Privacy notice

The party responsible for processing your personal data is Dramatic Records Group, S.A. de C.V.. For any privacy matter, including exercising your rights, write to soporte@msk-music.com.

Address: Fuente de Lilas 53, Col. Lomas de Tecamachalco, C.P. 52780, Huixquilucan, Estado de México.

From your account: your email, the name you choose to show and your profile photo. If you sign in with Google or Microsoft, that provider gives us your name, email and photo. If you sign in with Apple, from the iPhone app, Apple gives us your name and email, or an Apple relay address if you choose to hide yours. If you sign in with a link sent to your email, you only give us that email, and you type your name yourself if you want to. We never see your password, and MSK never asks you for one.

From your profile, only if you enter them, in two parts. Your shared profile —name, username, artist name, producer name, photo, bio, roles (artist, songwriter…), links to social networks and platforms, other projects on Spotify, the language you use MSK in, collecting society, IPI, writer and performer numbers, label and ℗ and © lines— can be seen by anyone who has signed in to MSK or MSK Stage with their account, because it is where the credits and sheets you appear in come from. Your private profile —legal name, phone, date of birth, nationality, official ID number, country, city and address— is seen only by you, with one exception: if you join a song with a role (composer, producer, A&R, manager…), or when you open the Label Copy of a song of yours, your legal name, email and phone are copied to that song's credits, which its members and, where it applies, the label of its roster can see. If that song is published on MSK Stage and you have no artist name, your legal name appears in the public credits. Apart from that, nothing leaves your private profile except what you yourself put in a contract. Identification details are used to fill in work sheets and contracts.

From your work: lyrics, chords, sections, tags, handwritten strokes, writer credits and splits, artwork, voice notes, review audio, contracts and signatures.

If you sign a contract: your signature, the moment you signed and the full IP address you signed from. They are kept with the contract as proof of the signature, not to track you.

From your activity: your calendar events, your setlists and the places you type in them, the bands and teams you belong to, what you publish and comment on MSK Stage, and the history of your token movements.

If you open a listening link: your name, what you listened to and for how long, your browser's identification (which browser and what kind of device) and a truncated IP address, without its last segment.

From your payments: payment is processed by Stripe. MSK never sees or stores your card number: only a customer ID and the record of each purchase.

About other people: when you enter someone else's details in credits, a contract or your directory, you are responsible for having their permission.

MSK does not ask for sensitive personal data: nothing about your health, ethnic origin, beliefs, political opinions or sex life, and it does no biometric recognition of your voice or face. If you choose to write something like that in a lyric or a note, it is kept as part of your content and only the people you share it with can see it.

To provide the service and nothing else: creating and maintaining your account; saving your work and syncing it across your devices; showing it to the people you share it with; publishing on MSK Stage what you decide to publish; generating your sheets, label copy and contracts; charging for what you buy and keeping your token record; sending you service notices, such as invitations, pending signatures or changes to these documents; handling your requests and claims; and meeting legal obligations.

These purposes are necessary for your relationship with MSK. We do not use your data to show you ads, build a commercial profile of you or sell it.

We also measure how the app is used —which screens open, when, from what kind of device and from which country— to learn which parts of MSK get used and which get in the way. This purpose is not necessary to provide the service. It only happens in the browser: the iPhone and Android apps don't measure use.

If you don't want your use measured, tick “Don't measure my use” below. It is stored in this browser, so it applies to this device and has to be repeated on each one. A tracking blocker also works. MSK works the same and no feature depends on it.

With the people you choose: those you invite to a song, the members of your bands and teams, whoever opens a link you create and, on MSK Stage, the public, with what you publish.

With the label whose roster you are on, if any. The label is the one that adds you to its roster. Its staff sees and can work on every song you own, including what your co-writers write in them and their credit details, except the ones you hide by switching off “Visible para mi sello” (visible to my label) on each. And if you write in a song owned by someone on a label's roster, that label sees what you write there and your credit details.

