Skip to content
Free Trial Now

SourceAudio Privacy Policy

Document History

Summary of Changes

To help you understand what is different in this version of our Privacy Policy, we summarize the material changes below. For the full prior version, please use the "View Previous Policy" link in the Document History section above.

September 2026

  • Updated our terminology from "Branded Sites" to "Branded Workspaces" to match the current product. This is a naming change only and does not change how we collect, use, or share your information.
  • Added MailChimp as a service provider that we use to send large-scale event and service-notification emails.
  • Added HubSpot as a service provider that we use to manage customer relationships, support requests, and communications. Information such as your name, email address, company name, and message content may be stored in HubSpot.
  • Removed CreateSend.ie, which we no longer use to send notification emails, and removed references to analytics services that we do not currently use.
  • Added a "Legal Bases for Processing" section explaining the legal bases on which we process your information.
  • Expanded the "Where Information Is Processed and International Transfers" section and added information about SourceAudio's participation in the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework, including dispute resolution through JAMS.
  • Clarified our commitments concerning international transfers, onward transfers, individual choice, requests from public authorities, data retention, and the right to restrict processing.
  • Added a "Your California Privacy Rights" section, including statements that we do not sell or share your personal information.
  • Expanded your data rights to describe access, correction, portability, objection, withdrawal of consent, and the right to lodge a complaint with a supervisory authority.
  • Added detail about how long we keep your information and clarified how our cookie choices work.
  • Updated cross-references to the SourceAudio Terms and Conditions and Branded Workspace Terms and Conditions so the documents operate together consistently.
  • Clarified the allocation of responsibilities when SourceAudio and a Client act as joint controllers.
  • Added current SourceAudio contact information and made minor clarifying and editorial updates throughout.

Welcome to SourceAudio!

SourceAudio.com provides a music search, licensing, and distribution platform (the "Platform") which hosts branded workspaces ("Branded Workspaces") for client companies ("Clients") who make them available to end users (the "User" or "you"). The Platform is owned and operated by SourceAudio Holdings LLC ("SourceAudio", the "Company", "we", or "us"). Your use of the Platform is also governed by the SourceAudio Terms and Conditions. Clients who create, purchase, or administer Branded Workspaces are also subject to the SourceAudio Branded Workspace Terms and Conditions. SourceAudio acts as a controller of Personal Information that it processes for its own purposes in operating the Platform. Clients may also act as controllers, and the roles of SourceAudio and Clients may vary depending on the particular processing activity, as described below. We have created this privacy policy in order to demonstrate our firm commitment to your privacy. The following discloses our information gathering and dissemination practices for the Platform.

Information We Collect

Depending on how you use the Platform, we may collect the following types of Personal Information:

  • Account and contact information, such as your name, email address, and company or organization;
  • Technical and usage information, such as your IP address, browser or device information, access records, and information about how you interact with the Platform;
  • Customer service and communications information, including information you provide in support requests or other communications with us;
  • Transaction information relating to licenses, subscriptions, purchases, and other Platform transactions;
  • Additional information requested by a Client through a Branded Workspace and voluntarily provided by you; and
  • Information provided to us by Clients in connection with their Branded Workspaces.

Some of this information is collected automatically when you use the Platform, some is provided directly by you, and some may be provided by a Client whose Branded Workspace you use. If you do not wish to provide information required to create or maintain an account or provide a requested service, you may not be able to create an account, log in, or use certain Platform features. Some Branded Workspaces allow access without logging in and you may access those according to the settings enabled by the Client who created that Branded Workspace.

SourceAudio's Role and the Role of Clients

SourceAudio acts as a controller of Personal Information that it processes for its own purposes in operating and administering the Platform and its network-wide user-account system. This includes account creation and authentication, account security, network-wide account management, customer and technical support, fraud and abuse prevention, system logging and troubleshooting, service communications, administering data rights, and complying with legal obligations.

