Introduction
Kentunez Music ("Kentunez," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, store, share, and safeguard your data when you access our website (kentunez.com), mobile applications, dashboard, and related services (collectively, the "Service"). By using our Service, you consent to the practices described in this policy.
Information We Collect
Information You Provide Directly
- Account registration data — full name, email address, phone number, country of residence, date of birth
- Artist profile information — artist/stage name, biography, profile photo, social media links
- Payment details — M-Pesa phone number, bank account information, PayPal address for royalty withdrawals
- Music content — audio files, cover artwork, metadata (track titles, ISRC codes, genre, release dates, lyrics)
- Communications — support tickets, emails, feedback, and any messages you send to us
- Identity verification documents — when required for payment processing or fraud prevention
Information Collected Automatically
- Device information — browser type and version, operating system, device identifiers, screen resolution
- Usage data — pages visited, features used, session duration, click patterns, search queries within the platform
- Log data — IP address, access timestamps, referring URLs, error logs
- Cookies and tracking technologies — session cookies, persistent cookies, local storage (see Section 8)
Information from Third Parties
- Authentication providers — Google Sign-In profile data (name, email, profile picture)
- Payment processors — transaction confirmations and payment status from M-Pesa, PayPal, or banking partners
- Streaming platforms — aggregated analytics data, stream counts, and royalty reports from stores we distribute to
How We Use Your Information
Service Delivery
- Create and manage your account and artist profile
- Process and distribute your music to streaming platforms and digital stores
- Collect, calculate, and disburse royalty payments
- Perform Quality Control (QC) checks on uploaded content
- Provide analytics and reporting on your music performance
Platform Improvement
- Analyze usage patterns to improve features and user experience
- Debug technical issues, monitor platform performance, and prevent downtime
- Develop new tools and services based on aggregated user behavior
Communication
- Send transactional emails (release confirmations, payment receipts, QC results)
- Respond to support requests and provide customer service
- Send platform updates, policy changes, and security alerts
- Deliver optional marketing communications (only with your consent)
Legal & Security
- Detect and prevent fraud, abuse, and unauthorized access
- Enforce our Terms of Service and content policies
- Comply with applicable legal obligations and respond to lawful requests
Information Sharing & Disclosure
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your data in the following circumstances:
- Streaming Platforms & Stores — We share your artist name, metadata, audio content, and artwork with the platforms you select for distribution. This is essential to deliver your music.
- Payment Processors — We share necessary financial information with M-Pesa (Safaricom), PayPal, and banking partners to process royalty withdrawals and subscription payments.
- Service Providers — We use trusted third-party services for hosting (Vercel, Firebase/Google Cloud), email delivery, analytics, and infrastructure. These providers are contractually obligated to protect your data and use it only for providing services to us.
- Legal Requirements — We may disclose your information if required by law, subpoena, court order, or government request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
Data Security
We implement industry-standard technical and organizational measures to protect your personal information, including:
- Encryption of data in transit using TLS/SSL protocols
- Secure authentication via Google Sign-In with OAuth 2.0
- Firebase Security Rules to restrict database access to authorized users only
- Regular security audits and monitoring for unauthorized access attempts
- Access controls limiting employee access to personal data on a need-to-know basis
While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data and encourage you to use strong passwords and enable two-factor authentication on your Google account.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide our services. Specific retention periods include:
- Account data — retained for the lifetime of your account plus 12 months after deletion request
- Music content & metadata — retained while your releases are live on stores, plus 6 months after takedown completion
- Transaction and payment records — retained for 7 years for tax and legal compliance
- Support communications — retained for 3 years from the date of the last message
- Usage and analytics data — retained in aggregated, anonymized form indefinitely
Upon account deletion, we will remove or anonymize your personal data within 30 days, except where retention is required by law.
Your Rights
Depending on your location and applicable data protection laws, you may have the following rights regarding your personal information:
- Right to Access — Request a copy of the personal information we hold about you
- Right to Rectification — Request correction of inaccurate or incomplete data
- Right to Erasure — Request deletion of your personal data, subject to legal retention requirements
- Right to Restriction — Request that we limit processing of your data in certain circumstances
- Right to Data Portability — Request your data in a structured, machine-readable format
- Right to Object — Object to processing of your data for certain purposes, including direct marketing
- Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, contact us at privacy@kentunez.com. We will respond within 30 days of receiving your request. We may ask you to verify your identity before processing your request.
Children's Privacy
Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at privacy@kentunez.com and we will take steps to delete such information within 30 days. Users between 13 and 18 years of age may use the Service only with the consent and supervision of a parent or legal guardian.
International Data Transfers
Kentunez operates primarily in Kenya and uses cloud infrastructure provided by Google (Firebase) and Vercel, which may store and process data in various locations worldwide. By using our Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable regulations.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email and/or by posting a prominent notice on the platform at least 14 days before the changes take effect. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Team at: privacy@kentunez.com. For general support inquiries, reach out to support@kentunez.com. We aim to respond to all privacy-related inquiries within 48 business hours.
Your privacy is important to us
If you have any questions about how we handle your data, our privacy team is here to help.
Email privacy@kentunez.com