This notice should be read with the BTR Partner Terms. A Partner-Specific Agreement may add privacy or security obligations for a particular Partner, but it does not reduce any privacy protection required by applicable law.
1. Who this notice covers
- Partner Users: employees, contractors and representatives who operate a Partner Account or act as technical, rights, finance, commercial or legal contacts.
- People named in catalogue: artists, contributors, producers, songwriters, performers, photographers, designers and others whose names, roles, identifiers or images are supplied in catalogue data.
- Verification subjects: directors, beneficial owners, signatories and people whose details are used for business verification, sanctions, tax or payment purposes.
- Correspondents and complainants: people who contact BTR about support, rights, catalogue or Partner operations.
2. Information we collect
Account and contact information: names, roles, organisation, business email, business phone and nominated contacts.
Credentials and security: password hashes, API-key metadata, sessions, authentication events and login history.
Portal and API activity: IP addresses, timestamps, user agents, delivery activity, account changes, takedowns, mappings, reports, errors and audit records.
Catalogue and delivery data: artist and contributor names, identifiers, credits, artwork, P/C lines, rights metadata, release data and other DDEX/API metadata.
Commercial, tax and payment information: where relevant to a live commercial relationship, invoices, remittance contacts, tax status, bank/payment-provider information and payment history.
Compliance and rights data: information reasonably needed for sanctions, fraud, rights, takedown, dispute and legal-compliance processes.
Communications: support, certification, commercial, legal and technical correspondence.
3. Where information comes from
- Partner Users and Partner organisations;
- catalogue and metadata delivered by Partner;
- BTR systems, logs and security controls;
- artists, rights holders, complainants and other people involved in catalogue or rights matters;
- public registers and public sources used for verification; and
- payment, tax, identity, sanctions, security and other service providers where relevant.
4. How we use information
- review applications and establish Partner Accounts;
- authenticate users and secure Partner Services;
- receive, validate, review, publish, update and take down catalogue;
- map catalogue to artist identities;
- provide status, webhook, reporting and support functions;
- calculate, report and settle amounts where a Partner-Specific Agreement requires payment;
- detect fraud, Artificial Streams, abuse, malware, duplicate catalogue and security threats;
- investigate rights claims and meet legal obligations; and
- communicate technical, operational, legal and account information.
Where laws such as the GDPR or UK GDPR apply, legal bases may include performance of a contract, legitimate interests, legal obligations and consent where specifically required.
We do not sell Partner personal information or use it for cross-context behavioural advertising.
5. Automated processing
BTR uses automated systems to assist with technical validation, duplicate detection, rights matching, catalogue quality, content classification, fraud, Artificial Streams and security.
Automated systems may reject technically invalid requests, flag catalogue for review, exclude invalid usage or temporarily hold content where a material issue is detected. Human review is available where appropriate or required by law for material outcomes affecting Partner accounts, catalogue or settlement.
6. Who we disclose information to
- cloud, hosting, CDN, media-processing, email, security, monitoring, fraud and analytics providers;
- payment, tax, accounting and compliance providers where relevant;
- lawyers, accountants, auditors, insurers and other professional advisers;
- artists or rights holders where reasonably necessary to confirm or resolve catalogue or rights matters;
- collective management organisations or rights registries where required;
- courts, regulators, law enforcement and government authorities where required by law; and
- a buyer, investor, financier or business successor subject to appropriate confidentiality protections.
7. Information provided to Partners
Usage Reports and Partner analytics provide catalogue and commercial information without exposing listener accounts or listener-level personal information.
BTR may aggregate, delay, bucket or threshold analytics where reasonably necessary for privacy, fraud prevention or service integrity.
Partners must not attempt to identify or re-identify listeners from information BTR provides.
8. Catalogue display
Catalogue information supplied by Partner — including artist names, featured artists, contributor credits, titles, label names, artwork, biographies and P/C lines — may be displayed to listeners through BTR Music and other BTR-operated consumer surfaces enabled for that Partner Content.
Partner is responsible for ensuring it is entitled to supply and publish that information.
9. International handling
BTR is based in Australia and uses service providers that may operate in Australia and other countries, including the United States. Personal information may therefore be processed outside the country where an individual is located.
Where cross-border transfer rules apply, BTR uses contractual, organisational and legal safeguards appropriate to the relevant transfer.
10. Retention
BTR keeps personal information only for as long as reasonably required for the Partner relationship, the purpose for which it was collected, or legal, tax, accounting, fraud, audit, security and dispute requirements.
| Category | Typical approach |
|---|---|
| Partner account and contacts | For the active relationship and a reasonable period afterwards. |
| Credentials | Revoked or disabled when no longer required; related security and audit records may be retained. |
| API/delivery/audit logs | For operational, security, fraud, audit and dispute purposes. |
| Catalogue metadata | While required for catalogue operation and for reasonable rights, reporting and legal records afterwards. |
| Payment and tax data | For periods required by applicable law. |
| Rights and dispute records | For as long as reasonably needed to resolve, defend or evidence the matter. |
11. Security
BTR uses technical and organisational measures appropriate to the Partner Services, which may include encryption in transit, password/API-key hashing, role-based access, audit logging, network controls, rate limiting, monitoring and restricted staff access.
No system is completely secure. Partners are responsible for their own users, devices and credentials and must notify BTR promptly if compromise is suspected.
12. Your rights
Depending on applicable law, individuals may have rights to access, correct, delete, restrict or object to processing, receive portable data, withdraw consent where applicable or complain to a privacy regulator.
BTR may need to verify identity and may refuse or limit a request where permitted by law, including where information must be kept for legal, fraud, security, rights or audit purposes.
13. Partner responsibilities
By supplying personal information to BTR, Partner confirms that it has a lawful basis to provide the information, has given any notices required by law, will keep Partner contacts current, will remove users when authority ends and will not provide unnecessary sensitive information.
Partner must not use BTR-provided information to identify listeners or for purposes unrelated to the Partner relationship.
14. Cookies and logs
The Partner Portal may use strictly necessary cookies or similar technologies for login, session security, CSRF protection and preferences, together with first-party/server-side operational logs and analytics.
BTR does not use the Partner Portal to sell personal information or serve cross-site behavioural advertising.
15. Children
The Partner Services are intended for authorised business users aged 18 and over. Catalogue metadata may identify artists or contributors who are under 18; Partner is responsible for holding the rights, consents and authority required to provide that information.
16. Changes to this notice
The current notice is published at https://partners.btrmusic.com/privacy. BTR may notify active Partners of material changes through the Partner Portal or nominated Partner contacts.
17. Contact and complaints
Partner and privacy enquiries: partners@btrmusic.com
Legal notices: info@beatstorapon.com
Postal: Outermark Group Pty Ltd, Level 1, 446 Oxford St, Bondi Junction NSW 2022, Australia.
If Australian privacy law applies and you are not satisfied with BTR's response to a privacy complaint, you may contact the Office of the Australian Information Commissioner. Other applicable regimes may provide equivalent local complaint rights.