OneVoice Distro™ — One voice. Your choice. Press play. Get paid.

This Privacy Policy explains how One Voice Distribution LLC (“One Voice Distribution”, “we”, “us”, “our”) collects, uses, discloses, and safeguards information about you when you visit our website at https://onevoicedistro.com, use the One Voice Distro web application, mobile experiences, embedded players, radio streams, share links, QR codes, e-mails, and any other product or service that links to this Policy (collectively, the “Services”).

Your use of the Services is also governed by our Terms of Service, which incorporates this Policy by reference. If you do not agree with this Policy, please do not use the Services.

We may update this Policy from time to time. When we do, we will revise the “Last Updated” date above and, where the changes are material, notify you by e-mail and/or an in-app banner before they take effect.

Scope
Information We Collect
How We Collect Information
How We Use Information
Payments, Stripe Connect & Tax Information
Content Uploads, Copyright & AI Detection
Radio Streams & Play Logging
Social Features, Messages & Public Profiles
How We Share Information
Cookies, Local Storage & Tracking
Third-Party Services & Sub-Processors
Data Retention
Data Security
International Data Transfers
Your Privacy Rights
Children Under 16
Do Not Track
Recent Feature Data Flows (AI Studio · Song Wars · PTL · Promotion bypass · Admin audit)
California “Shine the Light”
Contact Us

1. Scope

This Policy applies only to information collected by or on behalf of One Voice Distribution. It does not apply to information collected by third-party websites, applications, or services we link to but do not control, even where they are presented within our Services (for example, a third-party DSP playing a track that was distributed through One Voice Distro). Their privacy practices are governed by their own policies, which we encourage you to read.

2. Information We Collect

a. Information You Provide

Account & Profile: e-mail address, password (stored as a salted bcrypt hash – we never see your plaintext password), display name / username, full legal name (where required for payouts), date of birth (age-gating), profile picture, cover image, biography, links to your other social accounts, location/region (optional), language, and the roles you self-identify with (Listener, Artist, AI Artist, Producer, Reviewer, Advertiser, Promoter, DJ).
Content You Upload: audio files (tracks, AI tracks, beats, stems, audio ads), videos, album art / cover images, lyrics, descriptions, prices, free/paid status, BPM, key, genre, language, mood, ISRC/UPC metadata, copyright declarations, and any other metadata you submit alongside your uploads.
Payment & Tax: when you sell content, accept bookings, run ads, accept donations, or buy from another seller, our payment processors (currently Stripe, Stripe Connect and PayPal) collect billing details, the last 4 digits of your card, billing address, and (for sellers / connected accounts) tax identification, government ID for KYC verification, and bank or debit-card information used for payouts. We receive the result of these checks (verified / pending / failed) and the truncated metadata, but we do not store your full card number, CVV, or full bank account number on our servers.
Communications: e-mails or messages you send to support, replies to in-app notifications, content of direct messages between users, and posts/comments on tracks, beats, videos, albums, events and live sessions.
Producer / Artist Legal Information: for artists and producers selling on the platform, the legal name and address you submit at /profile/producer-legal-info for inclusion in invoices, contracts, and tax forms.
Verification Data: documents or links you submit to obtain a verified-artist badge.

b. Information Collected Automatically

Device & Connection: IP address, user agent, device type, operating system, browser version, screen resolution, time zone, language preference, and approximate location (city/region) derived from your IP. We use this approximate location solely for analytics — for example, to show artists which cities and states their music is trending in. We do not sell or share location data with third parties for advertising.
Usage: pages and screens visited, features used, search queries, plays / pauses / skips, time spent on radio stations, click and tap events, referral URL, and the URL parameters of share links you opened.
Radio Stream Logs: when you listen to a station for at least 60 seconds, we log a single anonymized stream record per device per day (IP + visitor ID, station, track id, timestamp). This powers the radio leaderboard and prevents bot-inflated counts.
Cookies & Local Storage: see Section 10.

c. Information from Third Parties

Single Sign-On Providers (e.g., Google) – when you choose to sign in with a third-party provider, we receive the basic profile fields you authorize (e-mail, name, profile picture URL, account ID).
Payment Processors – Stripe and PayPal share with us the result of payment, refund, dispute, and KYC events for your transactions. Stripe Connect notifies us when your connected account becomes charges_enabled or requires further verification.
Audio Identification Providers – when you upload, we may submit a derivative “fingerprint” of your audio to copyright/AI-detection providers and receive back match results. We do not transmit your raw file beyond the duration needed to compute the fingerprint.
Analytics & Ad Networks – aggregated and pseudonymized engagement statistics for ads displayed on the platform.

3. How We Collect Information

Directly from you when you register, upload content, set up payouts, message another user, leave a review, buy or donate.
Automatically through standard web technologies (cookies, local storage, server logs) when you load the site, the embedded player, or scan a QR code that resolves to /api/og/....
From integrated services (Stripe, PayPal, Google, copyright/AI providers) that you authorize.

4. How We Use Information

Provide the Services: authenticate your account, host your uploaded content on Cloudflare R2, deliver streams, render radio schedules, queue your tracks/videos/beats for review or release, generate ISRC and UPC barcodes, build share previews and QR codes, and route in-app notifications.
Process Payments & Payouts: charge buyers, escrow funds for ticket and booking flows, transfer earnings to your connected Stripe / PayPal account net of platform fee and processing fees, and generate payout reports.
Personalize: recommend tracks, surface artists in the All-Genre Radio rotation, suggest VIP perks, and tailor your home and discover feeds.
Communicate: send transactional e-mails (purchases, bookings, payout confirmations, password resets), digest e-mails (weekly artist digest, daily admin digest, advertiser weekly reports, leaderboard alerts), platform-wide newsletters (Sundays), and in-app notifications. You may unsubscribe from non-transactional e-mails at any time.
Trust & Safety: detect fraud, copyright infringement, AI-generated content claimed as human, prompt-injection abuse, suspicious payment activity, abuse of the radio play counter, and underage use.
Analytics & Improvement: understand which features are used, A/B test design changes, and produce aggregate (non-identifying) stats such as radio leaderboards.
Legal Compliance: meet tax, anti-money-laundering, sanctions, and DMCA obligations, and respond to lawful requests from regulators or courts.

Where required by law, we rely on the following legal bases under GDPR/UK-GDPR: performance of a contract with you (your account & payments), legitimate interests (security, analytics, fraud prevention), legal obligations (tax, AML, DMCA), and consent (marketing e-mails and certain cookies, withdrawable at any time).

5. Payments, Stripe Connect & Tax Information

Card payments are processed by Stripe, Inc. (and Stripe Connect for marketplace payouts) and, where you choose, by PayPal Holdings, Inc. Card data is sent directly from your browser to the processor; we never receive or store the Primary Account Number, CVV or full bank-account number.

When you sell content, accept a booking, or receive a donation, we use Stripe Connect destination charges. The customer's funds land on the platform, we deduct the platform fee plus a Stripe processing-fee reimbursement (so the seller bears their own Stripe cost), and the remainder is automatically transferred to your connected Stripe account. Each payment record we store includes: transaction ID, gross amount, platform fee, Stripe fee reimbursement, seller payout, currency, status, ISO timestamp, and a reference to the buyer and seller.

For sellers and advertisers we may collect Form W-9 / W-8 equivalents and threshold-based 1099 information through our processors, as required by U.S. tax law.

6. Content Uploads, Copyright & AI Detection

When you upload audio, video, or art we store the file on Cloudflare R2 (object storage), keep a database record of its metadata, and may run automated checks for: copyright matches, AI-generated content (using Gemini Flash or comparable providers), explicit-content scoring, and audio quality. We retain the result of these checks alongside your upload. Tracks flagged as AI-generated remain visible on AI-only stations; tracks flagged as copyright-infringing are removed from sale and may be taken down pending review.

Paid tracks/videos receive an ISRC (format US-OVD-YY-NNNNN) and paid albums receive a 12-digit GS1-compliant UPC for use in DSP catalog submissions and physical distribution. These codes are public — they appear on the public track and album pages and on the QR codes you can download.

7. Radio Streams & Play Logging

The All-Genre, AI, and Music radio stations are server-synced — every listener hears the same track at the same playback position. To support fair leaderboards we record at most one stream record per device per day per station, after a 60 second listen. The record contains a hashed visitor ID, the station name, the track ID, and the timestamp.

