Privacy policy

Who we are

This site, onesideglobaldistro.com, is operated by One Side Global Distribution LLC, trading as One Side Global Distro (“One Side Global”, “we”, “us”), of 5830 E 2nd St, Casper, WY 82609, United States.

We are a music distribution service. Artists pay us a yearly subscription, and we deliver their recordings to streaming services and stores, collect what those recordings earn, and pay it on. This policy explains what personal data that involves, why we hold it, and what you can tell us to do with it.

If you have a question about this policy, or you want to see, correct or delete what we hold, write to support@onesideglobaldistro.com. A person answers, and you will not be asked to explain why.

What we collect

What we hold depends entirely on how far you go. Reading the site involves no personal data at all. The rest applies only if you choose to give it.

• If you only read the site: nothing. No account, no cookie, no analytics, no profile.
• If you join the early-access list: your email address, and nothing else.
• If you create an account: your email address and a password, which is stored only as a cryptographic hash and cannot be read back by us or by anyone else.
• If you set up an artist profile: your artist name, your handle, and anything else you choose to fill in — a biography, a country, a website, and links to your profiles on the stores. All of it is optional except the name and handle, and all of it is yours to edit or remove.
• If you submit a release: the audio and artwork you upload, and the release information you supply — titles, credits, contributors, songwriter and performer names, release dates, and identifiers such as ISRC and UPC codes.
• If you subscribe: the fact that you subscribed, which plan, when it renews, and identifiers that let us match your account to your subscription. We never see or store your card number — see “Payment” below.
• Whenever you use the site: technical information our host records to serve pages and keep the service secure, including your IP address, browser type and basic request details.

Payment

Payments are processed by Paddle, which acts as the merchant of record. That means Paddle is the seller of record for your subscription, takes the payment, and handles sales tax and VAT.

Your card details go directly to Paddle and never reach us. We do not see them, we cannot store them, and we could not charge your card ourselves if we wanted to. What we receive back is confirmation that a payment succeeded, which plan it was for, when the subscription renews, and an identifier for it.

Paddle handles the personal data you give it under its own privacy policy, at https://www.paddle.com/legal/privacy.

Why we collect it, and on what basis

Each thing we hold has one reason, and we do not repurpose it for another.

• Your account details, to let you sign in and to keep your releases attached to you rather than to somebody else. Basis: performance of our contract with you.
• Your artist profile and release information, to deliver your music to the stores. Much of it is passed on to them, because a store cannot list a track without knowing who made it — see “Sending your music to the stores”. Basis: performance of our contract.
• Your subscription status, to know whether your account is current. Basis: performance of our contract.
• Service emails — confirming your address, resetting your password, telling you a release went live. These are not marketing and you cannot unsubscribe from them while you hold an account, because they are how the service works. Basis: performance of our contract.
• Your early-access address, to email you when the platform opens, and for nothing else. Basis: your consent, which you can withdraw at any time.
• Technical logs, to keep the service running and to investigate abuse. Basis: our legitimate interest in a service that works and is not defrauded.
• Records of payments and payouts, to meet our tax and accounting obligations. Basis: legal obligation.

What we do not do

We do not sell, rent or trade your personal data. Not to advertisers, not to data brokers, not to anyone.

We do not build advertising profiles, we do not track you across other sites, and we do not run behavioural advertising of any kind.

We do not use your music to train machine-learning models, and we do not licence it to anyone who does. Your recordings go to the stores you chose and nowhere else.

We do not send you marketing about unrelated products, and we do not add you to a mailing list because you bought a subscription.

Cookies, analytics and tracking

If you are not signed in, this site sets no cookies at all. It writes nothing to local storage or session storage, runs no analytics, loads no advertising pixels, and fetches no fonts, images or scripts from anyone else. That is why you were never asked to accept anything: there is nothing to accept.

Once you sign in, we set session cookies. They exist so the site knows it is still you between one page and the next — without them you would be signed out on every click. They are strictly necessary for a service you asked for, which is why they need no consent banner, and they are used for nothing but keeping you signed in. Signing out clears them.