A SourceAudio account is not exclusive to a particular Branded Workspace. It is maintained by SourceAudio, may persist independently of a User's relationship with a particular Client, and may be used by the User to access other Branded Workspaces that the User chooses to join.

Clients also determine their own purposes for processing Personal Information associated with their Branded Workspaces, including deciding whom the workspace is intended to serve, what content, services, and functionality are made available, what additional information they request from Users, and how they use Personal Information made available to them through the Platform. For those activities, Clients may act as independent controllers of the Personal Information they receive or otherwise process.

For certain processing activities associated with a User joining or interacting with a Branded Workspace, SourceAudio and the applicable Client may each participate in determining the purposes and essential means of the processing and may therefore act as joint controllers under applicable law. In limited circumstances, SourceAudio may also process particular Client-specific Personal Information solely on a Client's documented instructions and for that Client's purposes, in which case SourceAudio acts as a processor for that processing activity.

Where SourceAudio and a Client act as joint controllers, SourceAudio is generally responsible for transparency, network-wide account management, account security, and handling rights requests relating to SourceAudio's network-wide processing. The Client is generally responsible for establishing a lawful basis and providing appropriate transparency for the Client's own Branded Workspace purposes, including additional information the Client requests, Client communications, and the Client's independent use of information made available through the Branded Workspace. SourceAudio and the Client will reasonably cooperate on requests or regulatory inquiries involving joint processing. Regardless of this allocation, where applicable law provides, you may exercise your data-protection rights against either joint controller. This allocation is also reflected in the SourceAudio Branded Workspace Terms and Conditions.

These roles are determined by the nature of the specific processing activity and may differ depending on how a Branded Workspace is configured and used.

Where Information Is Processed and International Transfers

The Company is based in the United States, and your Personal Information will be processed in and transferred to the U.S. and other countries where we or our service providers operate. The laws of the U.S. and other countries governing data collection and use may not be as comprehensive or protective as the laws of the country where you live.

For Personal Information transferred from the European Economic Area, the United Kingdom, or Switzerland to SourceAudio in the United States, we rely on our participation in the applicable Data Privacy Framework described below where that framework applies. Where the Data Privacy Framework does not apply to a transfer, or where another safeguard is appropriate, we may rely on other transfer mechanisms recognized under applicable law, including the Standard Contractual Clauses approved by the European Commission and the UK International Data Transfer Agreement or UK Addendum to the Standard Contractual Clauses, as applicable. We also require appropriate safeguards for onward transfers where required by applicable law and the Data Privacy Framework Principles. You may request more information about these safeguards, or a copy of them, by contacting us at privacy@sourceaudio.com.

Data Privacy Framework

SourceAudio Holdings LLC complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. Data Privacy Framework (UK Extension to the EU-U.S. DPF), and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), as set forth by the U.S. Department of Commerce. SourceAudio has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. DPF Principles with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF, and to the Swiss-U.S. DPF Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the applicable DPF Principles, the DPF Principles govern.

To learn more about the Data Privacy Framework program and to view our certification, please visit https://www.dataprivacyframework.gov/.

With respect to Personal Information received or transferred pursuant to the applicable Data Privacy Framework, SourceAudio is responsible for processing that information in accordance with the applicable DPF Principles. SourceAudio remains responsible under the DPF Principles for Personal Information that it transfers to third parties acting as agents on its behalf. If an agent processes such Personal Information in a manner inconsistent with the DPF Principles, SourceAudio may remain liable unless it proves that it is not responsible for the event giving rise to the damage.

Where required by the DPF Principles, SourceAudio provides individuals with a choice to opt out before DPF-covered Personal Information is disclosed to a third party acting as a controller or is used for a purpose materially different from the purpose for which it was originally collected or subsequently authorized. Your Personal Information is not provided to Clients whose Branded Workspaces you do not proactively join. To exercise an applicable choice under the DPF Principles, you may contact us at privacy@sourceaudio.com. Where the DPF Principles require affirmative express consent for Sensitive Information as defined by the DPF Principles, SourceAudio will obtain that consent before the applicable disclosure or materially different use.