When a track is requested by a VIP, the platform may generate a short Text-to-Speech intro slate (“Requested by @username…”). The text used to generate the slate (your username and an optional message) is sent to our AI TTS provider; the resulting audio is cached on our servers.

Most of your profile (username, picture, bio, public uploads, follower & following lists, repost activity, leaderboard position) is visible to anyone who visits your profile, including search engines.

Direct messages, livestream chat, and comments left on another user's content are stored on our servers and are accessible to the recipient and to our trust & safety team. Do not send sensitive personal information through messages.

Share links and QR codes you generate (/api/og/...) include a lightweight HTML preview rendered server-side; that preview does not collect personal data from the scanner.

We do not sell your personal information. We share information only as follows:

With Other Users: public profile fields, uploads, comments, repost / follow data, and leaderboard positions are public by design.
With Service Providers (Sub-Processors): see Section 11.
With Buyers / Sellers You Transact With: the other party will see your username and the description / amount of your transaction; sellers may see the buyer's name (as it appears on their card) for fulfillment of physical merchandise and tickets.
For Legal & Safety Reasons: we may disclose information if we believe in good faith that it is required by law, by a court order, or to protect the rights, property, or safety of One Voice Distribution, our users, or others.
In a Business Transfer: if One Voice Distribution is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction; we will notify you and any new owner will be bound by this Policy.
Aggregated & De-Identified Data: we may share data that has been aggregated or otherwise stripped of identifiers (e.g., total streams per genre last week) without restriction.

10. Cookies, Local Storage & Tracking

We use a small number of cookies and HTML5 local-storage entries:

Authentication tokens (JWT) – kept in local storage so you stay signed in.
Session preferences – the radio station you last selected, mute state, theme, and dismissed banners.
Visitor ID for radio play counts – a randomly-generated identifier so the leaderboard can de-duplicate plays without a login.
Analytics – first-party page-view telemetry. We do not use third-party advertising trackers by default.

You can clear cookies and local storage from your browser at any time, but doing so will sign you out and reset your preferences.

11. Third-Party Services & Sub-Processors

The Services rely on the following sub-processors. We pass to each only what is necessary:

Stripe, Inc. & Stripe Connect — payments, payouts, KYC, dispute handling.
PayPal Holdings, Inc. — alternative payment / payout method.
Cloudflare, Inc. (R2 + CDN) — object storage for audio, video, images; HTTPS edge.
MongoDB Atlas — primary application database.
Google LLC (Gemini API) — AI-content detection & copyright analysis.
OpenAI, L.L.C. & ElevenLabs, Inc. — Text-to-Speech for radio VIP slates.
Resend, Inc. (or comparable e-mail provider) — transactional and digest e-mails.
Hosting / DNS provider — servers running the API and frontend.

Each sub-processor is bound by its own privacy and security commitments. A current list is available on request at the contact address below.

12. Data Retention

We keep personal information only as long as we need it for the purposes set out in this Policy:

Account data: for the lifetime of your account, plus up to 90 days after deletion (to allow recovery and audit).
Uploaded content: until you delete it. Removed content may persist in encrypted backups for up to 90 days.
Payment records, invoices, tax forms: retained for at least seven (7) years to comply with U.S. tax and accounting law.
Server logs & security events: 90 days unless tied to an active investigation.
Radio play logs: 18 months in raw form; aggregated leaderboards retained indefinitely.

13. Data Security

We use industry-standard safeguards: TLS 1.2+ in transit, encrypted-at-rest object storage, salted bcrypt password hashing, scoped JWT tokens, role-based admin access with audit logging, MFA-protected payment dashboards, and least- privilege access for all employees and contractors. No system is perfectly secure, however, and we cannot guarantee that an unauthorized third party will never defeat our safeguards. Choose a strong, unique password, do not share it, and sign out from shared devices.

14. International Data Transfers

One Voice Distribution is based in the United States. If you access the Services from outside the U.S., your information will be transferred to, stored, and processed in the U.S. (and any other country where our sub-processors operate). For transfers from the EEA, UK, or Switzerland we rely on the European Commission's Standard Contractual Clauses or an equivalent transfer mechanism.