If your project's YouTube channel is connected to your roster profile, its metrics are seen by the label's staff and by you (see “Connected accounts” below).

Apart from that, the server rules stop other accounts reading your songs and files. With one caveat: anyone inside a song, and the label if it sees the song, can technically reach the files uploaded to review even when their download is locked in MSK. Share unreleased material only with people you would trust with the file.

Your credit details travel with the song. If you join a song with a role (composer, producer, A&R, manager…), or when you open the Label Copy of a song of yours, your legal name, email and phone are copied to that song's credits, which its members and, where it applies, the label of its roster can see. If that song is published on MSK Stage and you have no artist name, your legal name appears in the public credits.

Your shared profile can be read by anyone who has signed in to MSK or MSK Stage with their account, because it is where credits and sheets come from. Your private profile cannot: the only things that leave it are what is copied to credits and what you put in a contract.

If you open a listening link, whoever sent it to you and the other members of that song see your name and how much you listened, and they can also see your browser identification and your truncated IP address.

With the providers that run MSK, which process data on our behalf and only for that: Google (Firebase and Google Cloud) stores the data and files and runs the servers; Google Analytics measures use; Stripe processes payments; Resend sends email; Google Maps receives only the text of a place while you type it; and Spotify and YouTube receive what you ask to import or show. If a YouTube channel is connected, Google gives MSK, with the channel owner's authorisation, the data explained in “Connected accounts”. Some features, when switched on, process content with Google Cloud services only to produce their result: turning a take into text, recognising handwriting or reading the documents of a copyright claim.

If you dictate, your voice is processed by the speech recognition of your browser or your phone (Google or Apple), under their own rules; MSK only receives the text.

With authorities, only when a law or an order from a competent authority requires it.

We sell data to no one and there are no advertisers. Outside these cases we do not transfer your data to third parties; if it were ever needed, we would ask for your consent first.

On MSK Stage only what a project decides to publish becomes public: its page's name, bio, photos and links, the published songs with their lyrics, chords, audio and credits, the wall posts and the shows it displays.

Songwriter pages show the name a person appears under in the label copy's writer credits and the published songs where they hold that credit. They never show their IPI, society, email or percentages, and they can be switched off.

If you comment as a fan, your comment is published with the name and photo of the account you signed in with. Your repertoires are private.

If you are an artist on a label's roster in MSK, the label or you can connect your YouTube channel to your roster profile. It is only connected if the channel's owner signs in to Google with their account and authorises it on Google's screen. For this MSK uses the YouTube API Services. By connecting a channel you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms), and what Google does with your data is governed by the Google Privacy Policy (https://www.google.com/policies/privacy).

MSK asks Google for only two permissions, both read-only: to view your YouTube account and to view the YouTube Analytics reports for your channel. With them it reads, once a day: the channel's identifier and name; its subscriber count (or that you keep it hidden), its total views and its number of videos; your 10 most recent videos, with their title, publication date and their views, likes and comments; and, for the latest day YouTube Analytics already has, the views, minutes watched, average view duration, subscribers gained and lost, likes, comments and shares. It does not read your email, your contacts or your messages, and it never publishes, edits or deletes anything on YouTube.

This data is used so that the label and the artist can follow the channel's growth day by day and see the results of each release. Only the label's staff and the artist on that roster profile see it. MSK does not use it for advertising, does not sell it and does not share it with anyone else.

What Google gives MSK to read the channel every night (the authorisation) is stored encrypted and is used only by MSK's servers: nobody can see it, not even the label's staff. MSK also records which MSK account connected the channel and when.

You can remove MSK's access whenever you like: with “Disconnect” in MSK (on your panel or on the label's roster profile) or from your Google account's permissions (https://security.google.com/settings/security/permissions). Disconnecting from MSK deletes the channel's saved metrics at that moment. If you revoke access from Google or the authorisation stops working, MSK detects it and deletes the saved metrics within 7 days at most, counted from when you revoke it. From each daily snapshot, the channel's name and identifier and the list of recent videos (titles and dates) are deleted after 30 days; the numbers are kept while it stays connected. If MSK cannot confirm within 30 days that the authorisation still works, it deletes the saved metrics. MSK also checks every night that the authorisation still works, and every 30 days it reviews its permissions with Google.

