PRIVACY POLICY

NOVA ARTIST SERVICES AGENCY LLC

Effective Date: January 1, 2026 Last Updated: August 5, 2026

Please read the following Privacy Policy carefully before using the Nova website and services. This Privacy Policy explains how Nova Artist Services Agency LLC, a New Jersey limited liability company ("Nova," "we," "us," or "our"), collects, uses, shares, and protects information about users ("you") of the Nova website, dashboard, applications, and related services (the "Services").

By accessing the Services and/or creating an account, you agree and consent to the terms and practices described in this Privacy Policy, as amended from time to time. This Privacy Policy describes how we collect, use, disclose, and otherwise process your information. By using the Services, you acknowledge that you have read this Privacy Policy.

If you do not agree to this Privacy Policy, please do not access or use the Services. Should you have any questions, please contact support@novadistro.io.

1. Information We Collect

We collect your personal information, personal data and other information

("Information") in three ways: (i) information that you provide; (ii) information that is automatically collected; and (iii) information from third-party sources. Your provision of personal information is voluntary; however, certain Information is required to use the Services.We collect only the categories of personal information reasonably necessary to provide the Services, comply with legal obligations, protect our legitimate business interests, or as otherwise permitted by applicable law.

Categories of Information we may collect include:

Identity and Contact Data: Name, artist or band name, email address, phone number, mailing address, date of birth, and tax identifiers.Taxpayer Identification Numbers (including Social Security Numbers, Employer Identification Numbers, or other government-issued tax identification numbers), where required for tax reporting or payment processing.

Account and Profile Data: Username, password, release and catalog information, credits, metadata, preferences, accounting statements, and other reports.

Financial and Transaction Data: Payment details, payout history, earnings records, and related financial information.

Banking and Payment Data: If you elect to connect your bank account through one of our third-party financial service providers, we may receive account identifiers, transaction information, balances, and payment status information necessary to facilitate payouts, verify transactions, detect fraud, or provide requested financial services. We do not receive online banking usernames or passwords.

Streaming and Performance Data: Streams, plays, listener counts, playlist placements, aggregated audience analytics, including stream counts, listener demographics, geographic regions, playlist placements, and engagement metrics provided by digital service providers. .

Social Media Data: If you choose to connect a third-party social media account, we may receive the information that you authorize the applicable platform to share, which may include your username, profile information, follower counts, engagement metrics, and other information permitted by that platform .

Technical and Usage Data: IP address, device and browser information, operating system, login data, cookies, location data, and how you interact with the Services.

Marketing and Communications Data: Your preferences regarding marketing communications from us.

1.1 Information You Provide

To register for an account and use the Services, you may provide your name, artist name, email address, mailing address, telephone number, payment and tax information, release and catalog details, biographical information, and similar information. If you log in through or connect a social media or digital platform account, you authorize us to access the information and content you have made available there, and you represent that such access does not violate that platform's terms.

1.2 Information We Collect Automatically

We may automatically receive, collect, and record information such as: (i) actions and searches you perform while using the Services; (ii) Internet Protocol addresses; (iii) operating systems; (iv) the time, frequency, and duration of your use of the Services; and (v) analytics thereof.

Cookies and Similar Technologies: We use essential cookies necessary for operation of the Services, functional cookies to remember your preferences, analytics cookies to understand how users interact with the Services, and, where applicable, advertising cookies. Where required by law, we will obtain your consent before placing non-essential cookies .

Clickstream Data: We may collect clickstream data, including the type of device and browsing software you use and the address of the website from which you linked to the Services. This information is used in aggregate form to improve the Services.

Location Data: The Services may collect approximate geographic location derived from your IP address or, where you expressly authorize, precise location information from your device , where permitted by law.

1.3 Information From Third-Party Sources

Banking and Payment Partners: If you use optional banking or payment features, our partners may provide us with account and transaction data necessary to operate those features and the Services.

Streaming and Analytics Sources: We receive streaming counts, playlist data, audience demographics, and performance metrics from digital service providers and analytics sources.

Social Networks and Digital Platforms: We may collect information related to your identity, follower counts, and engagement from social networks and digital platforms you connect, to verify information and provide insights. Your interactions with third-party platforms are governed by their own privacy policies and terms.

2. How We Use Your Information

We use Information held about you to perform the Services and for other purposes, including:

To identify you when you use the Services;
To provide, operate, improve, and optimize the Services;
To customize the Services and provide insights, analytics, and recommendations;
To perform under contracts we have entered into with you;
To calculate earnings, process payments, and administer financial features;
To operate optional banking, payment, and rewards features;
To detect and prevent fraud, manipulation, and abuse, and to enforce our Terms;
To communicate with you, including sending technical messages, security alerts, updates, and (where you have opted in) marketing communications;
To provide technical support; and
To comply with legal or regulatory obligations.

We may share or disclose Information with certain third parties as described in Section 3 below.

3. How We Share Your Information

We do not sell your personal information.

We do not sell your personal information or share it for cross-context behavioral advertising as those terms are defined under applicable privacy laws. We share Information only as needed to operate the Services and in the following limited circumstances:

Service Providers and Processors: With vendors who process data on our behalf and under contract, such as distribution partners, technology providers, banking and payment partners, cloud hosting, payment processors, analytics providers, and customer support. They may use Information only to provide services to Nova, not for their own independent purposes.

