1. Data controller

DMD.AD is the controller of the personal data you provide when using the service.

2. Data we collect

• Account data: name, email, WhatsApp number, country, password (stored encrypted).
• Payment and tax data: bank name, account number and account holder name, tax ID (NPWP).
• Agreement data: your electronic signature and the photo of yourself (selfie) taken when you sign an agreement, plus the IP address and device type at signing. A photo of your face is specific personal data under the UU PDP.
• Catalog data: releases, recordings, artwork, artist names, contributors and royalty splits.
• Usage data: sign-in logs, activity in the panel, and smart link statistics.

3. Purposes and legal basis

• Performing the distribution agreement: delivering releases to DSPs, calculating and paying royalties.
• Identity verification and fraud prevention, including proving that you signed your agreement yourself.
• Meeting legal obligations, including tax.
• Sending service notifications by email and WhatsApp (some of which you can switch off). The legal bases are your consent, performance of the agreement, and legal obligations.

4. Who receives your data

Data is shared only as needed with: distribution partners and DSPs (catalog data and artist names), storage and hosting providers, email and WhatsApp providers, banks for payouts, and government authorities where the law requires. Some partners are outside Indonesia; transfers are made with equivalent protection as required by law.

5. Storage and security

Signatures and selfies are kept in private storage that is not publicly accessible and are shown only to you and administrators. Data is kept while your account is active and afterwards for as long as needed for legal, tax and agreement-evidence purposes.

6. Your rights

You may request access to and a copy of your data, correct it, withdraw consent, request deletion or restriction of processing (as far as this does not conflict with legal obligations or a running agreement), and object to processing. Send requests through Support tickets; we reply within the period set by regulation.

7. Personal data breaches

If a personal data breach occurs, we will notify you and the competent authority as required by law.

8. Changes to this policy

Changes are published on this page and, for significant changes, announced in the panel or by email.

9. Contact

Questions about personal data can be sent through the Support tickets menu in the panel.