How Biz Solution Inc. collects, uses, and protects information when you use SongBounty.
Effective date: March 15, 2026 Last updated: April 24, 2026
This Privacy Policy explains how Biz Solution Inc. ("SongBounty," "we," "us," or "our"), which operates the SongBounty brand and service, collects, uses, discloses, and safeguards information when you:
SongBounty provides music-catalog royalty audit and monitoring services for self-published songwriters, recording artists, managers, and small catalogs. Our service is designed for professional use and is not directed to children under 13.
By using our Site or Services, you agree to this Policy. If you do not agree, please do not use the Service.
Third parties whose professional data appears in a client's catalog (e.g. co-writers, publishers, producers named in split sheets) are discussed in §6 ("Third-party data you share with us").
Audit intake / free-scan form (submitted via songbounty.com):
Account information (once the client portal launches):
Payment information (once paid plans launch):
Communications:
To deliver an audit we process professional music metadata you or your representatives provide, including:
This data is generally professional information about musical works, not personal information about consumers. Where the data identifies an individual (for example, a songwriter's legal name tied to their IPI), we treat it as personal information under applicable law.
To enrich and validate your catalog, our audit pipeline queries third-party music-data APIs and returns results into our system. These services return metadata about your works (not about you personally). See §5 for the full sub-processor list.
We use the information we collect to:
Where the GDPR or UK GDPR applies, we process personal data under one of the following legal bases:
We share information only as described below. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
| Sub-processor | Purpose | Data shared |
|---|---|---|
| Hostinger | Website hosting and email relay | Form submissions, log data |
| Google (Analytics 4 + Fonts) | Aggregate site analytics, web fonts | Pseudonymous usage events, IP-derived location |
| Google Cloud Platform (BigQuery) | Mechanical Licensing Collective (MLC) dataset lookups | ISRCs, titles, composer names |
| Chartmetric | Streaming statistics and platform metadata | Titles, artist names, ISRCs |
| Spotify | Track IDs, popularity, catalog resolution | Titles, artist names |
| YouTube Data API (Google) | Channel / video discovery and derivative monitoring | Titles, artist names, channel handles |
| MusicBrainz | Open music metadata | ISRCs, titles |
| Genius | Lyrics and writer credits | Titles, artist names |
| Last.fm | Genre, mood, and similar-artist tags | Titles, artists, ISRCs |
| ACRCloud | Audio fingerprinting and identification | Audio previews, titles, artists |
| Musicfetch.io | ISRC validation and platform URL resolution | ISRCs |
| MusicAPI.com | ISRC lookups | ISRCs |
| ASCAP & BMI (public lookup services) | PRO writer/publisher registration data | Titles, artist and writer names |
| Deezer | ISRC discovery and preview URLs | Titles, artist names |
| Microsoft SharePoint and Teams (interim, until the client portal replaces email/SharePoint delivery) | Secure storage and delivery of client audit reports | Audit outputs (Excel, PDF) |
| Third-party payment processor (to be named before paid plans launch) | Subscription billing and fraud prevention | Name, email, billing address, tokenized card data (handled by the processor, not by SongBounty) |
We publish our current sub-processor list at songbounty.com/subprocessors. Material additions are announced at least 30 days in advance via email to active clients, who may object in writing before the change takes effect.
We may share information with accountants, auditors, and attorneys bound by confidentiality, where reasonably necessary.
If SongBounty is involved in a merger, acquisition, or asset sale, personal information may be transferred as part of that transaction. We will notify affected clients before information becomes subject to a different privacy policy.
We may disclose information when we believe in good faith that disclosure is necessary to (i) comply with law or valid legal process, (ii) enforce our Terms, (iii) protect the rights, property, or safety of SongBounty, our clients, or the public, or (iv) investigate fraud or security issues.
We may share information at your direction — for example, when you ask us to register works with a PRO on your behalf, deliver a report to a co-writer, or integrate with a third-party tool you have authorized.
When you upload a catalog, it typically contains information about third parties — co-writers, publishers, producers, featured artists, and other collaborators. You represent that you have the right to share that information with us for audit purposes, and you are responsible for honoring any notice, consent, or confidentiality obligations you owe those third parties. On written request from you (or from a third party with a verifiable claim), we will correct or remove inaccurate third-party information.
