Privacy Policy
Last updated: March 2026
This Privacy Policy explains how the operator of the Kalmori Music service, operating under the Kalmori Music trading/brand name, processes personal data when users access or use Kalmori’s website, applications, music-distribution services, marketplace and related services.
1. Data Controller
For personal data processed for Kalmori Music’s own purposes, the data controller is Andrae Douglas Simpson, operating under the trading/brand name Kalmori Music (“Kalmori”). Privacy contact: submissions@kalmorimusic.com.
2. Personal Data We Process
Depending on how you use Kalmori, we may process account and identity information; contact information; billing, transaction and payout information; tax or verification information; music, artwork and release metadata; artist, producer, songwriter and rights-holder information; support communications; device, log and security information; consent and marketing preferences; and usage/analytics information. Payment-card details may be processed directly by payment processors rather than stored by Kalmori, depending on the payment method.
3. Purposes and Legal Bases
We process personal data to provide accounts and contracted services; distribute music and administer royalties; process purchases and payouts; verify rights and identity; prevent fraud and secure the Service; provide support; comply with accounting, tax and legal duties; improve the Service; and send marketing where permitted. Depending on the activity, the legal basis may be performance of a contract, compliance with a legal obligation, Kalmori’s legitimate interests, or consent. Where processing relies on consent, you may withdraw that consent without affecting prior lawful processing.
4. Distribution and Service Providers
We may share necessary data with DSPs, upstream distribution providers (including LabelGrid or replacement providers), payment processors, hosting/cloud providers, email providers, analytics/security providers, professional advisers and public authorities where legally required. We do not sell personal data. Service providers may process data only for their permitted role and subject to applicable contractual and legal safeguards.
5. International Transfers
Some providers or DSPs may process personal data outside Sweden, the EEA or the user’s country. Where required by GDPR, Kalmori will use an applicable transfer mechanism or safeguard, such as an adequacy decision, Standard Contractual Clauses, or another legally recognized mechanism.
6. Retention
Kalmori retains personal data only as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, tax, fraud-prevention, royalty-reporting, dispute and security obligations. Account deletion does not require Kalmori to erase records that must lawfully be retained.
7. Your Data-Protection Rights
Where GDPR or similar law applies, you may have rights to access, rectify, erase, restrict processing, object to certain processing, receive portable data, withdraw consent and lodge a complaint with a competent supervisory authority. Rights may be subject to statutory exceptions. Requests may be sent to submissions@kalmorimusic.com. Kalmori may need to verify identity before fulfilling a request.
8. Marketing
You may opt out of direct marketing using the unsubscribe mechanism provided or your account settings where available. Service, security, billing and distribution communications that are necessary to operate your account are not marketing and may still be sent.
9. Cookies and Similar Technologies
Kalmori may use strictly necessary cookies and, subject to applicable consent requirements, analytics, preference or marketing technologies. Non-essential cookies should not be activated for users who are legally entitled to prior consent until the required consent has been obtained.
10. Security
Kalmori uses reasonable technical and organizational safeguards appropriate to the nature of the data and risks, such as access controls, secure transmission, credential protections, logging and service-provider security controls. No internet service can guarantee absolute security.
11. Children
Kalmori is not intended for children who cannot lawfully enter into the applicable service agreement. Where a minor is permitted to use the Service, Kalmori may require consent or involvement of a parent or legal guardian as required by applicable law.
12. Automated / AI-Assisted Features
Where Kalmori uses automated or AI-assisted tools for release assistance, support, recommendations, quality checks or marketing drafts, personal data is processed only as necessary for the feature and in accordance with applicable privacy disclosures. Kalmori separately assesses any feature that produces legal or similarly significant effects.
13. Changes and Contact
Kalmori may update this Privacy Policy and will provide notice of material changes where required. Questions and rights requests: submissions@kalmorimusic.com.
Last updated: August 2026
