Legal
Privacy Policy
Last updated: 15 March 2026
1. Data Controller & Processor Roles
The Services are operated by AWC Music Services BV, Vaderlandstraat 76, 9000 Gent, Belgium (support@mylabeldesk.com). For customer account, billing and marketing data, AWC Music Services BV acts as the Data Controller. For all workspace and Organization data (uploads, tracks, artist information, contracts, reviews, etc.), AWC Music Services BV acts as the Data Processor on behalf of the Organization (Label) using the platform.
2. Data We Collect
Signup Information: name, email address, label/organization name. Account Information: subscription plan, workspace settings, user roles. Usage Data: actions performed within the platform (e.g. uploads, reviews, signings) for analytics and reporting. Payment Information: handled securely by Stripe; MyLabelDesk does not store card data. Communication Data: emails or messages you send to us or receive from us (transactional and, if opted in, marketing). When you submit a contact or partnership form on our website, we also process the data you enter and technical data (e.g. IP address, country, browser) necessary for security and fraud prevention.
3. How We Use Your Data
To provide and maintain the Services; to create and manage your account and Organization workspace; to process payments and invoices via Stripe; to send service-related notifications and updates; to improve security, prevent fraud, and comply with legal requirements; if opted in, to send marketing or product updates; to provide analytics and collaborative functionality to your Organization.
4. Legal Bases for Processing
Contract: to deliver the Services you signed up for. Legitimate interest: to maintain security and improve user experience. Consent: for optional marketing communications. Legal obligation: for accounting or regulatory compliance.
5. Data Storage and Hosting
Data is hosted with trusted GDPR-compliant providers: Supabase (EU/Global) – databases and authentication; Cloudflare R2 (EU/US) – storage of uploaded files; Cloudflare Pages (Global) – website and frontend hosting; Stripe (Global) – payment processing; Resend (Global) – transactional and contact form emails; Google Workspace (EU/US) – email and communication. All subprocessors provide appropriate safeguards under the GDPR, including Standard Contractual Clauses for any transfers outside the EEA. Customers will be notified in advance of any material changes to this subprocessor list.
6. Retention and Backups
Active account data is retained while the subscription is active. After termination, data is retained for 30 days to allow restoration upon request. Backups are encrypted and stored separately for up to 30 days before automatic deletion. Payment and invoicing records may be retained longer for tax purposes.
7. Sharing of Data
MyLabelDesk does not sell or rent personal data. Data may be shared only with authorized subprocessors (see Section 5) and with legal authorities if required by law or court order.
8. Data Breach Notification
In the event of a personal data breach likely to result in risk to individuals, MyLabelDesk will notify the affected Organization and the competent supervisory authority within 72 hours and take all reasonable steps to mitigate impact.
9. User Rights (GDPR)
You have the right to access, rectify, erase, restrict, or port your data, and to object to certain processing (including marketing). You may withdraw consent at any time for processing based on consent. Requests can be sent to privacy@mylabeldesk.com. We will respond within 30 days. If you believe your rights have been violated, you can contact the Belgian Data Protection Authority (GBA): Drukpersstraat 35, 1000 Brussels – gegevensbeschermingsautoriteit.be.
10. Cookies & Tracking
MyLabelDesk uses only essential cookies required for authentication and core operation. If analytics or marketing cookies are introduced in the future, explicit user consent will be requested. For more detail, see our Cookie Policy.
11. Security Measures
Encryption in transit (TLS/SSL) and at rest; role-based access control (RLS); signed URLs for file access; regular monitoring and vulnerability management.
12. Automated Processing & AI Features
Certain features of MyLabelDesk may use automated or AI-assisted processing (e.g. metadata extraction, workflow automation, analytics). No fully automated decisions with legal or significant effect on individuals are made.
13. International Transfers
Where data is transferred outside the EEA, MyLabelDesk relies on EU Standard Contractual Clauses and other approved mechanisms to ensure an adequate level of protection.
14. White-Label and Enterprise Processing
When MyLabelDesk operates under a white-label environment (e.g. customer's domain), all data within that environment is processed strictly on behalf of the Organization under the standard Data Processing Agreement (DPA) available on our website.
15. Changes to this Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated via email or in-app notification before taking effect.
16. Contact
For privacy-related questions or to exercise your rights: privacy@mylabeldesk.com. AWC Music Services BV – Vaderlandstraat 76, 9000 Gent, Belgium.