Privacy Policy

Effective: 10 August 2026 Last updated: 10 August 2026

Ambler Tech ApS ("Ambler", "we", "us") is a Danish company, CVR no. 45641821, registered at Nordre Fasanvej 113, 2000 Frederiksberg, Denmark. We are the data controller for the personal data described in this policy.

This policy explains what we do with personal data, why, and what rights you have. It applies to everyone who uses Ambler — record label teams, artists, and the writers, producers and performers who contribute to a recording.

1. What Ambler does, in plain terms

When music is released, information about it has to reach several different organisations before anyone gets paid. The label needs to register the release and the recording. The people who created the song — writers, composers, producers, performers — need their shares acknowledged, or the royalties collected from radio and public performance are never distributed to them.

Today that information usually travels by email, spreadsheet and messaging apps. It changes hands many times, and nobody can reliably show who provided what.

Ambler brings it into one place. You enter your information once; we pass the relevant part to the right organisation — your distributor, your collecting society, your publisher — and we keep a record of who entered what and when.

Ambler does not collect or pay out royalties. We never hold your bank details, payment card information, or any payment data. Money flows through the organisations we send information to, never through us.

2. Who this policy covers

  • Label teams — the people at a record label who use Ambler to manage releases.

  • Artists — main artists, band members and signed artists.

  • Contributors — songwriters, composers, producers and performers who are credited on a recording.

If you are a contributor, you have your own Ambler account and your own relationship with us. You are not simply data held on a label's behalf.

3. What we collect

Information you give us:

  • Name, email address and phone number

  • Professional identifiers: your IPI number, your society or PRO membership, your publisher, and any artist names or aliases you use

  • Your role on a recording (writer, composer, producer, performer) and your agreed share

Information a label gives us about you: a label may enter your name and email in order to invite you, and in the circumstances described in section 5 may enter your contribution details as well.

Information collected automatically: IP address, browser and device information, and technical error diagnostics. If you consent, we also collect product usage data and session recordings — see section 11.

We never collect: bank or payment details, national identification numbers, or any sensitive category of data such as health, religion, ethnicity, political opinions or trade union membership.

4. Why we use it, and our legal basis

What we doWhyLegal basisCreate and secure your accountSo you can use AmblerPerformance of our contract with youLet you enter and confirm your contribution and shareThis is the core of the servicePerformance of our contract with youSend you an invitation to join a registrationSo you can provide your detailsOur contract with you; our legitimate interest in completing a registration where a label supplied your addressSend your information to your distributor, collecting society or publisherSo your work is registered and you can be paidPerformance of our contract with you — when you confirm your details, you are instructing us to make that deliveryManage a label's team and catalogueTo provide the service to our customerOur contract with the label, which instructs usAllow a label to complete missing details (see section 5)So a commercial release is not blocked indefinitelyLegitimate interestsKeep a record of who entered what and whenTo evidence rights claims and to meet our accountability obligationsLegal obligation; our legitimate interest in a reliable audit trailUnderstand how the product is usedTo improve AmblerYour consentDiagnose errors and keep the service secureTo keep Ambler workingOur legitimate interests

5. When a label completes your details for you

This section matters, so we have set it out separately.

A release cannot be finalised while contribution details are missing. If you are invited to provide your details and do not do so within a defined period, the label may enter them on your behalf so the release can go ahead. This is normal practice in the music industry, and it usually reflects an agreement already in place between you and the label.

When this happens:

  • It is recorded as the label's assertion, not your confirmation. Our records and everything we send onward distinguish between details you confirmed and details a label entered on your behalf. These are not treated as the same thing.

  • We will tell you. You will be notified that details have been entered in your name.

  • You can correct or object. You may ask us to correct the information, or object to it, at any time — see section 10. If you do, we will act on it and inform the label.

Our legal basis here is legitimate interests: the label's interest in releasing a commercial product it has invested in, and ours in operating the service. We have weighed this against your interests, which is why the window is limited, the attribution is preserved, you are notified, and you can object.

6. Who we send your information to

Ambler exists to move information to the organisations that need it. Those organisations decide for themselves how they use it — in legal terms they are independent controllers, and their own privacy policies apply once the data reaches them.

WhoWhat they receiveWhyDistributorsRelease and recording details, creditsSo recorded-music royalties can be paidCollecting societies and PROs (for example KODA)Work details, writer shares, IPI numbersSo performance and mechanical royalties can be collectedPublishersNotification that a work needs registering, and the relevant writer detailsSo your publisher can register on your behalfNeighbouring-rights societies (for example Gramex)Performer and producer detailsSo neighbouring-rights royalties can be collected

We do not sell personal data, and we do not share it for advertising.

