Last updated: 16 July 2026

Music Label Group ("we", "us") operates LISTNBASE. This policy explains what personal data we handle, why, and what you can do about it.

1. Two different roles — this matters

We handle personal data in two distinct capacities, and your rights differ depending on which applies:

• As controller — for the people who sign up to use LISTNBASE: label owners, their team members, and anyone who contacts us. We decide how that data is used.
• As processor — for the data a label puts into LISTNBASE about other people: their artists, demo submitters, fans who use a link, and anyone who signs a document. The label decides what goes in and why. We only act on their instructions.

If you are an artist, a fan, or you sent a demo, and you want your data changed or removed, contact the label directly — they control it. If you cannot reach them, contact us at privacy@mlgmusic.com and we will help you find them.

2. What we collect

When you use LISTNBASE as a label

• Account — label name, owner email, plan, and any custom domain you connect.
• Users and team — name, email, password (hashed, never stored in readable form), and role.
• Billing — handled by Stripe. We store your Stripe customer and subscription identifiers. We never see or store your card number.
• Sign-in records — including IP address, to secure accounts and detect misuse.

What labels put in, about other people

• Artists — name, email, photo, social links, and commercial terms such as splits and advances.
• Demo submissions — whatever the submitter sends: name, email, links, audio.
• Contacts — the label's own address book.
• Fans and subscribers — email addresses captured through fan links, email-capture blocks and forms.
• Form submissions — the fields the label chose to ask for, plus the submitter's IP address.
• Royalty data — earnings, splits, advances and recoupment per artist.

Documents and e-signatures

When someone signs a document in LISTNBASE, we record their name, IP address, user-agent and the exact time. This is deliberate: that record is what makes an electronic signature evidentially useful. We also keep a version history and an access log for each document. If you sign something here, that evidence is retained for as long as the document is.

AI features

LISTNBASE includes optional AI features (analytics summaries, demo review, copywriting). When one is used, the text of that request is sent to a third-party AI provider — currently Anthropic, OpenAI or Google, depending on configuration. We record which account used which feature and how many tokens it consumed, for billing and abuse prevention. We do not send your royalty figures, contracts or documents to an AI provider. Do not paste anything into an AI field that you would not send to a third party.

3. Why we handle it, and on what basis

• To provide the service — performance of our contract with you.
• To bill you — performance of contract.
• To secure the platform (sign-in logs, IP records, spam protection) — our legitimate interest in keeping accounts safe.
• To reply to you — legitimate interest, or your consent.

4. Who else sees it (sub-processors)

We use these providers. This list is accurate as of the date above; we will update it when it changes.

• Stripe — payments and subscriptions.
• Anthropic, OpenAI, Google — AI features, when used.
• Google — Places data, for the venue and contact lookup tools; and Fonts, which are loaded from Google's servers when you view our pages.
• Cloudflare — content delivery, security, and object storage where configured.
• Our hosting provider — CloudFlare, where the application and database run.
• Our email provider — for transactional email such as invitations and notifications.

We do not sell personal data. We do not share it for advertising.

5. Where it lives

Files you upload — documents, statements, audio, images — are stored either on our application server or with an object-storage provider (Cloudflare R2, Amazon S3 or DigitalOcean Spaces), depending on configuration. Private files are served only through access-controlled links. The database is hosted in the NewYork.

If you are outside the United States, your data will be transferred to and processed in the US.

6. How long we keep it

• Account data — while your account is active, and for 30 days after you close it.
• Documents and signature evidence — until you delete the document. Signature records are retained with the document because that is their purpose.
• Royalty and financial records — retained as long as required for tax and accounting.
• Form and contact submissions — until the label deletes them.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, and to object to some processing. Contact privacy@mlgmusic.com and we will respond within 15 days.

Remember section 1: if a label holds your data, we will pass your request to them.

8. Cookies

We use a session cookie to keep you signed in. It is required for the service to work. Our hosting and security provider may also set cookies for performance and bot protection. We do not use advertising cookies.

9. Children

LISTNBASE is a business tool and is not directed at children. Do not use it to submit a child's personal data without a lawful basis for doing so.

10. Changes

We will update this page when our practices change, and change the date at the top. Material changes will be notified to account owners by email.

11. Contact

Music Label Group
1101 Penn Ave, NW Washington, DC 20004
privacy@mlgmusic.com