SongBounty uses rule-based software, music-industry APIs, and purpose-built machine-learning models to perform audits. Specifically, we use ML models to:
These models are operated either in-house or through the specialized music-data sub-processors listed in §5.1 (for example, ACRCloud for audio fingerprinting). We do not send your catalog data to general-purpose large language model providers such as OpenAI, Anthropic, or Google Gemini. If that ever changes, we will update this Policy before the feature launches and notify active clients.
We do not use automated processing to make decisions that produce legal or similarly significant effects about you without human involvement.
We generally retain information only for as long as is needed to deliver the Service, honor contractual commitments, and meet legal, tax, or accounting obligations. Our target retention periods are:
| Category | Target retention |
|---|---|
| Audit intake form submissions | 24 months from submission, unless you become a client |
| Client account information | Duration of the account + 3 years (tax and dispute windows) |
| Catalog metadata and audit results | Duration of the account, then 12 months, unless you request earlier deletion |
| Billing records | 7 years (US tax recordkeeping) |
| Server and application logs | 12 months |
| Analytics data (GA4) | 14 months |
| Backups | Purged within 90 days of primary-store deletion |
You may request earlier deletion at any time (see §10). We may retain a minimal record of the fact of deletion, plus any information we are legally required to keep. Actual retention in a given case may be longer where an active legal hold, dispute, or regulatory obligation applies, or shorter where you direct us to delete sooner.
We implement administrative, technical, and physical safeguards designed to protect your information, including:
No system is perfectly secure. If we become aware of a security incident that affects your personal information, we will notify you and applicable regulators as required by law — targeting notification within 72 hours of becoming aware for GDPR-eligible incidents and within the timeframes required under applicable US state law.
Depending on where you live, you may have the following rights:
California does not exempt business-to-business personal information. California residents have the rights above, plus the right to limit the use of sensitive personal information. We do not knowingly process sensitive personal information as defined by the CPRA. To exercise rights, email contact@songbounty.com. We will verify your identity before responding.
You have the rights above, plus the right to lodge a complaint with your local supervisory authority. International transfers of your data to the United States rely on Standard Contractual Clauses (SCCs) and supplemental safeguards where required.
Email contact@songbounty.com from the address associated with your account. We respond within 30 days (extendable by 60 days for complex requests, with notice). Authorized agents may submit requests with verifiable proof of authority.
SongBounty is based in the United States and our primary infrastructure is located in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our sub-processors operate. Where required, we rely on Standard Contractual Clauses and other lawful transfer mechanisms.
We use a small number of cookies and similar technologies:
| Type | Examples | Purpose |
|---|---|---|
| Strictly necessary | Session, CSRF, load balancing | Required for the Site and portal to function |
| Preferences | Sidebar open/closed state | Remember your interface choices |
| Analytics | Google Analytics 4 (_ga, _ga_*) | Measure aggregate Site usage |
| Payment (once checkout launches) | Payment processor cookies | Fraud prevention on the checkout page |
Where required by law (EEA, UK, California, and other applicable jurisdictions), we present a cookie consent banner when you first visit the Site, allowing you to accept, reject, or customize non-essential cookies. You can change your choice at any time via the "Cookie preferences" link in the Site footer.
You can also control cookies via your browser settings and opt out of GA4 using Google's browser opt-out extension.
The Service is not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact contact@songbounty.com and we will delete it.
The Site and reports may contain links to third-party websites (for example, Spotify, YouTube, ASCAP, BMI, and the MLC). We are not responsible for the privacy practices of those sites. Review their policies before providing information.
We may update this Policy from time to time. When we make material changes, we will notify you by email (if we have your address) or by a prominent notice on the Site at least 14 days before the change takes effect. The "Last updated" date at the top of this Policy always reflects the latest revision.
Biz Solution Inc. Attn: Privacy — SongBounty Email: contact@songbounty.com
This Policy is governed by the laws of the State of Wyoming, without regard to conflict-of-laws principles, except where a mandatory consumer-protection law of your jurisdiction provides otherwise.