SourceAudio may be required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

SourceAudio is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission with respect to its compliance with the Data Privacy Framework.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, SourceAudio commits to resolve DPF Principles-related complaints about our collection and use of Personal Information. Individuals in the European Union, the United Kingdom (and Gibraltar), or Switzerland with inquiries or complaints regarding our handling of Personal Information received in reliance on the applicable Data Privacy Framework should first contact us at privacy@sourceaudio.com. We will respond to DPF Principles-related complaints within 45 days of receiving them.

SourceAudio has further committed to refer unresolved DPF Principles-related complaints to JAMS, an independent dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please visit https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint. JAMS services under the Data Privacy Framework are provided at no cost to the individual.

Under certain conditions, an individual may invoke binding arbitration to address complaints regarding SourceAudio's compliance with the DPF Principles that have not been resolved by other available mechanisms, as described in Annex I to the EU-U.S. DPF Principles and the applicable provisions of the Swiss-U.S. DPF Principles.

How We Use Your Personal Information

We use your Personal Information only in the ways described below, each of which is necessary to operate the Platform or is otherwise supported by a legal basis described in the "Legal Bases for Processing" section. Where we rely on your consent for a particular use, you may withdraw that consent at any time as described in that section.

  • Handling customer service requests, such as reaching out if we identify a problem you're having with the Platform.

    If you encounter a problem using the Platform and you reach out to us for assistance, we may use your contact information you previously entered to find more information about the issue and help address it.

    If the Platform generates an error while you're using it, we may log your name, email, or IP address to help us diagnose and fix the problem. In some rare cases, we may reach out to you once the error has been resolved. Access to these logs is restricted to SourceAudio personnel and service providers who need access to operate, secure, or support the Platform and its infrastructure, subject to applicable contractual and security obligations.

    We may also reach out preemptively to notify you of important events, such as downtime, security issues, and new features or services we add.

    We will never sell or share your contact information with third parties for marketing or any other purposes not explicitly outlined in this Policy.

  • Providing your personal information to Clients whose Branded Workspaces you have signed up for.

    SourceAudio.com is a technology platform that other companies ("Clients") use so when you're on a Branded Workspace, you're typically on a workspace we are hosting for a third party. When you access that Branded Workspace and provide it your personal information, the Client who set up the Branded Workspace has access to that information through the Branded Workspace's UI, our API, and downloads of user information.

    Your information will not be provided to Clients whose Branded Workspaces you did not proactively join.

    Our Clients are not bound by this Policy and may process Personal Information made available to them as independent or joint controllers, as described in the "SourceAudio's Role and the Role of Clients" section above. If you have questions about how a Client uses your information, please review that Client's privacy information or contact the Client directly or by clicking the Help link in the upper right after logging in.

  • Retaining contact info when you license tracks or use a paid service.

    Paying for a Branded Workspace or purchasing a license, a subscription, ISRCs, or SourceAudio File Delivery transfer enters you into a contract with us and/or our Clients. When you do that, some information relating to the transaction may be retained for as long as reasonably necessary to perform or document the transaction, comply with legal, accounting, tax, and contractual obligations, resolve disputes, and enforce applicable agreements.

  • Using Service Providers

    We use third-party service providers to host and operate the Platform and to provide particular features and services. These providers may process Personal Information on our behalf or, where described below, receive information directly from you.

    Amazon Web Services

    The Platform and its infrastructure are hosted on Amazon Web Services. Personal Information processed through the Platform may be transmitted to, stored on, and processed using AWS infrastructure.

    Please visit AWS Data Privacy Center to learn more about how Amazon Web Services handles personal information.