We set no analytics, advertising or tracking cookies at any point, signed in or not.

Sending your music to the stores

Distribution means sending your recordings, artwork and release information to streaming services and stores — Spotify, Apple Music, Amazon Music, YouTube Music, TikTok and many others.

Some of what you give us is published by them as a matter of course: your artist name, track and release titles, credits, and the names of writers and performers you list. That is the point of the exercise — a store cannot show your music without showing who made it. Consider anything you enter as a credit to be public.

Your email address, your password, your address and your payment details are never sent to a store. They have no reason to see them and we do not share them.

Once a store has your release, it holds that information under its own terms and its own privacy policy. If you ask us to take a release down we will pass the request on, but we cannot force a store to erase records it keeps for its own accounting.

Who else handles your data

We use a small number of companies to run the service. Each acts as our processor: they hold data on our behalf and under our instructions, and none of them may use it for their own purposes.

• Supabase — accounts, authentication and the database. Their privacy policy is at https://supabase.com/privacy.
• Netlify — hosting, and the early-access list. https://www.netlify.com/privacy/.
• Resend — sending the service emails described above. https://resend.com/legal/privacy-policy.
• Paddle — payments, as the merchant of record described above. https://www.paddle.com/legal/privacy.

How long we keep it

Your account and artist profile are kept for as long as you have an account. Close it and we delete them, other than what we are required to keep.

Your early-access address: We keep your address until you ask us to delete it, or 24 months after early access opens — whichever comes first.

Release information stays with us for as long as the release is out, because we have to be able to answer questions about a track that is still earning, and to keep paying you for it.

Records of payments, payouts and tax are kept for as long as the law requires us to keep them — typically several years — even after an account is closed. We keep the minimum necessary and nothing more.

Technical logs are short-lived and are not used to build any profile of you.

Your choices and your rights

To see what we hold, correct it, delete it, take a copy of it elsewhere, or withdraw a consent you gave, email support@onesideglobaldistro.com. We will action requests promptly and will not ask you to justify them.

Depending on where you live you may also have the right to object to or restrict how we use your data, and to complain to your local data protection authority. If you are in the UK that is the Information Commissioner’s Office; in the EEA it is the authority for your country.

Some rights have limits we would rather state than have you discover. We cannot delete records the law requires us to keep, and we cannot recall information already published by a store. Deleting your account does not by itself take your music down — tell us if that is what you want, and we will handle both.

We will not treat you differently, charge you more, or give you a worse service for exercising any of these rights.

How it is protected

The site is served over HTTPS only, with HSTS enabled. Passwords are stored as cryptographic hashes, never as text, so nobody at One Side Global can read yours.

Access to the database is restricted at the row level: the rules are written so that a signed-in artist can read and change their own records and nobody else’s. Inside One Side Global, only people who need your data to run the service can reach it.

No transmission over the internet is ever completely secure, and we will not claim otherwise. If we ever discover a breach affecting your personal data, we will tell you and the relevant authority as the law requires, and we will tell you what actually happened rather than the least alarming version of it.

Children

This service is not directed at children, and we do not knowingly hold personal data from anyone under 16. If you are under 16, ask a parent or guardian to hold the account.

If you believe a child has given us their details, write to us and we will delete them.

Where your data is held

We are established in the State of Wyoming, United States, and this policy is governed by its law.

Our processors operate infrastructure in several countries, so your data is likely to be processed outside your own — including in the United States. Where the law requires safeguards for that, we rely on the terms in our processors’ data processing agreements.

Distribution is worldwide by its nature: if you ask us to release your music in a territory, the information needed to list it goes to that territory.

Changes to this policy

We will update this page if what we collect or how we use it changes, and we will change the date at the top.

If a change materially affects you — new data, a new purpose, a new processor — we will email you rather than rely on you re-reading this page. Continuing to use the service after that is how you accept it; if you would rather not, you can close your account.