PRIVACY POLICY SongCredit.net
Effective Date: April 30, 2026
Operated by: Zen Music Distribution
Governing Law: Kingdom of Thailand — Personal Data Protection Act B.E. 2562 (PDPA)
INTRODUCTION
SongCredit.net ("SongCredit", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use SongCredit.net, a music credit registration platform operated by Zen Music Distribution ("Zen Music").
This Privacy Policy is written in compliance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand, which governs the collection and processing of personal data of individuals in Thailand and of users who interact with services operated from Thailand.
By creating an account or using SongCredit, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.
If you do not agree with this Privacy Policy, please do not use SongCredit.
1. WHO WE ARE
SongCredit.net is a product of Zen Music Distribution, a music distribution and rights management company operating across Southeast Asia.
Data Controller: Zen Music Distribution
Operating platform: SongCredit.net
Contact: privacy@songcredit.net
As data controller, Zen Music Distribution determines the purposes and means of processing your personal data collected through SongCredit.
2. WHAT PERSONAL DATA WE COLLECT
We collect the following categories of personal data when you use SongCredit:
2.1 Account data
When you register an account, we collect your full legal name, email address, username, password (encrypted), country of residence, and date of birth (to verify age eligibility).
2.2 Artist and professional identity data
To operate your artist profile and facilitate royalty routing, we collect your artist or stage name, biography and profile photo (optional), IPI number (Interested Party Information — issued by your PRO), IPN number (International Performer Number — issued by your neighbouring rights society), ISNI number (International Standard Name Identifier — optional), PRO membership details (e.g. ASCAP, BMI, PRS, APRA AMCOS, Songtrust), and your Zen Music Distribution account details if you choose to link accounts.
2.3 Song and credit registration data
When you register a song, we collect the song title, release date, genre, language, ISRC (International Standard Recording Code), ISWC (International Standard Musical Work Code), contributor names and their roles (songwriter, producer, featured artist, session musician, engineer, etc.), royalty split percentages between contributors, and publisher and label information if applicable.
2.4 Verification data
When contributors confirm their participation in a registered song, we collect their email address (for sending verification requests), their confirmation response and timestamp, and their IP address at the time of verification.
2.5 Payment data
If you subscribe to a paid plan, we collect your billing name and address, payment method details (processed securely by our payment provider — we do not store full card numbers), and subscription and transaction history.
2.6 Usage data
We automatically collect data about how you use the platform, including IP address, browser type and version, device type and operating system, pages visited and features used, time and date of access, and referring URLs.
2.7 Communications data
We collect the content of any emails, support tickets, or messages you send to us, including your name, email address, and the content of your enquiry.
3. HOW WE COLLECT YOUR DATA
We collect your personal data through the following means:
Directly from you — when you register an account, complete your artist profile, submit a credit registration, link a PRO or IPN number, subscribe to a paid plan, or contact our support team.
From contributors you name — when you list another person as a contributor on a registered song, we collect their name and email address to send them a verification request. You are responsible for ensuring you have their consent before submitting their information.
From third-party integrations — if you link your Zen Music Distribution account, we receive relevant account data from Zen Music. If you connect your PRO account, we may receive membership and IPI data from that PRO.
Automatically — through cookies, web beacons, and similar tracking technologies when you browse SongCredit.net.
4. HOW WE USE YOUR DATA
We use your personal data for the following purposes, each supported by a lawful basis under the PDPA:
4.1 To provide the SongCredit service
Lawful basis: Performance of contract. We use your account data, artist identity data, and credit registration data to operate your account, process credit registrations, issue Verified Badges, and maintain your public artist profile.
4.2 To verify contributor participation
Lawful basis: Legitimate interest / performance of contract. We use contributor names and email addresses to send verification requests, confirming that each named contributor acknowledges their role in a registered song.
4.3 To facilitate royalty routing
Lawful basis: Performance of contract / legitimate interest. We share your credit data and Music Identifiers (ISRC, ISWC, IPI, IPN) with PROs, neighbouring rights societies, and music distributors to enable royalty collection on your behalf. This is the core operational function of SongCredit.
4.4 To process payments
Lawful basis: Performance of contract. We use your billing data to process subscription payments, issue receipts, and manage your subscription status.
4.5 To maintain the public credit registry
Lawful basis: Legitimate interest. Verified credit registrations are displayed publicly on SongCredit as part of the platform's core function — creating a permanent, searchable record of music authorship. This is an essential purpose of the platform and a key reason users register with us.
4.6 To communicate with you
Lawful basis: Performance of contract / legitimate interest. We use your email address to send account notifications, verification status updates, subscription receipts, and service announcements. We will only send marketing communications with your explicit consent.
4.7 To improve the platform
Lawful basis: Legitimate interest. We use usage data and anonymised analytics to understand how users interact with SongCredit, identify technical issues, and improve platform features and performance.
4.8 To comply with legal obligations
Lawful basis: Legal obligation. We may process your data to comply with applicable Thai law, respond to lawful requests from government authorities, or enforce our Terms and Conditions.
5. DATA WE SHARE WITH THIRD PARTIES
We do not sell your personal data. We share your data only in the following circumstances:
5.1 Zen Music Distribution
As SongCredit is a product of Zen Music Distribution, your account and credit data is accessible to the Zen Music team for operational and support purposes. If you link your Zen Music account, your distribution and credit data may be used together to provide integrated services. Zen Music operates under the same data protection obligations as SongCredit.
5.2 PROs and collecting societies
To route your publishing royalties, we share your ISWC, IPI number, and song credit data with PROs including but not limited to ASCAP, BMI, PRS for Music, APRA AMCOS, and publishing administrators including Songtrust. We share only the data necessary for royalty routing purposes.
5.3 Neighbouring rights societies
To route your master/neighbouring rights royalties, we share your ISRC, IPN number, and performer credit data with neighbouring rights societies including PPL, SoundExchange, and SCAPR member organisations.
5.4 Music distributors
If you use SongCredit in connection with a music distribution service (including Zen Music Distribution), we may share your ISRC and credit data with that distributor to ensure credit accuracy across streaming platforms.
5.5 Payment processors
We use third-party payment processors to handle subscription payments securely. Your payment card data is processed directly by our payment provider and is not stored on SongCredit's servers. Our payment processor operates under its own privacy policy and applicable financial data protection regulations.
5.6 Technology service providers
We use third-party technology providers for cloud hosting, email delivery, analytics, and customer support. These providers process your data on our behalf and are contractually required to protect your data in accordance with PDPA requirements.
5.7 Legal requirements
We may disclose your personal data to law enforcement, government authorities, or courts in Thailand or internationally where we are legally required to do so, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of SongCredit, our users, or the public.
5.8 Business transfers
In the event of a merger, acquisition, or sale of all or part of Zen Music Distribution's business assets, your personal data may be transferred to the acquiring entity. We will notify you by email and via a prominent notice on the platform before your data is transferred and becomes subject to a different privacy policy.
6. PUBLIC DATA AND ARTIST PROFILES
SongCredit is a public registry by design. The following data is publicly visible on SongCredit by default:
Your artist name and profile page, the titles of songs you have registered, your credited role on each registered song (songwriter, producer, performer, etc.), the Verified Badge status of your registered songs, and your linked ISRC and ISWC codes.
The following data is never made public: your email address, date of birth, payment details, IPI and IPN numbers (used internally for routing only), and your IP address or verification timestamps.
If you do not wish your credit information to appear publicly, you should not submit it for registration. The public nature of verified credits is a fundamental feature of SongCredit — it is what makes credit registration meaningful.
7. COOKIES AND TRACKING TECHNOLOGIES
SongCredit uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse platform usage.
7.1 Types of cookies we use
Essential cookies are required for the platform to function. They enable login sessions, security features, and core platform functionality. These cannot be disabled.
Analytical cookies help us understand how users navigate the platform. We use anonymised analytics data to improve features and performance. You may opt out of analytical cookies via your account settings or browser settings.
Marketing cookies are only used with your explicit consent, and only if we run marketing campaigns in the future. We will ask for your consent before placing any marketing cookies.