    Braintree Payments

    The Platform uses Braintree Payments to store and process credit cards. When you enter a credit card, you are actually providing your information directly to Braintree who will store and use it for processing payments you authorize. The Platform and its Clients do not see or store your credit card information.

    Please visit Braintree Legal Agreements to learn more about how Braintree handles your personal information.

    SendGrid

    The Platform uses SendGrid to send emails, such as playlist sharing notifications, invoices, etc. When those emails go to you, we provide SendGrid with your email address so they know where to send them and your name as part of the email subject or body, if relevant.

    Please visit Twilio Data Privacy to learn more about how SendGrid handles your personal information.

    MailChimp

    The Platform uses MailChimp to send large scale event and service notification emails. When those emails go to you, we provide MailChimp with your email address so they know where to send them and your name as part of the email subject or body, if relevant.

    Please visit MailChimp Legal to learn more about how MailChimp handles your personal information.

    Google Analytics

    The Platform uses Google Analytics to collect usage and technology information that helps us understand aggregate trends and improve the Platform. For example, we may look at trends in which web browsers are used to help determine which ones to support. We do not use Google Analytics to build advertising profiles about Users.

    Clients may configure their own Google Analytics tracking on their Branded Workspaces. Those configurations and the Client's use of information collected through them are determined by the Client, and you should review the applicable Client's privacy information for details.

    Please visit Google Privacy Policy to learn more about how Google Analytics handles personal information.

    Google Workspace

    SourceAudio uses Google Workspace, including Gmail, Google Drive, and Google Calendar, for business email, communications, and document storage. Personal Information you provide when communicating with SourceAudio, and Personal Information contained in business records and documents we maintain, may therefore be transmitted to, stored by, or processed using Google Workspace.

    Please visit Google Privacy Policy to learn more about how Google handles personal information.

    HubSpot

    The Platform uses HubSpot to manage customer relationships, support requests, and communications. Information you provide when creating a workspace, contacting us, or submitting a support request - including your name, email address, company name, and message content - may be stored in HubSpot. We may use this information to provide support, track feature usage and interest, and send service-related or feature-related communications.

    Please visit HubSpot Privacy Policy to learn more about how HubSpot handles your personal information.

  • Using technology libraries and resources to make the Platform faster and easier to use.

    The Platform uses some third party technologies that are hosted and owned by other companies. We do not provide your information to these companies directly but your browser may send them requests while you're on our Platform and those requests include your IP address.

    Olark

    The Platform allows Clients to use Olark to chat with you, typically to provide real time assistance with using their Branded Workspace. This feature is not enabled on every workspace.

    Please visit Olark Privacy Policy to learn more about how Olark handles your personal information.

    Font Awesome

    The Platform uses Font Awesome to generate small icons that appear across the Branded Workspaces and therefore improve usability.

    Please visit Font Awesome Privacy Policy to learn more about how Font Awesome handles your personal information.

    Google Fonts

    The Platform uses Google Fonts to deliver the text font used on Branded Workspaces.

    Please visit Google Privacy Policy to learn more about how Google Fonts handles your personal information.

    cdnjs

    SourceAudio uses cdnjs to speed up delivery of common JavaScript libraries.

    Please visit Cloudflare Privacy Policy to learn more about how cdnjs handles your personal information.

    Google Hosted Libraries

    SourceAudio uses Google Hosted Libraries to speed up delivery of common JavaScript libraries.

    Please visit Google Privacy Policy to learn more about how Google Hosted Libraries handles your personal information.

  • Meeting legal requirements

    SourceAudio may disclose content, records, or electronic communications, including Personal Information or private electronic communications transmitted on the Platform, where reasonably necessary: (i) to comply with applicable law, regulation, legal process, or lawful requests by public authorities, including requests made to meet national security or law enforcement requirements; (ii) to operate, protect, secure, or maintain the Platform; or (iii) to protect the rights, safety, or property of SourceAudio, its Users, Clients, providers, licensors, or others. SourceAudio also reserves the right to reject any order or to request additional information from any customer where appropriate.

