KADOTS / Privacy notice

Privacy notice

Privacy Notice

Last Updated: 18 September 2026

KADOTS (“KADOTS”, “we”, “us”, or “our”) respects your privacy and is committed to handling personal data responsibly.

This Privacy Notice explains what personal data we collect, why we process it, how it may be shared, how long we retain it, and the rights and choices available to you when you use the KADOTS website, platform, artist services, distribution services, or related products.

1. Legal Operator

The KADOTS platform and related services are operated by:

Resemble Media Studio LLP
LLPIN: ACW-2332
Registered in India.

For privacy-related questions, requests, or complaints, please contact:

Privacy / Grievance Contact

Email: Grievance@resemblemedia.com
Website: KADOTS.RESEMBLEMEDIA.COM

KADOTS may operate as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) in relation to personal data that we determine the purposes and means of processing.

Where KADOTS processes personal data solely on behalf of an artist, label, client, or other organisation, that organisation may instead determine the purposes and means of processing and may act as the relevant Data Fiduciary, while KADOTS may act as a Data Processor.

2. Scope of This Notice

This Privacy Notice applies to personal data collected through:

the KADOTS website;
KADOTS user accounts and dashboards;
music distribution and release-submission services;
artist and label onboarding;
KYC and verification processes;
agreements and electronic signing workflows;
customer support and communications;
forms and other services operated by KADOTS.

It does not necessarily apply to third-party websites, platforms, streaming services, social networks, payment providers, or other services that you access through links from KADOTS. Those services have their own privacy policies.

3. Personal Data We May Collect

Depending on the services you use, we may collect:

Account and Contact Information

Name
Email address
Mobile number
Username or account identifier
Artist or label name
Account credentials and authentication information

Professional and Artist Information

Artist name
Label name
Biography and profile information
Social media and professional links
Collaborator information
Release and catalogue information
Music ownership and rights information
Distribution-related information

Release and Content Information

When you submit music for distribution, we may process information associated with the release, including:

audio files;
artwork;
track titles;
artist and contributor information;
songwriter and composer information;
ISRC and other identifiers;
copyright and ownership information;
release dates;
territories;
metadata;
licensing and rights information.

Verification and KYC Information

Where required for onboarding, contractual, compliance, payment, or distribution purposes, we may collect information such as:

legal name;
date of birth where required;
address;
government-issued identification;
tax information;
business or entity information;
bank or payout information;
other information reasonably required for verification.

We will request only the information reasonably necessary for the applicable purpose.

Communications

If you contact us, we may process:

your email address;
phone number;
message contents;
attachments;
support history;
information necessary to respond to your request.

Technical Information

When you access the KADOTS platform, our infrastructure may process limited technical information necessary to operate, secure, and maintain the service, such as:

IP address;
browser and device information;
operating system;
request information;
authentication/session information;
security and error logs.

We do not use this information to create advertising profiles.

4. How We Use Personal Data

We may process personal data for the following purposes:

creating and managing user accounts;
providing music distribution and related services;
receiving, validating and processing music releases;
managing artist and label relationships;
verifying identity and account information;
performing KYC or compliance checks where required;
preparing and administering agreements;
processing payments, payouts, invoices and related financial records;
communicating with users about their accounts, releases and services;
providing customer and technical support;
preventing fraud, abuse, unauthorised access and security incidents;
maintaining and improving the reliability and security of the platform;
complying with applicable legal and regulatory obligations;
enforcing contractual rights and protecting our legal interests;
responding to lawful requests from governmental or regulatory authorities; and
carrying out other purposes specifically disclosed to you at the time your information is collected.

We do not sell personal data.

5. Lawful Grounds for Processing

Depending on the applicable law and the circumstances, we process personal data on one or more of the following grounds.

Consent

Where consent is required, we will request consent before processing the relevant personal data.

You may withdraw consent where applicable. Withdrawal of consent does not affect processing that was lawfully carried out before the withdrawal.

Performance of Services / Contractual Necessity

We may process information that is necessary to create your account, provide requested services, process releases, administer agreements, process payments, or otherwise perform services requested by you.

Legal and Regulatory Requirements

We may process and retain information where necessary to comply with applicable laws, regulations, court orders, tax requirements, accounting obligations, fraud-prevention requirements, or other lawful obligations.

Legitimate or Lawful Uses

Where permitted under applicable law, we may process information for security, fraud prevention, service administration, protection of rights, enforcement of agreements, and other lawful purposes that do not require separate consent.

Under India’s DPDP Act, personal data may generally be processed for a lawful purpose on the basis of consent or specified legitimate uses.

Where another jurisdiction’s law applies to you, additional legal bases may apply.

6. Data Sharing and Processors

We may share personal data with service providers that help us operate KADOTS.

Depending on the services you use, these may include providers supporting:

website and cloud hosting;
database infrastructure;
authentication and account management;
email delivery;
payment processing;
identity/KYC verification;
electronic agreements and signatures;
music distribution and delivery;
storage and content delivery;
security and fraud prevention;
customer support;
technical maintenance.

These service providers may process personal data only as necessary to provide their services to us or as otherwise permitted by applicable law.

We may also disclose information:

when required by law or legal process;
to courts, regulators, governmental authorities or law-enforcement agencies where legally required;
to professional advisers such as lawyers, accountants or auditors where reasonably necessary;
in connection with a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction;
where necessary to protect KADOTS, our users, our rights, or the security of our services.

We do not permit service providers to use your personal data for unrelated advertising purposes on our behalf.

7. Music Distribution and Third-Party Platforms

If you use KADOTS to distribute music, certain information must be shared with relevant distribution partners, digital service providers, platforms, rights-management services, or other recipients necessary to fulfil your distribution instructions.

This may include release metadata, artist information, contributor information, artwork, audio files, rights information, identifiers, and other information required for distribution.

The privacy practices of those third parties are governed by their respective terms and privacy notices.

8. International Transfers

Some of our technology, hosting, distribution, payment, authentication, communication, or other service providers may process personal data outside India.

Where personal data is transferred outside India, we will take steps required by applicable law and our contractual arrangements to ensure that the transfer and subsequent processing are permitted and appropriately protected.

Depending on the applicable legal requirements, safeguards may include contractual protections, security measures, access controls, or reliance on an applicable legal mechanism or permitted transfer arrangement.

Where Indian law restricts transfers to particular countries or requires specific safeguards, KADOTS will comply with those requirements.

9. Data Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

Security measures may include:

access controls;
authentication mechanisms;
encryption where appropriate;
secure transmission protocols;
logging and monitoring;
role-based access;
backup and recovery procedures;
security reviews and maintenance.

No internet-based system can be guaranteed to be completely secure. You are responsible for keeping your account credentials confidential and notifying us if you believe your account has been accessed without authorisation.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to provide the requested services, to maintain necessary business and financial records, to comply with legal obligations, to resolve disputes, and to enforce agreements.

Our general retention approach is:

Category	General Retention Period
Active account information	While your account remains active
Release and catalogue information	For the duration of the distribution/service relationship and as reasonably necessary for catalogue, rights, accounting and contractual purposes
Agreements and contractual records	For the duration of the relationship and applicable legal/limitation periods
KYC / identity verification records	Only for as long as required for the relevant verification, contractual, legal or compliance purpose
Payment, invoice and accounting records	For the period required under applicable tax, accounting and legal requirements
Customer support communications	For as long as reasonably necessary to resolve the matter and maintain appropriate service records
Security and technical logs	For a limited period appropriate to security, troubleshooting and abuse-prevention purposes
Deleted account data	Deleted or anonymised when no longer required, subject to legal, contractual, security and dispute-related requirements

Specific retention periods may differ depending on the service, contractual requirements, legal obligations, unresolved disputes, or legitimate security requirements.

Where information is no longer required, we will delete, anonymise, or securely dispose of it where reasonably practicable.

11. Your Privacy Rights

Subject to applicable law and any applicable limitations, you may have rights including:

the right to request information about personal data being processed about you;
the right to request correction of inaccurate or incomplete information;
the right to request deletion or erasure where applicable;
the right to withdraw consent where processing is based on consent;
the right to request information about sharing of your personal data with other Data Fiduciaries or Data Processors, where applicable;
the right to nominate another individual to exercise your rights in accordance with applicable law;
the right to raise a grievance concerning the processing of your personal data.

The precise scope and availability of these rights depends on applicable law and the circumstances of processing. The DPDP Act expressly provides rights concerning access to information about personal data and processing activities, including information regarding other Data Fiduciaries and Data Processors with whom data has been shared.

12. How to Exercise Your Rights

To submit a privacy request or grievance, contact:

Email: Grievance@resemblemedia.com
Website: KADOTS.RESEMBLEMEDIA.COM

Please include:

your full name;
registered email address or mobile number;
the nature of your request;
relevant account or release information, if applicable; and
any information reasonably necessary for us to verify your identity and process your request.

We may request reasonable information to verify that a request is being made by the relevant individual or an authorised representative.

We will process privacy requests within the time period required by applicable law.

If you are dissatisfied with our response, you may use any applicable statutory grievance or regulatory mechanism available under applicable law.

13. Cookies

KADOTS uses cookies and similar technologies only where necessary for the operation, security, authentication, or functionality of the website and platform.

At present, this website build does not include visitor-tracking cookies, behavioural advertising cookies, or marketing cookies.

We do not use cookies to build advertising profiles or track visitors across unrelated websites.

Essential cookies or similar technologies may be used for purposes such as:

maintaining secure sessions;
authentication;
remembering necessary technical settings;
preventing abuse or unauthorised access;
providing core website functionality.

If this changes in the future, we will update this Privacy Notice and, where required, provide appropriate choices or consent mechanisms.

14. Analytics

The current KADOTS website build does not include third-party visitor analytics or advertising-tracking systems designed to profile visitors.

We may process limited technical logs generated by our hosting, security, or infrastructure systems for operational, security, debugging, and abuse-prevention purposes.

If analytics technology is introduced in the future, this Privacy Notice will be updated to identify the relevant technology, purposes, categories of information collected, and applicable choices or consent mechanisms.

15. Children’s Privacy

KADOTS services are intended for individuals and businesses who are legally able to use the relevant services and enter into applicable agreements.

We do not knowingly seek to collect personal data from children except where permitted and appropriately authorised under applicable law.

If you believe that a child has provided personal data to us improperly, please contact us using the details above.

16. Third-Party Links

The KADOTS website may contain links to third-party websites, streaming services, social networks, payment providers, distribution platforms, or other services.

KADOTS is not responsible for the privacy practices, security, content, or policies of those third parties.

You should review the privacy notice of each third-party service before providing personal data to it.

17. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to our services, technology, legal requirements, or data-processing practices.

When we make material changes, we may provide an appropriate notice through the website, platform, email, or another reasonable method.

The “Last Updated” date at the top of this page indicates when this notice was most recently revised.

18. Contact Us

For questions about this Privacy Notice, personal-data requests, or privacy grievances, contact:

Resemble Media Studio LLP — KADOTS

Email: Grievance@resemblemedia.com
Website: KADOTS.RESEMBLEMEDIA.COM

Please use the subject line “Privacy Request – KADOTS” when submitting a privacy-related request.