The same rule will apply to Instagram and Facebook (from Meta) and to TikTok when they can be connected: only with the account owner's authorisation, only to read metrics, visible to the label's staff and to the artist, with a way to revoke it and deletion on revocation. Before each one opens, this notice will say which data it reads.

MSK uses Google Analytics to measure use in the browser. Use is not measured in the iPhone and Android apps. To recognise that you are the same person who came back yesterday, it stores a random identifier in your browser that carries neither your name nor your email. It also stores in your browser what is needed to keep your session and your preferences, such as the theme or the language. If you ask for a link to sign in with your email, the browser keeps that email for up to a day, so it doesn't have to ask you again when you come back, and deletes it when you sign in or sign out. And to stop automated requests for links, that page may use Google reCAPTCHA, which reviews technical data about your browser and how you use it; it is governed by Google's Privacy Policy.

What is not measured: anything you write. Not your lyrics, not your chords, not your song titles, not who you work with. There are no ads, no social media pixels, and your data is not combined with other companies' data. We don't ask for your contacts or your phone's location either.

When you play a YouTube video on MSK Stage, or sync lyrics to a video in MSK, YouTube's player loads in its privacy-enhanced mode. When you paste a video link to sync, your browser also asks YouTube for the video's title; MSK doesn't store it. YouTube is a Google service and is governed by the Google Privacy Policy: https://policies.google.com/privacy

You can switch measurement off with “Don't measure my use”, above, and delete or block these technologies from your browser or with a tracking blocker.

Data is stored on Google Cloud servers in the United States. Stripe and Resend process it on their own servers, also outside Mexico. They are providers that process data on MSK's behalf, under the confidentiality and security obligations of their contracts.

For as long as you have an account. What you delete goes to the trash and is permanently deleted after 60 days, automatically. In production review each stage holds 5 versions; to upload another you choose which one is deleted, with its comments, and the approved one cannot be removed.

The metrics of a connected YouTube channel are kept while it stays connected, except the channel's name and identifier and the list of recent videos (titles and dates) in each daily snapshot, which are deleted after 30 days. If it is disconnected from MSK, they are deleted at that moment; if access is revoked from the Google account or the authorisation stops working, they are deleted within 7 days at most from the revocation, and if the authorisation cannot be confirmed within 30 days, on that day. They are also deleted if the artist connected the channel from their panel and then deletes their MSK account, and when another channel is connected on the same roster profile.

If you delete your account, what is only yours is deleted. Writer credits and signed contracts are kept, because they are evidence for other people; so are the accounting record of token movements and the record of which version of the terms and of this notice you accepted and when, which is the proof of that agreement. Copyright claim files are deleted 12 months after the claim is resolved. The details are at msk-music.com/eliminar-cuenta.

You have the right to access your data, to rectify it if it is wrong, to cancel it and to object to its use for a specific purpose (the ARCO rights). You can also revoke your consent.

To do so, write to soporte@msk-music.com from your account's email, saying what you are asking for and about which data. If you write from another address or on someone else's behalf, we will ask you to prove your identity or your authority. We reply within 20 business days at most and, where it applies, carry it out within the following 15 business days. You don't need to explain why.

Many things you can do yourself without writing to us: correct your profile, delete songs, switch off your songwriter page, disconnect your YouTube channel, stop measuring your use on the device you are on (with “Don't measure my use”, on this page) or delete your account from your profile.

If you believe we did not handle your request properly, you can go to the personal data protection authority.

MSK is intended for people aged 13 or over. If you are younger, don't create an account. If we learn an account belongs to someone under 13, we delete it.

When something important changes we will say so inside the app, not just by quietly editing this page. The version in force and the date of its last update are shown above.