7.2 Cookie consent
When you first visit SongCredit.net, you will be presented with a cookie consent notice in compliance with PDPA requirements. You may accept all cookies, accept essential cookies only, or manage your preferences at any time via the cookie settings link in the platform footer.
7.3 Third-party cookies
Some third-party tools we use (such as analytics providers) may set their own cookies. These are governed by those providers' own privacy policies.
8. DATA RETENTION
We retain your personal data for the following periods:
Account data is retained for as long as your account is active. If you delete your account, your personal contact data (name, email, date of birth) is deleted within 30 days.
Verified credit registrations are retained indefinitely. This is intentional — verified credits form a permanent public record of musical authorship. The credit record itself (song title, contributor names, roles, Music Identifiers) will remain on SongCredit even after you delete your account. Only your personal contact information is removed.
Payment and billing data is retained for 7 years in accordance with Thai accounting and tax law requirements.
Usage and analytics data is retained in anonymised form for up to 24 months.
Support and communications data is retained for 3 years from the date of the last interaction.
9. YOUR RIGHTS UNDER THE PDPA
Under the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand, you have the following rights regarding your personal data:
9.1 Right to be informed
You have the right to know what personal data we collect about you and how we use it. This Privacy Policy fulfils that obligation.
9.2 Right of access
You have the right to request a copy of the personal data we hold about you. To make an access request, contact privacy@songcredit.net. We will respond within 30 days.
9.3 Right to rectification
You have the right to request correction of any inaccurate or incomplete personal data. You may update most account data directly through your account settings. For corrections to verified credit registrations, please follow the amendment process described in our Terms and Conditions.
9.4 Right to erasure
You have the right to request deletion of your personal data. Please note that verified credit registrations cannot be fully erased — the credit record itself forms part of the permanent public registry. Only your personal contact information will be removed upon a deletion request. We will inform you of what can and cannot be deleted before processing your request.
9.5 Right to data portability
You have the right to request your personal data in a structured, commonly used, machine-readable format. Contact privacy@songcredit.net to request a data export.
9.6 Right to object
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, though this may affect your ability to use certain platform features.
9.7 Right to withdraw consent
Where we rely on your consent to process personal data (such as for marketing communications or non-essential cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal.
9.8 Right to lodge a complaint
If you believe we have violated your data protection rights, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.
To exercise any of the above rights, contact us at privacy@songcredit.net. We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.
10. DATA SECURITY
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted storage of passwords and sensitive data, HTTPS encryption for all data transmitted between your browser and our servers, access controls limiting which Zen Music and SongCredit staff can access personal data, regular security reviews and vulnerability assessments, and secure third-party payment processing with no card data stored on our servers.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the PDPC within 72 hours of becoming aware of the breach, as required by the PDPA.
11. INTERNATIONAL DATA TRANSFERS
SongCredit is operated from Thailand. However, to facilitate royalty routing, your credit data and Music Identifiers may be transferred to PROs, collecting societies, and technology providers located in other countries, including the United States, United Kingdom, Australia, and European Union member states.
When transferring your data internationally, we ensure appropriate safeguards are in place, including data processing agreements with receiving organisations, transfers only to countries or organisations providing an adequate level of data protection, and compliance with PDPA requirements for cross-border data transfers.
12. CHILDREN'S PRIVACY
SongCredit is not intended for users under the age of 18. We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected data from a minor, please contact privacy@songcredit.net immediately and we will delete the data promptly.
13. LINKS TO THIRD-PARTY SITES
SongCredit may contain links to third-party websites including PRO registration portals, collecting society websites, and music distribution platforms. This Privacy Policy applies only to SongCredit.net. We are not responsible for the privacy practices of third-party sites and encourage you to read their privacy policies before providing any personal data.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by email and by posting a prominent notice on the platform at least 30 days before the changes take effect.
Your continued use of SongCredit after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.
15. CONTACT US
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Privacy Officer
SongCredit.net — operated by Zen Music Distribution
Email: privacy@songcredit.net
Support: support@songcredit.net
Legal: legal@songcredit.net
Website: songcredit.net
We will respond to all privacy enquiries within 30 days.
