Privacy Policy

IV Elysium Ltd is the data controller responsible for personal information collected through this platform. For questions about this Privacy Policy or your personal information, contact info@ivelysium.com.

The underlying dashboard technology is powered by the enarumusic white-label framework, acting strictly as a technical infrastructure layer on behalf of the Data Controller.

2.1 Account Information

When you create an account, we collect:

• Username (used for account access and platform display)
• Password (stored securely using Supabase Auth)
• Artist or stage name (for profile display and release attribution)
• Profile picture URL (optional, if you choose to upload an avatar)
• Account creation date and last login timestamp

2.2 Payment Information

We do not collect or store IBANs, PayPal addresses, payout destinations, payment request history, or royalty transaction records in this dashboard.

2.3 Music Content and Metadata

When you upload music releases, we store:

• Audio files (in various formats as you upload them)
• Album artwork and promotional images
• Release metadata including titles, descriptions, genres, release dates, and ISRC codes
• Track listings, durations, and other technical information
• Administrative release status, such as draft or submitted

2.4 Usage and Technical Data

We automatically collect certain technical information when you use our platform:

• Browser type, version, and language preferences
• Operating system and device information
• Pages visited, features used, and time spent on the platform
• Error logs and diagnostic information for troubleshooting

2.5 Communications

We store records of:

• Support tickets and help desk interactions
• Support requests and messages submitted through the platform
• In-app notifications and alerts shown through the Notification Bell
• Feedback, suggestions, and survey responses

2.6 Administrative Release Data

The dashboard may store administrative release information entered by users or provided for dashboard purposes. It does not automatically collect streaming statistics or royalty information from external platforms.

2.7 Age Information

You must be at least 13 years old to create an account. If you are under 18, you must have permission from a parent or legal guardian where required. We may process age information only where needed to apply this requirement or comply with applicable law.

We process your personal information for the following purposes:

3.1 Service Provision

• Creating and maintaining your artist account
• Providing the dashboard, release records, account features, and in-app notifications
• Supporting manual administrative processes where separately agreed
• Providing customer support and responding to inquiries

3.2 Platform Improvement

• Analyzing usage patterns to improve platform functionality and user experience
• Developing new features and services based on user needs
• Testing new features

3.3 Security and Fraud Prevention

• Monitoring for fraudulent streaming activity and artificial stream manipulation
• Detecting and preventing unauthorized account access
• Investigating violations of our Terms of Service
• Maintaining the integrity of our platform and payment systems

3.4 Legal Compliance

• Complying with applicable UK laws, including the UK GDPR and the Data Protection Act 2018; EU/EEA data-protection law may also apply where relevant
• Responding to lawful legal requests, court orders, and regulatory demands
• Enforcing our Terms of Service and other agreements
• Meeting applicable legal, regulatory, accounting, and security obligations

3.5 Communications

• Displaying account, platform, and policy updates through the in-app Notification Bell
• Providing messages and notices within the dashboard

The Notification Bell is used for in-app platform notices. This dashboard does not provide email marketing preferences.

We do not sell your personal information to third parties. We share your information only in the following limited circumstances:

4.1 Platform Technology Provider

enarumusic is the platform name used for this dashboard. IV Elysium Ltd may use service providers for hosting, database, storage, security, and application operations under appropriate contractual safeguards.

4.2 Music Distribution Partners

The dashboard does not automatically send music, artwork, or metadata to streaming platforms or digital stores.

4.3 Payment Processors

The dashboard does not process royalty payouts or share payout information with payment processors.

4.4 Cloud Infrastructure

We use Vercel for application hosting, Supabase for database services, and Backblaze B2 for file storage. These providers have access to personal information only to the extent necessary to provide their services and are subject to appropriate contractual safeguards.

4.5 Email Services

The platform uses in-app notifications through the Notification Bell rather than email marketing or email-based platform notifications.

4.6 Legal Requirements

We may disclose your information if required to do so by applicable law, including:

• Valid legal processes such as subpoenas, court orders, or search warrants
• Requests from law enforcement or government authorities
• Emergencies involving potential harm to individuals
• Protection and enforcement of our legal rights

4.7 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the successor entity. We will notify you of any material change in ownership or control of your personal information.

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Account information: Retained while your account is active and for 10 years after account closure where required by applicable UK company, accounting, and tax-recordkeeping obligations
• Payment and financial records: Retained for 10 years after the last transaction as required by applicable UK tax law
• Music content: Retained until you request deletion or close your account
• Administrative release data: Retained while needed for the dashboard, support, security, legal, or contractual purposes
• Usage logs and analytics: Retained for 2 years unless anonymized earlier in accordance with GDPR
• Support communications: Retained for 3 years after resolution

Depending on where you reside, you may have certain rights regarding your personal information.

6.1 Rights under UK GDPR and the Data Protection Act 2018

As a UK-based operator under the UK GDPR and the Data Protection Act 2018, all users have the following rights:

• Right of Access (Art. 15 GDPR): You may request a copy of all personal data we hold about you, including processing purposes, recipients, and retention periods.
• Right to Rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17 GDPR): You may request deletion of your personal data, subject to legal retention obligations under UK law.
• Right to Restriction (Art. 18 GDPR): You may request that we restrict processing of your data in certain circumstances.
• Right to Data Portability (Art. 20 GDPR): You may request your data in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): You may object to processing based on legitimate interests.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

To exercise your privacy rights, contact us at info@ivelysium.com. We will respond within 30 days as required by GDPR Article 12.

6.2 General Privacy Rights (All Users)

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may update most account information directly in your account settings.
• Deletion: You may request deletion of your account by contacting info@ivelysium.com, subject to our legal retention obligations.
• In-app notices: Account and platform notices are displayed through the Notification Bell.

6.3 Rights for EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you are protected by the General Data Protection Regulation (GDPR). You retain all rights afforded under the GDPR, including rights of access, rectification, erasure, restriction, portability, and the right to lodge a complaint with your local supervisory authority. For GDPR-related inquiries, contact info@ivelysium.com.

enarumusic is the platform name used for this dashboard and is not represented as a separate incorporated entity.

You must be at least 13 years old to create an account. Where required, users under 18 must have permission from a parent or legal guardian.

We handle age-related information in accordance with the UK GDPR and the Data Protection Act 2018. If you believe a person under 13 has created an account, contact info@ivelysium.com.

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit using TLS and HTTPS
• Encryption of sensitive data at rest using AES-256 encryption
• Secure password storage using bcrypt hashing with salt
• Access controls and authentication requirements for all team members
• Monitoring and logging of suspicious activity
• Incident response procedures for potential data breaches

While we take reasonable precautions to protect your data, no method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

IV Elysium is a UK-based operator. Personal information may be processed in the UK and in other countries where our service providers operate. Where required, we use appropriate safeguards for international transfers, such as UK International Data Transfer Agreements, UK Addendum arrangements, or adequacy regulations. EU/EEA GDPR protections and transfer rules apply only where legally applicable to our processing.

We use cookies and similar technologies to:

• Maintain your login session and remember your preferences
• Analyze platform usage and improve our services
• Provide security features and prevent fraud

Types of cookies we use:

• Essential cookies: Required for the platform to function, including authentication and security
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Help us understand how you use the platform

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit platform functionality.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform functionality. Material changes will be communicated through a notice in the dashboard or Notification Bell. Your continued use of IV Elysium after the effective date of an updated Privacy Policy constitutes your acceptance of the changes.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For all GDPR-related requests (access, rectification, erasure, portability, objection), we will respond within 30 days as required by GDPR Article 12. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).