of your account and personal data, email privacy@khaledmedia.com with "Delete My Data" in the subject line, from the email address on your account.

We will:

• Verify your identity
• Remove your music from Authorized Platforms within 30 days (platforms may have their own cache periods outside our control)
• Delete your account record, support communications, dashboard data, and identity verification documents within 30 days
• Retain the following as required by law: tax forms (7 years), royalty payment records (10 years), legal hold data (duration of legal matter), and aggregated/anonymized statistics

If you have an active Artist Agreement, deletion of your account terminates that Agreement subject to its termination provisions.

11. Children's privacy

Khaled Media's Services are not directed to children under the age of 18, and we do not knowingly collect personal data from anyone under 18. If you are under 18, you may use the Services only with the consent and direct involvement of a parent or legal guardian who signs the Artist Agreement on your behalf and assumes responsibility for compliance with these terms. If you believe a child under 13 has provided personal data without parental consent, contact us at privacy@khaledmedia.com and we will delete it.

12. Security

We protect your data with industry-standard measures, including:

• HTTPS/TLS encryption for all data in transit
• Encrypted storage of sensitive data (ID documents, tax forms, payee details) at rest
• Salted bcrypt hashing of passwords (we cannot see your password)
• Access controls — only authorized staff with a need-to-know have access to your data
• Multi-factor authentication available for artist accounts
• Continuous fraud monitoring via SongCheck NOVA
• Regular security reviews and penetration testing

No system is fully secure. If we discover a personal data breach, we will notify you and the relevant data protection authorities as required by applicable law (within 72 hours under GDPR).

13. Cookies & tracking

We use minimal cookies:

• Session cookies — to keep you signed in (essential, cannot be disabled while using the dashboard)
• Preference cookies — to remember your dashboard settings
• Analytics cookies — first-party only, used to understand which pages help artists succeed. We do not use third-party advertising trackers, pixel tags, or fingerprinting.

You can disable non-essential cookies in your browser; doing so will not affect royalty payments or other contract obligations.

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new "Last updated" date, and (for changes that materially expand how we use existing data) we will notify you via email or dashboard at least 30 days before the change takes effect.

15. Contact

• Privacy questions / data rights requests: privacy@khaledmedia.com
• General contact: info@khaledmedia.com
• DMCA / copyright: dmca@khaledmedia.com
• Mail: Khaled Media, LLC · 976 Avenida del Vista, Apt C-06 · Corona, California 92882 · USA

Khaled Media, LLC — California Limited Liability Company. YouTube Certified Partner. BMI/ASCAP Registered Music Publisher.