Skip to content
RAPTURE.

Legal

Privacy Policy

Last updated: July 19th, 2026

1. Introduction

Rapture Music Group (Pty) Ltd (“Rapture”, “we”, “us”, or “our”) is a music distribution and artist services company registered in South Africa. We operate the Rapture Music platform, accessible at www.rapturemusic.co and via the Rapture Console (app.rapturemusic.co or distro.rapturemusic.co).

We are committed to protecting your personal information and respecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have in relation to it.

By using our website, platform, or services in any manner, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

Rapture Music Group (Pty) Ltd is the Responsible Party (as defined under POPIA) and the Data Controller (as defined under GDPR) in respect of personal information we collect and process.

Contact details:

3. What Information We Collect

3.1 Information you provide directly

When you register, submit a form, or contact us, we may collect:

  • Full name and stage name
  • Email address
  • Country of residence
  • Genre and music category
  • Account type (Artist or Label)
  • Banking and payment details for royalty disbursements
  • Social media handles and profile links
  • Music files, artwork, and release metadata you submit for distribution
  • Communications you send us via email or support channels

3.2 Information collected automatically

When you use our website or platform, we may collect:

  • IP address and device identifiers
  • Browser type and operating system
  • Pages visited and time spent on the platform
  • Referring URLs and search terms
  • Cookie and tracking data (see Section 9)

3.3 Information from third parties

We may receive information about you from:

  • Digital streaming platforms (DSPs) including Spotify, Apple Music, YouTube Music, TikTok, Audiomack, and Beatport, in relation to your music’s performance and royalty data
  • Payment processors and financial institutions used to facilitate royalty payments
  • Publishing administration partners, including CTRL Music, where you have consented to access publishing services through our platform
  • Authentication providers — when you sign in using Google authentication, we receive basic profile information including your name and email address to create or access your Rapture account. Your use of Google sign-in is subject to Google’s Privacy Policy at policies.google.com/privacy.

4. How We Use Your Information

We use personal information for the following purposes:

4.1 Providing our services

  • Creating and managing your Rapture account
  • Processing and distributing your music releases to DSPs
  • Calculating, tracking, and disbursing royalty payments
  • Providing customer support and responding to your queries
  • Connecting you to publishing administration services via CTRL Music

4.2 Platform improvement

  • Analyzing usage patterns to improve the platform and user experience
  • Conducting internal research and product development
  • Testing platform features and infrastructure

4.3 Communications

  • Sending account-related notifications and platform updates
  • Sending newsletters and educational content where you have opted in
  • Responding to enquiries and support requests

You may opt out of marketing communications at any time by clicking the unsubscribe link in any email we send you. Opting out will not affect essential account and service notifications.

4.4 Legal and compliance

  • Complying with applicable laws, regulations, and legal obligations
  • Enforcing our Terms of Service and Distribution Agreement
  • Preventing fraud, abuse, and unauthorized access
  • Resolving disputes

4.5 Authentication and account access

Where you choose to sign in using a third-party authentication provider such as Google, we use the information received to create or authenticate your Rapture account. We do not use this information for any purpose beyond account access and the provision of our services.

5. Lawful Basis for Processing

Under POPIA and GDPR, we process personal information on the following lawful grounds:

  • Contractual necessity — processing required to fulfil our Distribution Agreement and Terms of Service with you
  • Legal obligation — processing required to comply with applicable laws and regulations
  • Legitimate interests — processing necessary for our legitimate business interests, including platform security, fraud prevention, and service improvement, where these interests are not overridden by your rights
  • Consent — where you have given us specific consent to process your information for a stated purpose, such as receiving marketing communications or accessing publishing services through CTRL Music

6. How We Share Your Information

We do not sell your personal information to third parties. We may share your information with the following categories of parties:

6.1 Digital Streaming Platforms (DSPs)

To distribute your music, we share release metadata, artist information, and identifiers with DSPs including Spotify, Apple Music, YouTube Music, TikTok, Amazon Music, Deezer, Tidal, Audiomack, Beatport, and Instagram. This sharing is necessary to fulfil our distribution services.

6.2 Service providers

We engage third-party service providers to support our operations, including technology and infrastructure providers, payment processors and financial institutions for subscription billing and royalty disbursements, identity verification providers, customer support platforms, and analytics providers. These service providers are contractually bound to process your information only as directed by us and in accordance with applicable data protection law.

6.3 Publishing partners

Where you access publishing administration services through our platform, we facilitate your connection to CTRL Music, our publishing administration partner. Your engagement with CTRL Music is subject to their own terms and privacy policy.

6.4 Legal and regulatory bodies

We may disclose personal information to law enforcement agencies, courts, regulators, or other authorities where required by law or legal process.