7. Service providers

We use a small number of providers to run Ambler. They act on our instructions and may only use the data to provide their service to us.

ProviderWhat they doWhere they process dataOVHcloudHosting, database, file storageFrance (EU)ResendSending emailsIreland (EU)PostHogProduct analytics (only with your consent)Germany (EU)ClerkSign-in and account securityUnited States (see section 8)

The platform itself, your catalogue, your contribution details and any audio you upload are hosted in France and do not leave the EU.

8. Transfers outside the EU

Almost all of your data stays within the EU. The exception is sign-in and account security, which is provided by Clerk in the United States. This covers your name, email address, phone number and account credentials only — not your contribution details, your catalogue or your audio.

Clerk, Inc. is certified under the EU-U.S. Data Privacy Framework. In July 2023 the European Commission decided that this Framework provides a level of protection for personal data equivalent to that guaranteed within the EU, and that decision is the legal basis for this transfer. Clerk has also committed to an independent dispute resolution process, provided free of charge, if you have a complaint it cannot resolve directly.

Data is encrypted in transit and at rest. You can request further detail on the safeguards in place by contacting us.

9. How long we keep it

DataHow longYour rights record — your credits, role, share, IPI, and what you worked onFor as long as the copyright in that work or recording lastsYour account and contact detailsFor as long as your account is open, then 3 monthsAudio files and artworkFor as long as storage is included in the relevant subscription, then 3 monthsProduct analytics12 monthsError diagnostics90 daysEmail delivery records12 monthsSupport messages24 months

Why the rights record is kept so much longer. Copyright lasts a long time — 70 years from release for a recording, and for a song, the lifetime of the last surviving writer plus 70 years. Royalty claims and disagreements about who wrote what can surface decades after a release, and the record of what you confirmed is often the only evidence of what was agreed. Keeping it is what protects your claim, not just ours.

We keep less of it over time. When your account closes, we reduce what we hold about you to what is actually needed as evidence — your name, your role, your share, your IPI, and what you were credited on. We delete your contact details, phone number and sign-in information. We keep what proves your claim, not what identifies how to reach you.

If Ambler ever ceases to operate, we will provide your data in a machine-readable format before we shut down, as set out in our Terms & Conditions. Your rights record should outlive us, and you should be able to take it with you.

10. Your rights

Under the GDPR you have the right to:

  • Access — get a copy of the personal data we hold about you

  • Rectification — have inaccurate data corrected

  • Erasure — have data deleted, where we are not required to keep it

  • Restriction — ask us to limit how we use your data

  • Portability — receive your data in a machine-readable format

  • Object — object to processing based on legitimate interests, including the situation described in section 5

  • Withdraw consent — withdraw analytics consent at any time, without affecting anything done beforehand

To exercise any of these, email info@ambler.tech. We will respond within one month.

Some limits apply, and we would rather be direct about them:

  • Data already delivered elsewhere. Once information has reached a collecting society, publisher or distributor, we can correct our own records and tell them about the correction, but we cannot delete anything from their systems. You would need to contact them directly.

  • Your rights record. We can refuse a deletion request for the record of your credits and shares, because the law allows data to be kept where it is needed to establish, exercise or defend legal claims — and that record is exactly that. Deleting it would remove the evidence of your own claim as well as ours. Your account and contact details are not covered by this and will be deleted on request.

11. Cookies and analytics

We use cookies that are strictly necessary to keep you signed in and to keep the service secure. These do not require consent.

We also use PostHog to understand how the product is used, which may include recordings of how you navigate the interface. This only happens if you consent. We ask when you first use Ambler, and you can change your mind at any time. If you do not consent, we do not collect it.

Sensitive fields are masked in any recording.

12. Security

Ambler runs on managed European infrastructure. Data is encrypted in transit and at rest, access is restricted to those who need it, and we keep a record of changes made to rights information. We have a documented process for responding to security incidents, and we will notify you and the Danish Data Protection Agency where the law requires it.

13. Changes to this policy

We will update this policy as Ambler develops. If we make a significant change, we will tell you in the product before it takes effect. The date at the top shows when it was last updated.

14. Contact and complaints

Ambler Tech ApS Nordre Fasanvej 113, 2000 Frederiksberg, Denmark CVR 45641821 info@ambler.tech

If you are unhappy with how we have handled your personal data, please contact us first — we would rather fix it. You also have the right to complain to the Danish Data Protection Agency:

Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark — datatilsynet.dk