Privacy Policy

1. Overview & Scope

Welcome to the Tanu Music CMS Content Partner & Multi-Channel Network (MCN) Platform (cms.tanumusic.com). We are committed to safeguarding the privacy and intellectual property rights of all affiliated creator channels, record labels, media production houses, and rights holders.

This Privacy Policy governs the manner in which Tanu Music CMS collects, uses, maintains, and discloses information collected from registered creators and enterprise partner networks through our Content ID management system, revenue analytics portal, and video rights ingestion pipelines.

2. Information We Collect

We collect information necessary to link YouTube channels to our Content Manager, synchronize digital assets, and process monthly creator ad revenue distributions:

• Identity & Profile Data: Full legal name, official business/creator email, phone number, company/record label name, and government tax identification credentials.
• Channel Information: YouTube Channel ID, channel handle, subscriber count, lifetime view statistics, category classification, and channel avatar/banner assets.
• Audio-Visual Assets & Content ID Data: Media files uploaded for fingerprinting, acoustic waveform hashes, visual frame signatures, ISRC / ISWC codes, custom asset IDs, and territorial rights metadata.
• Authentication & Technical Telemetry: OAuth2 access tokens, refresh tokens, IP addresses, browser fingerprint data, audit logs, and operational activity timestamps.

3. YouTube & Google API Services User Data Policy

Our application accesses YouTube API Services to manage your linked channel's Content ID assets, claim policies, and revenue reporting. In compliance with the Google API Services User Data Policy, our use and transfer of information received from Google APIs adhere to the following strict principles:

• Limited Use Requirement: We exclusively use Google API data to provide rights management, claim automation, and financial payout reconciliations requested directly by you.
• No Human Viewing of Private Content: Our engineers and staff do not inspect your private video references or credentials unless required by applicable law or authorized by you for technical dispute debugging.
• No Targeted Advertising: Channel analytics and metadata retrieved via YouTube APIs are never sold, rented, or repurposed for third-party advertising or market brokers.
• Revocation of Access: You can revoke CMS access to your Google account at any time via your Google Security Permissions dashboard.

4. Content ID & Digital Fingerprinting Data

When you submit digital audio tracks, web series, or film compositions for Content ID protection, our automated ingestion engine generates cryptographic fingerprint hashes (SHA-256 and perceptual acoustic representations).

These reference files are stored in secure cloud vaults and used solely for continuous match evaluation against public YouTube user-generated content (UGC). Claim metadata (such as match percentages, dispute notices, and timestamp segments) is preserved to defend your intellectual property against unauthorized copyright infringement.

5. Financial & Revenue Payout Data

To distribute monthly ad earnings, YouTube Premium royalties, and Content ID claiming revenues under agreed contract splits (e.g., 80% Creator / 20% CMS), we record:

• Banking details, Wire Routing numbers, UPI IDs, or verified PayPal/Stripe accounts.
• Gross revenue, Monetized Playbacks, CPM/RPM metrics, and tax withholding (TDS / W-8BEN) documentation.
• Payout statements and historical transaction invoices maintained for statutory accounting audits.

6. Third-Party Service Providers

We do not sell your personal data. We only share specific data segments with authorized third parties strictly required for platform operation:

• Google LLC / YouTube: For Content Manager channel linking, Content ID reference delivery, and dispute claim arbitration.
• Payment Processors & Banking Partners: Stripe, PayPal, and RBI/SWIFT banking intermediaries for creator disbursements.
• Cloud Infrastructure Providers: ISO-27001 certified secure hosting infrastructure for database storage and asset processing.
• Legal & Regulatory Authorities: When required by court order, subpoena, or to combat copyright fraud.

7. Security Standards & Data Retention

We employ state-of-the-art security measures including End-to-End TLS 1.3 encryption in transit, bcrypt hashed passwords with high salt factors, automated token invalidation, role-based access control (RBAC), and continuous vulnerability monitoring.

Account records and asset fingerprints are retained as long as your channel remains affiliated with our CMS Network. Upon contract termination and channel unlinking, personal data is purged within 90 days, subject to mandatory legal tax preservation requirements.

8. Creator Rights (GDPR & CCPA Compliance)

Under international privacy regulations (including EU GDPR and California CCPA/CPRA), creators and copyright holders enjoy the following rights:

• Right to Access: Request a full machine-readable export of all metadata, claims, and payout statements associated with your account.
• Right to Rectification: Update or correct inaccurate channel or payment records via your dashboard settings.
• Right to Erasure (Be Forgotten): Request the permanent deletion of your profile and removal of non-disputed reference fingerprints.
• Right to Restrict Processing: Request temporary pause on automated UGC claim actions while ownership disputes are under legal arbitration.

9. Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect revisions in YouTube API terms, regulatory changes, or CMS features. In the event of material modifications, active creators will be alerted via dashboard notifications and email announcements at least 15 days prior to implementation.

10. Contact Our Data Protection Officer

If you have any questions, concerns, or data privacy requests regarding this policy, please reach out to our dedicated privacy desk: