Privacy Policy
- Effective date:
- October 20, 2026
- Last updated:
- October 20, 2026
1. Who we are and what this policy covers
Overland Music Group LLC, a Delaware limited liability company ("Overland," "we," "us"), operates overlandmusicgroup.com, app.overlandmusicgroup.com and our client portal (together, the "Services"). Overland provides distribution, marketing, audience strategy and catalog services to recording artists, managers and labels.
This policy explains what personal information we collect through the Services and in our business dealings with artists, managers, labels and other contacts, how we use and disclose it, how long we keep it, and the rights you have. It includes the disclosures required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), and the California Online Privacy Protection Act ("CalOPPA").
This policy does not cover information about our employees, contractors or job applicants, which is described in a separate notice. It also does not cover third-party sites and services we link to, such as streaming platforms or our payment provider, which have their own policies.
2. Personal information we collect
The table lists the categories of personal information we have collected in the past 12 months, using the categories defined in the CCPA.
| CCPA category | What we collect | Sources |
|---|---|---|
| Identifiers | Name, artist or stage name, email address, phone number, postal address, account username, IP address, online identifiers | You; your manager, label or representative; your browser or device |
| Customer records (Cal. Civ. Code §1798.80(e)) | Name, address, phone number, signature, bank account details, tax identification number | You; your representative; our payment provider |
| Commercial information | Agreement terms, advances, recoupment balances, royalty statements, payment history, release and sales data associated with your recordings | You; your representative; distribution partners and digital service providers (DSPs) that report sales and streams |
| Internet or network activity | Pages viewed, actions in the portal, log-in times, browser and device type, referring URL, error logs | Your browser or device, through cookies and server logs |
| Approximate geolocation | Country, region or city inferred from IP address. We do not collect precise geolocation. | Your browser or device |
| Audio, visual and similar information | Recordings, artwork, photos, video and other materials you upload or send us | You; your representative |
| Professional information | Role, company or label, manager or representative, professional contact details | You; your representative; public sources such as artist websites and social profiles |
| Sensitive personal information | Social Security number or other taxpayer ID, government ID for identity verification, bank account number, account log-in credentials | You, directly or through our payment provider's onboarding flow |
We do not collect precise geolocation, biometric information, health information, or information about racial or ethnic origin, religion, union membership or sexual orientation. We may receive aggregated or de-identified audience data from DSPs (for example, listener counts by country). That data does not identify individual listeners and we do not attempt to re-identify it.
3. How we use personal information
We use personal information for these business purposes:
- Provide the Services: create and secure your account, deliver releases, run marketing campaigns, and give you access to reports, statements and archives.
- Administer agreements: calculate royalties, advances, recoupment, splits and fees; prepare statements; and process payments.
- Payments, tax and identity: verify identity, collect tax forms, issue payouts and file required tax information returns.
- Communicate with you: respond to inquiries, send service and account notices, and, if you agree, send news about Overland.
- Security and integrity: detect and prevent fraud, unauthorized access, metadata errors and content-rights violations; debug and repair errors.
- Improve the Services: analyze how the Services are used, in a form that does not identify you where practical.
- Legal compliance: meet legal, tax, audit and regulatory obligations, enforce our agreements, and establish or defend legal claims.
We do not use personal information for automated decision-making that produces legal or similarly significant effects about you. We will notify you before using personal information for a purpose that is materially different from those listed here.
4. How we disclose personal information
In the past 12 months we have disclosed the categories below for a business purpose. Service providers and contractors may use the information only to perform services for us, under written contracts that meet the CCPA's requirements.
| Recipient | Categories disclosed | Purpose |
|---|---|---|
| Hosting, database and infrastructure providers (service providers) | All categories in Section 2 | Operate and secure the Services |
| Email and communications providers (service providers) | Identifiers, professional information | Send account notices and correspondence |
| Payment, tax-form and identity-verification provider (service provider) | Identifiers, customer records, commercial information, sensitive personal information | Verify identity, collect tax forms, issue payouts |
| Royalty-accounting and analytics tools (service providers) | Identifiers, commercial information | Calculate and report royalties and performance |
| Our distribution partner and its supply-chain providers (third parties) | Identifiers, commercial information, audio and visual materials, professional information | Deliver releases to DSPs, collect revenue, and administer your agreement |
| Digital service providers and rights organizations (third parties) | Identifiers (artist and contributor names), audio and visual materials, professional information | Publish, credit and monetize your releases |
| Professional advisers (lawyers, accountants, auditors) | Any category, as needed | Legal, tax, audit and accounting services |
| Government authorities, courts, parties to litigation | Any category, as required | Comply with law, legal process or tax reporting; protect rights and safety |
| A buyer, investor or successor | Any category | A merger, financing, acquisition or sale of assets, subject to this policy |
We may also disclose personal information at your direction, for example to your manager, business manager or attorney.
5. We do not sell or share personal information
We do not sell personal information and we do not share it for cross-context behavioral advertising, as the CCPA defines those terms, and we have not done so in the past 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16. Because we do not sell or share, we do not display a "Do Not Sell or Share My Personal Information" link. If this changes, we will update this policy and give you the right to opt out before any sale or sharing begins.