Legal Bases for Processing

If you are located in the European Economic Area, the United Kingdom, or Switzerland, data protection law requires us to have a legal basis for each way we process your Personal Information. We rely on the following legal bases:

  • Performance of a contract

    We process your Personal Information to create and maintain your account, to provide the Platform and the Branded Workspaces you join, to handle customer service requests, and to fulfill purchases such as licenses, subscriptions, ISRCs, or SourceAudio File Delivery transfers.

  • Legitimate interests

    We process your Personal Information to secure and improve the Platform, to diagnose and fix errors, to notify you of important events such as downtime, security issues, and new features, and to provide Clients with information about the Users who join their Branded Workspaces. We rely on these legitimate interests only where they are not overridden by your rights and freedoms.

  • Consent

    We rely on your consent for non-essential cookies and similar analytics technologies, which you can manage at any time through our cookie consent banner and as described in our Cookie Policy. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

  • Legal obligation

    We process your Personal Information where necessary to comply with our legal obligations, such as retaining transaction records for tax and accounting purposes and responding to lawful requests as described in the "Meeting legal requirements" section above.

EU and UK Representatives

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

  • European Union (EU)
  • United Kingdom (UK)

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us through our representative, Prighter, or make use of your data subject rights through the representative, please visit: https://app.prighter.com/portal/sourceaudio

Cookies

The Platform uses cookies for several reasons. When you first visit the Platform, our cookie consent banner lets you choose which categories of non-essential cookies to allow, and you can change your choices at any time. You can read more about our cookie usage in our Cookie Policy.

Age Restriction

The Platform may only be used or otherwise accessed by persons 18 years of age or older. If we reasonably believe that someone under 18 years of age has provided us with personal information, we will make reasonable efforts to remove such personal information from the Platform.

Data Retention

We generally retain personal data for so long as it may be relevant to the purposes identified herein. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the information, the purposes for which we process it, whether we can achieve those purposes through other means, and applicable legal, tax, and accounting requirements. For example, we retain account information for as long as your account is active, and we retain records relating to licenses and other purchases for as long as necessary to perform the contract and to meet our legal obligations. To dispose of personal data, we may anonymize it, delete it, or take other appropriate steps. Data may persist in copies made for backup and business continuity purposes for additional time.

Security

We take reasonable steps to protect the information provided to the Platform from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from the Platform may not be secure. Therefore, you should take special care in deciding what information you send to us via email. Please keep this in mind when disclosing any information via the Internet.

Your Data Rights and Choices

You may, at any time, request an export of the Personal Information we have collected about you. The button to submit such a request can be found here or on any Branded Workspace you've joined by navigating to "Account" section of the "Dashboard". When you submit a request for your Personal Information, SourceAudio will send you a download link within 30 days.

You may, at any time, request to delete your account and Personal Information associated with your account, subject to information that SourceAudio is permitted or required to retain for legal, tax, accounting, contractual, security, fraud-prevention, dispute-resolution, or similar legitimate purposes. The button to submit such a request can be found on the "Account & User Info" tab here or on any Branded Workspace you've joined by navigating to the "Account" section of the "Dashboard". Your account is not specific to a Branded Workspace, and using the "Delete My Data" button in any location on the Platform will cause SourceAudio to delete or anonymize Personal Information associated with your account across the Platform and Branded Workspaces, subject to the retention exceptions described above and in the "Data Retention" section. Clients may have independently retained copies of Personal Information previously made available to them through their Branded Workspace, including through the Platform's user interface, API, or downloads. SourceAudio does not control Personal Information independently retained by a Client, and deleting your SourceAudio account does not necessarily delete those copies. You may contact the applicable Client regarding information it independently controls. When you submit a request to delete your Personal Information, SourceAudio will process that request within 30 days and you may cancel your request prior to our processing of it by sending an email to privacy@sourceaudio.com.