15. Your Privacy Rights

Depending on where you live, you may have the right to:

Access a copy of the personal information we hold about you.
Correct / Rectify inaccurate or incomplete information.
Delete personal information we hold about you (subject to legal retention).
Port a machine-readable copy of your data to another service.
Restrict or Object to certain processing, including profiling.
Withdraw Consent for processing that is consent-based, at any time.
Opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising — although as noted above, we do not sell or share your personal data in that sense.
Lodge a complaint with your local data-protection authority.

To exercise any of these rights, e-mail support@onevoicedistro.com from the address associated with your account, or use the in-app account settings. We will respond within the time frame required by your local law (typically 30–45 days). You will not receive discriminatory treatment for exercising your rights.

16. Children Under 16

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided personal information through the Services, please contact us at support@onevoicedistro.com and we will delete it promptly.

17. Do Not Track

Because there is no industry-standard interpretation of the “Do Not Track” browser signal, we currently treat all visitors the same regardless of DNT. We do not, however, employ third-party advertising trackers by default.

19. Recent Feature Data Flows (March 2026)

The following platform features collect or process additional data. They are governed by the same protections described above. Highlights:

AI Studio (A&R Scout · Cover Art · Songwriter).When you run an AI tool we send the prompt (text), the audio sample (if uploaded for A&R), and your user-id to our LLM provider (currently Google Gemini, OpenAI, Anthropic, depending on tool) only to compute the response. We log the input length, output length, model used, and the credits debited from your AI Studio balance. We do not use AI inputs to train third-party base models — provider zero-retention / no-train terms apply. AI outputs you save are stored in your account as drafts.
AI Studio credit purchases. Stripe collects payment details for credit-pack purchases ($5 / $15 / $30). We receive the result and the credit grant; we do not see card numbers.
Song Wars entries & buybacks.Entry fees and 2× buybacks are processed by Stripe Payment Element. We log the entry id, session id, payment intent id, fee amount, and your Stripe Connect status (required to enter so winnings can be paid out). Stripe receives the standard transaction data; we do not see your card number. Live spinner contestant names (display_name) are visible to all session visitors.
Paid-to-Listen. We store your Cash App handle and PayPal e-mail (if you provide them) so we can pay you out manually. We log per-play, per-like, per-comment earnings keyed to your user id, time-stamped, rate-limited (1 qualifying play per track per device per day), and stamped with a fraud-score against the same anonymized device fingerprint we already use for radio play counts (see §7).
Reviewer Tip Methods. Reviewers may publicly display a Cash App tag and / or PayPal email on their session page so visitors can tip directly. Those handles are stored as a normal profile field and are visible to anyone who can view the session. One Voice Distribution does not process the tip, take a cut, or see the amount — the visitor opens the third-party service in a new tab.
Content Visibility / Promotion Bypass.We store a public_at timestamp on every new upload to enforce the 48-hour discovery window for non-Creator-Pro accounts. When you (or anyone else) activate a paid Promotion against a piece of content, we move that timestamp back to now and tag the doc with unwait_reason: "promoted" so the content surfaces immediately. The original upload timestamp is unchanged.
OneVoice Radio v2 — listener payouts.Stripe Connect destination charges are also used for listener subscription payouts under PTL. The same anonymized device + visitor-id fingerprint is reused to dedupe 1-per-day stream counts; we do not link this fingerprint to advertising profiles.
OneVoice Studio (in-browser DAW).We store project files, stems, and render output on Cloudflare R2 against your user id. Sample-library use is logged for licensing-audit purposes only.
Admin actions. All admin actions performed by support@onevoicedistro.com or other admin accounts (delete content, edit pricing, change content type, force payouts, refund a payment, etc.) are recorded in a server-side audit log with the actor id, timestamp, affected resource id, and a diff of the change.

20. California “Shine the Light”

California Civil Code §1798.83 permits California residents to request certain information regarding the disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

21. Contact Us

If you have any questions or comments about this Policy, please contact us at:

Company: One Voice Distribution LLC
Mailing address: 1441 Woodmont Ln NW #1482, Atlanta, GA 30318, USA
E-mail: support@onevoicedistro.com
Web: https://onevoicedistro.com

One Voice Distro and One Voice Distribution LLC are Capital City Entertainment, Inc. companies. Song Wars® is a registered trademark of Capital City Entertainment, Inc.

Privacy Policy

Table of Contents