Summary: Pearl Creatives is a music rights management platform operated in Uganda. We collect your personal and music-related data solely to manage copyrights, calculate royalties, and protect your creative works. We never sell your data.
1. Who We Are
Pearl Creatives ("we", "us", "our") is a music rights management platform that works in partnership with the Uganda Registration Services Bureau (URSB) and rights management organisations to help Ugandan artists and rights holders register, track, and monetise their creative works.
This Privacy Policy applies to:
- The Pearl Creatives web platform at our website domain
- The Pearl Creatives mobile application for iOS and Android
- All associated API services
By using our platform you agree to the collection and use of your information as described in this policy.
2. Data We Collect
We collect different types of information depending on how you use our platform:
| Category | Examples | Purpose |
|---|---|---|
| Identity | Full name, national ID number, passport number, date of birth, profile photo | Artist verification and rights registration |
| Contact | Email address, phone number, physical address | Account communication and royalty payouts |
| Music & Rights | Song titles, audio fingerprints, distribution details, co-writer information, ISRC codes | Copyright registration and royalty tracking |
| Financial | Mobile money number, bank account details (for withdrawal), advance requests | Royalty payments and financial transactions |
| Usage | Login timestamps, features used, device type, IP address | Platform security and performance improvement |
| Device (mobile app) | Device push notification token, operating system version | Sending push notifications about your account |
We collect this information when you: register an account, submit songs for distribution, request royalty payments, or contact our support team.
3. How We Use Your Data
We use your personal information only for the purposes it was collected:
- Copyright registration — to register your songs with the relevant rights management bodies
- Royalty calculation and distribution — to track plays, calculate your earnings, and pay royalties to your registered account
- Identity verification — to confirm you are the legitimate rights holder before approving an account or processing payments
- Account management — to manage your profile, handle login and session security, and enforce our terms of use
- Notifications — to send you updates about your royalties, song status, and account activity via email, SMS, or push notification
- Dispute resolution — to investigate and resolve conflicts over song ownership or distribution rights
- Platform improvement — to monitor performance, fix bugs, and improve the platform based on aggregated usage patterns
- Legal compliance — to comply with Ugandan law and obligations to copyright enforcement bodies
We do not use your data for advertising profiling or sell it to third-party marketers.
4. Sharing Your Data
We share your data only with parties who need it to provide our service:
- Uganda Registration Services Bureau (URSB) — for copyright registration and enforcement of your music rights
- Music labels and distributors — only the songs and metadata you have explicitly submitted for distribution
- Payment providers — your mobile money or bank details are shared with payment processors solely to execute royalty payments
- Law enforcement — where required by Ugandan law or a valid court order
- Service providers — companies that operate infrastructure on our behalf (hosting, email delivery) under strict data processing agreements
We will never sell, rent, or trade your personal information to any third party for commercial purposes.
5. Data Security
We take the security of your data seriously and implement the following measures:
- All data in transit is encrypted using HTTPS/TLS
- Authentication tokens are stored in encrypted device storage (iOS Keychain / Android Keystore)
- Passwords are hashed using industry-standard algorithms and never stored in plain text
- Access to personal data is restricted to authorised Pearl Creatives staff only
- Sessions are automatically invalidated after periods of inactivity
- All critical account actions are logged in an immutable audit trail
While we strive to protect your data, no system is completely immune to risk. If you believe your account has been compromised, please contact us immediately.
6. Data Retention
We retain your data for as long as it is needed to provide our services and meet our legal obligations:
- Account data — retained while your account is active. If you delete your account, personal data is removed within 30 days.
- Music rights records — retained indefinitely as these form part of the official copyright registry. Even after account deletion, song ownership records may be preserved to protect third-party rights holders.
- Financial transaction records — retained for 7 years to comply with Ugandan financial regulations.
- Audit logs — retained for 5 years for compliance and security purposes.
7. Your Rights
You have the following rights regarding your personal data:
- Access — you can request a copy of the personal data we hold about you
- Correction — you can update your profile information directly from your dashboard, or contact us to correct records you cannot edit yourself
- Deletion — you can request deletion of your account and associated personal data (subject to our retention obligations above)
- Data portability — you can request an export of your songs and rights data in a standard format
- Withdraw consent — where processing is based on consent (e.g. push notifications), you can withdraw consent at any time from your notification settings
- Objection — you can object to how we process your data by contacting us; we will consider your objection and respond within 30 days
To exercise any of these rights, contact us at the details in Section 10 below.
8. Children's Privacy
Pearl Creatives is intended for use by adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a minor has registered an account, we will delete the account and all associated data immediately.
If you believe a minor has submitted data to our platform, please contact us right away.
9. Policy Changes
We may update this Privacy Policy from time to time as our platform evolves or as required by law. When we make material changes, we will:
- Update the "Effective Date" at the top of this page
- Send a notification to your registered email address
- Display an in-app notice the next time you log in
Continued use of the platform after the effective date of a revised policy constitutes your acceptance of the updated terms.
10. Contact Us
If you have any questions about this Privacy Policy or want to exercise your data rights, please reach out to us:
Pearl Creatives — Data Privacy
We aim to respond to all privacy requests within 5 working days.