You may request that SourceAudio restrict certain processing of your Personal Information where applicable law gives you that right. You may submit a restriction request by emailing privacy@sourceaudio.com. Where a valid restriction applies, we will limit our processing of the affected Personal Information as required by applicable law.

If you request to delete your account after requesting an export of your Personal Information, it's possible your information will be deleted before you download the export, in which case there will be nothing to download.

If you would like to make sure that the information we do have about you is accurate, if you wish to change your information in our database, or if you object to your Personal Information being used by SourceAudio, just send an e-mail message explaining the request to: privacy@sourceaudio.com

Depending on where you live, you may have additional rights, including the right to access a copy of your Personal Information, to correct inaccurate information, to receive your information in a portable format, to object to or restrict certain processing, and to withdraw any consent you have given. The export and deletion tools described above allow you to exercise your access, portability, and erasure rights directly, and you can exercise any other right by emailing privacy@sourceaudio.com. We will not discriminate against you for exercising any of these rights.

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing without human involvement.

If you are located in the European Economic Area, the United Kingdom, or Switzerland and believe we have not handled your Personal Information in accordance with applicable law, you have the right to lodge a complaint with your local data protection supervisory authority. We would, however, appreciate the chance to address your concerns directly before you do so.

Your California Privacy Rights

This section provides additional information for California residents, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"). It supplements the rest of this Privacy Policy.

Categories of personal information we collect

In the preceding 12 months, we have collected the following categories of personal information, as defined by the CCPA: identifiers (such as your name, email address, and IP address); commercial information (such as records of licenses, subscriptions, and other purchases); internet or other electronic network activity information (such as how you interact with the Platform); and any additional information you voluntarily provide to a Branded Workspace. We collect this information from you directly, automatically as you use the Platform, and from the Clients whose Branded Workspaces you join.

How we use and disclose this information

We use each category for the business and commercial purposes described in the "How We Use Your Personal Information" and "Legal Bases for Processing" sections. We disclose personal information to the service providers and Clients described in this Policy for those same purposes.

Sale and sharing of personal information

We do not sell your personal information for money or other valuable consideration, and we have not sold personal information in the preceding 12 months. We also do not "share" your personal information for cross-context behavioral advertising, and we have not done so in the preceding 12 months. We do not sell or share the personal information of consumers we know to be under 16 years of age.

Sensitive personal information

SourceAudio may process sensitive personal information where necessary to provide, secure, or administer the Platform, such as account authentication information, or where you voluntarily provide information through a Branded Workspace. SourceAudio does not use or disclose sensitive personal information for purposes that require us to offer a right to limit under the CCPA. A Client may choose to request additional information through its Branded Workspace. The Client is responsible for its own collection and use of that information as described in the "SourceAudio's Role and the Role of Clients" section above.

Your California rights

Subject to certain exceptions, California residents have the right to know what personal information we have collected and how we use and disclose it, the right to request deletion of their personal information, the right to correct inaccurate personal information, and the right not to be discriminated against for exercising these rights. You can exercise your rights to know, delete, and correct using the tools and contact methods described in the "Your Data Rights and Choices" section above. You may use an authorized agent to submit a request on your behalf, and we may ask you to verify your identity before we respond.

Opt-out preference signals

Because we do not sell or share personal information, you do not need to opt out. If our practices change, we will honor opt-out preference signals, such as the Global Privacy Control (GPC), that your browser sends to us.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we update it, we will post the revised policy and update the "Last updated" date above. Where required by applicable law or the DPF Principles, we will provide additional notice or choice before using Personal Information previously collected in a materially different manner. Please review this Policy periodically for updates.

Contacting Us

Please feel free to contact us at any time if you have any questions about this Privacy Policy or how SourceAudio handles your Personal Information at privacy@sourceaudio.com.

SourceAudio Holdings LLC
PO Box 2069
Palos Verdes, CA 90274-9998