Privacy Policy - Protecting Your Data & Artist Information | KratoLib

Effective Date: April 2025
Last Updated: April 2025

Welcome to KratoLib, India's growing online music distribution platform. KratoLib (“we,” “our,” or “us”) is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our website and services at www.kratolib.com (the “Platform”).

By accessing or using our Platform, you agree to the terms of this Privacy Policy. Please read it carefully.

1. Information We Collect

We collect the following categories of information when you register, use, or interact with our Platform:

a) Personal Identification Information

• Full name, artist/band name, and stage name
• Email address and phone number
• Date of birth and country of residence
• Government-issued ID (for identity verification and royalty payments)

b) Financial Information

• Bank account details, UPI ID, or payment wallet information
• PAN card or GST number (for Indian tax compliance)
• Billing address and transaction history

c) Music & Content Data

• Uploaded audio files, album art, lyrics, and metadata
• ISRC codes, UPC barcodes, and distribution preferences
• Royalty splits and collaborator information

d) Technical & Usage Data

• IP address, browser type, and operating system
• Pages visited, features used, and time spent on the Platform
• Device identifiers and referring URLs
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your KratoLib account
• To distribute your music to Digital Service Providers (DSPs) such as Spotify, Apple Music, JioSaavn, Gaana, Amazon Music, YouTube Music, and others
• To process payments and transfer royalties to you
• To generate streaming and sales reports and analytics for your dashboard
• To verify your identity and prevent fraud
• To comply with Indian tax regulations, including TDS deductions where applicable
• To communicate with you via email, SMS, or in-app notifications regarding your account, distributions, and platform updates
• To improve and personalize your experience on the Platform
• To respond to customer support inquiries
• To enforce our Terms of Service and legal obligations

3. Sharing of Your Information

KratoLib does not sell your personal data to third parties or advertisers. We share your information only in the following circumstances:

a) Digital Service Providers (DSPs)

We share your music metadata, artist information, and relevant personal details with DSPs (such as Spotify, Apple Music, JioSaavn, etc.) as required to distribute and deliver your content on those platforms.

b) Payment Processors

We share financial information with payment gateways, banks, and UPI providers as necessary to process your earnings and subscription payments.

c) Government & Legal Authorities

We may disclose your information if required by law, court order, or government authority, including the Income Tax Department of India, GST authorities, or any other statutory body.

d) Service Partners

We may share data with trusted third-party service providers who assist us in operating our Platform (e.g., cloud hosting, analytics, email services). These partners are contractually obligated to protect your data and may not use it for any other purpose.

4. Data Storage & Security

We take the security of your data seriously. KratoLib implements the following measures:

• Industry-standard SSL/TLS encryption for all data transfers
• Secure, encrypted storage of sensitive information including financial and personal data
• Access controls ensuring only authorized personnel can access your data
• Regular security audits and vulnerability assessments
• Two-factor authentication options to protect your account

Your data is primarily stored on servers located in India. In certain cases, data may be processed by our DSP partners or service providers located outside India. We ensure that appropriate safeguards are in place for any cross-border data transfers, in accordance with applicable Indian data protection laws.

While we take every reasonable precaution, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your information.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Specifically:

• Account data is retained for the duration of your active subscription and for a period of 3 years thereafter for legal and financial compliance
• Financial and transaction records are retained for a minimum of 7 years as required under Indian tax and financial regulations
• Music content and metadata may be retained even after account deletion to fulfill outstanding distribution obligations, after which it will be removed from DSPs and our systems

You may request deletion of your account and personal data at any time, subject to our legal retention obligations.

6. Cookies & Tracking Technologies

KratoLib uses cookies and similar tracking technologies to enhance your experience on the Platform. These include:

• Essential Cookies: Required for the Platform to function correctly (login sessions, preferences)
• Analytics Cookies: Help us understand how users interact with our Platform (e.g., Google Analytics)
• Marketing Cookies: Used to show relevant promotions (only with your consent)

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. By continuing to use our Platform without changing your cookie settings, you consent to our use of cookies.

7. Your Rights & Choices

As a user of KratoLib, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Deletion: Request deletion of your personal data, subject to legal retention requirements
• Right to Portability: Request a copy of your data in a portable format
• Right to Withdraw Consent: Withdraw consent for data processing at any time (this may affect your ability to use the Platform)
• Right to Opt-Out: Unsubscribe from marketing communications at any time

To exercise any of these rights, you may log in to your account settings or contact our support team at privacy@kratolib.com. We will respond to your request within 30 days.

8. Children’s Privacy

KratoLib's services are intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under the age of 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@kratolib.com and we will promptly delete such information.

9. Third-Party Links & Platforms

Our Platform may contain links to third-party websites or services (such as DSP platforms, social media, or payment gateways). KratoLib is not responsible for the privacy practices of these third parties. We encourage you to review their respective privacy policies before providing any personal information.

10. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make significant changes, we will notify you via email or a prominent notice on our Platform at least 7 days before the changes take effect. Your continued use of the Platform after the effective date of the revised policy constitutes your acceptance of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the details of our Grievance Officer are as follows:

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the jurisdiction of courts in Ahmedabad, Gujarat, India.