6.5 Business transfers

In the event of a merger, acquisition, or sale of all or part of our business, personal information may be transferred to the acquiring party, subject to equivalent data protection obligations.

6.6 Audience and fan data

Where our platform is used to reach and communicate with audiences, we may process audience contact and engagement data on behalf of the account holder. Rapture and the account holder share responsibility for ensuring this data is handled in accordance with applicable law. Individuals whose data is processed in this context may request removal at any time by contacting support@rapturemusic.co.

7. International Data Transfers

As a music distribution platform operating globally, we may transfer your personal information to countries outside South Africa, including countries in the European Economic Area (EEA), the United States, and other territories where DSPs and service providers are located.

Where we transfer personal information internationally, we take appropriate steps to ensure that your information receives an adequate level of protection, including through the use of standard contractual clauses or other approved transfer mechanisms where required by applicable law.

8. How Long We Keep Your Information

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

Specific retention periods:

  • Account information — retained for the duration of your account and for a reasonable period thereafter
  • Financial and royalty records — retained for a minimum of 5 years in compliance with South African financial record-keeping requirements
  • Music release data and metadata — retained for the duration of your distribution agreement
  • Support communications — retained for up to 3 years
  • Website usage data — retained for up to 12 months

When personal information is no longer required, we delete or anonymize it in a secure manner.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience, analyze traffic, and support platform functionality.

9.1 Types of cookies we use

  • Essential cookies — required for the website and platform to function. Disabling these may affect your ability to use certain features.
  • Functional cookies — remember your preferences and settings.
  • Analytics cookies — help us understand how visitors use our website so we can improve it.

9.2 Managing cookies

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website and platform. You can also access cookie settings via the cookie settings option on our website.

10. Data Security and Incident Response

In the event that we become aware of a security incident that may affect your personal information, we will take prompt steps to investigate and contain the incident, and will notify you and any relevant authorities where required by applicable law. We will contact you using the email address associated with your account.

11. How We Protect Your Information

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, alteration, or disclosure. These measures include:

  • Encryption of data in transit and at rest
  • Access controls and authentication requirements
  • Regular security reviews and assessments
  • Staff training on data protection and information security

While we take reasonable precautions to protect your information, no method of data transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

12. Children’s Privacy

Our services are not directed at children under the age of 13, and we do not knowingly collect personal information from anyone under 13. Users between the ages of 13 and 17 may use our services only with the verifiable consent of a parent or legal guardian, in accordance with our Terms of Service. Where a minor uses our services under such consent, we collect and process their personal information as described in this Privacy Policy, and the consenting parent or guardian is responsible for that minor’s compliance with our Terms. If you believe that a child under 13 has provided us with personal information, or that a user between 13 and 17 is using our services without the required parental or guardian consent, please contact us at support@rapturemusic.co and we will take steps to investigate and, where appropriate, delete that information.

13. Your Rights

13.1 Rights under POPIA (South African users)

As a data subject under POPIA, you have the following rights:

  • The right to be notified that your personal information is being collected
  • The right to access the personal information we hold about you
  • The right to request correction of inaccurate or incomplete personal information
  • The right to request deletion of personal information we are no longer authorised to retain
  • The right to object to the processing of your personal information
  • The right to submit a complaint to the Information Regulator of South Africa

Contact details for the Information Regulator: www.inforegulator.org.za | inforeg@justice.gov.za

13.2 Rights under GDPR (EEA and UK users)

If you are located in the European Economic Area or United Kingdom, you have the following additional rights under the GDPR:

  • The right of access — to receive a copy of the personal information we hold about you
  • The right to rectification — to request correction of inaccurate personal information
  • The right to erasure — to request deletion of your personal information in certain circumstances
  • The right to restriction of processing — to request that we limit how we use your information
  • The right to data portability — to receive your data in a structured, machine-readable format
  • The right to object — to object to processing based on legitimate interests or for direct marketing purposes
  • The right to withdraw consent — where processing is based on consent, you may withdraw it at any time
  • The right to lodge a complaint with your local supervisory authority

13.3 How to exercise your rights

To exercise any of your rights, please contact us at legal@rapturemusic.co. We will respond to your request within the timeframes required by applicable law. We may need to verify your identity before processing your request.

14. Third-Party Links and Services

Our website and platform may contain links to third-party websites and services, including DSPs, social media platforms, and publishing administration partners. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our platform.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will notify you by posting a notice on our website and, where appropriate, by sending you an email notification.

Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us:

We will endeavour to respond to all privacy-related enquiries within 30 days of receipt.

Rapture Music Group (Pty) Ltd — Privacy Policy — July 2026