6. Sensitive personal information
We collect taxpayer IDs, government IDs, bank account numbers and log-in credentials only to verify identity, pay you, meet tax reporting obligations, and secure your account. We do not use or disclose sensitive personal information for any purpose beyond those permitted by Cal. Code Regs. tit. 11, §7027(m), and we do not use it to infer characteristics about you. For that reason, the right to limit the use of sensitive personal information does not apply.
Where our payment provider collects bank and tax details directly, it does so under its own privacy policy and we receive only what we need to administer payments.
7. How long we keep personal information
We keep each category only as long as reasonably necessary for the purposes above, then delete or de-identify it.
| Information | Retention period |
|---|---|
| Account and profile information | Life of the account plus 3 years |
| Agreements, royalty statements, payment and recoupment records | Term of the agreement plus 7 years, to support audit rights and tax and accounting obligations |
| Tax forms and taxpayer IDs | 4 years after the last payment reported, or longer if required by law |
| Government ID used for identity verification | Until verification is complete plus 90 days, unless a law or fraud investigation requires longer |
| Uploaded recordings and artwork | Life of the agreement plus any post-term rights in it, then 1 year |
| General correspondence and inquiries | 3 years after the last contact |
| Server and security logs | 12 months |
We may keep information longer if a legal hold, dispute or regulatory request requires it.
8. Your California privacy rights
If you are a California resident, you have these rights, subject to exceptions in the law:
- Right to know. Request the categories of personal information we collected about you, the categories of sources, our purposes, the categories of recipients, and the specific pieces of information we hold. You may ask for information collected before the past 12 months, back to January 1, 2022, by stating a date range or asking for everything we hold.
- Right to delete. Request deletion of personal information we collected from you. We may keep information we need to complete a transaction, perform your agreement, meet tax and legal obligations, secure the Services, or establish or defend legal claims.
- Right to correct. Request correction of inaccurate personal information. You can also update most account details yourself in the portal.
- Right to data portability. Receive the specific pieces of information you provided in a portable, readily usable format.
- Right to opt out of sale or sharing. We do not sell or share personal information (Section 5).
- Right to limit use of sensitive personal information. Not applicable, as explained in Section 6.
- Right to non-discrimination. We will not deny service, charge a different price, or provide a different quality of service because you exercised these rights. We will not retaliate against an employee, applicant or contractor for exercising them.
9. How to submit a request
Email legal@overlandmusicgroup.com with "Privacy Request" in the subject line, or write to us at the address in Section 15. Tell us which right you are exercising and, for a request to know, the date range you want.
Verification. To protect your information, we verify requests to know, delete and correct. If you have an account, we will ask you to log in or confirm your account email. Otherwise we will ask you to provide information that matches what we hold, such as your name, email address and a detail from a recent statement or correspondence. Requests for specific pieces of information or for deletion of sensitive information require a higher degree of verification. We use information provided for verification only for that purpose.
Authorized agents. You may designate an agent to submit a request. We will ask the agent for your signed permission and may ask you to verify your identity with us directly or confirm that you gave the agent permission, unless the agent holds a valid power of attorney under California Probate Code §§4121–4130.
Timing. We will confirm receipt within 10 business days and respond within 45 calendar days. If we need more time, we will tell you why and may extend by up to 45 more days. Responses are free unless a request is manifestly unfounded or excessive. If we deny a request, we will explain why.
10. Opt-out preference signals and Do Not Track
We treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of the sale and sharing of personal information for that browser and, if you are logged in, for your account. Because we do not sell or share personal information, honoring the signal does not change how we process your data.
Some browsers send a "Do Not Track" signal. There is no common industry standard for that signal, and the Services do not change their behavior when they receive it. We do not allow third parties to collect information about your online activity across other websites through the Services.
11. Cookies and similar technologies
We use cookies that are strictly necessary to log you in, keep your session secure, remember your language choice, and protect against cross-site request forgery. We do not use advertising or cross-site tracking cookies. Our site loads some code from content delivery networks, which receive your IP address and browser information as part of delivering that code. If we add analytics or advertising tools, we will update this section and, where required, ask for your consent before setting them.
12. Other California notices
Shine the Light (Cal. Civ. Code §1798.83). We do not disclose personal information to third parties for their own direct marketing purposes.
Reviewing and changing your information (CalOPPA). You can review and update your account information in the portal, or contact us using the details in Section 15.
13. Children
The Services are not directed to children, and we do not knowingly collect personal information from anyone under 13. Accounts are for people 18 or older. If an artist is under 18, a parent or legal guardian must open and manage the account and agree to our terms on the minor's behalf. If you believe a child under 13 has given us personal information, contact us and we will delete it.
14. Security and international processing
We use administrative, technical and physical safeguards suited to the information we hold, including encrypted connections, access controls and password requirements. No system is perfectly secure, and you are responsible for keeping your password confidential.
We are based in the United States and store information here. Members of our team and some service providers work in other countries, including Mexico, and may access information from there under the protections described in this policy.
15. Changes and contact
We will post any change to this policy on this page and update the "Last updated" date. If a change is material, we will notify account holders by email or in the portal before it takes effect.
Questions or complaints about this policy or our privacy practices:
Overland Music Group LLC
2999 Overland Ave, Suite 123, Los Angeles, CA 90064
legal@overlandmusicgroup.com · (310) 997-0675