To Deliver Your Content and Process Payments: With digital service providers, stores, streaming platforms, and rights and royalty administrators as necessary to distribute your content, report performance, and collect and pay revenue.

Affiliated Companies: With our affiliates, subsidiaries, officers, employees, contractors, partners, and licensees as required to operate the Services.

Legal and Safety: With authorities, regulators, or others when required by law, subpoena, or legal process, or to investigate fraud, protect rights and safety, or enforce our agreements.

Corporate Transactions: In connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy continuing to govern your Information.

Copyright and IP Claims: If you are involved in a copyright claim or dispute, we may share your contact information with the claimant as described in our Terms & Conditions. We may disclose information reasonably necessary to investigate, defend, resolve, or comply with legal obligations relating to intellectual property disputes.

With Your Direction or Consent: When you ask us to share Information or otherwise consent.

Aggregated or De-Identified Information: Information that cannot reasonably identify you may be used and shared for research, benchmarking, and product improvement.

4. Third-Party Links and Social Networking Services

The Services may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

The Services may integrate with various social networking and digital platform services. We do not control such services and are not liable for the manner in which they operate. Information you voluntarily include and transmit online in a publicly accessible manner may be viewed and used by others.

5. Access, Update, and Correction of Information

You may, at any time, request: (i) confirmation of processing by Nova; (ii) access to your data; (iii) correction of inaccurate data; (iv) anonymization, blocking, or deletion of unnecessary data or data processed in non-compliance with applicable law; and (v) data portability to another provider where technically feasible.

By requesting any such action, you acknowledge that: (a) we may retain some data that is necessary for our internal use, accounting, or compliance with laws; and (b) the Services or any agreement you hold with us may become unfeasible depending on the level of deletion, anonymization, blocking, or portability you request.

To make any of these requests, please contact support@novadistro.io.

6. Data Security

We have put in place appropriate security measures to prevent Information from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. However, due to the inherent open nature of the Internet, we cannot ensure or warrant absolute security. No method of electronic transmission or storage is completely secure. We have procedures to deal with any suspected data breach and will notify you and any applicable regulator of a breach where legally required.

7. Data Retention

We will retain your Information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, tax, accounting, royalty, and reporting requirements. To determine appropriate retention periods, we consider the amount, nature, and sensitivity of the Information, the purposes for which we process it, and applicable legal requirements. In some circumstances, we may anonymize Information so that it can no longer be associated with you, in which case we may use and retain it indefinitely.

8. Communications and Marketing

You may choose to opt out or unsubscribe from marketing emails by following the instructions contained in such emails or by contacting support@novadistro.io. You may not unsubscribe from emails regarding your account, transactions, changes to this Privacy Policy, or similar service-related correspondence.

You may revoke the authorization granted herein on a prospective basis by contacting us and ceasing all use of the Services; however, we may continue to use Information received prior to such revocation or as needed for our legitimate business purposes, to perform under any contract with you, or for any other lawful purpose. You may withdraw your consent to receive marketing communications at any time.

9. Children's Privacy

The Services are not intended for children under the age of 13, and we do not knowingly collect their personal information. Users between 13 and 18 may use the Services only with verifiable parental or guardian consent. If we become aware that a minor has provided Information without proper consent, we will take appropriate action to remove such Information and limit the minor's access to the Services. If you believe a minor has provided us Information without proper consent, please contact support@novadistro.io.

10. Additional Disclosures for EU/UK Residents

If you are situated in the European Economic Area or the United Kingdom, the following additional disclosures apply:

10.1 Data Controller

Nova Artist Services Agency LLC acts as the data controller of your Information submitted through the Services. You may lodge a complaint with your local supervisory authority, though we encourage you to contact us first.

10.2 Legal Basis for Processing

We process your personal data on the following legal bases:

Performance of Contract: Processing your data as necessary to perform our obligations under any contract with you, including providing the Services.

Legitimate Interest: Processing necessary for our legitimate interests in operating, securing, and improving the Services and preventing fraud, balanced against your rights.

Consent: Processing based on your consent, such as for certain marketing communications or connecting social media accounts.

Legal Obligation: Processing necessary for compliance with a legal or regulatory obligation.

10.3 Your Rights

Under applicable data protection laws, you have the right to:

Request access to your personal data;
Request correction of your personal data;
Request erasure of your personal data;
Object to processing of your personal data;
Request restriction of processing;
Request transfer (portability) of your personal data; and
Withdraw consent at any time where we are relying on consent to process your data.

You may exercise these rights by contacting support@novadistro.io. We may need to verify your identity before processing your request. We try to respond to legitimate requests within one month.

10.4 International Data Transfers

Nova is based in the United States, and your Information may be processed in the United States and other countries that may have different data-protection laws than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers.

11. Additional Disclosures for California Residents

If you are a California resident, the California Consumer Privacy Act ("CCPA") and the "Shine the Light" law provide you with specific rights regarding your personal information.

11.1 Your Rights Under CCPA

You have the right to:

Request disclosure of the categories of personal information we collect, the purposes for which we use it, and the categories of third parties with whom we share it;
Request access to the specific personal information we have collected about you;
Request deletion of your personal information;
Opt out of any "sale" of your personal information; and
Not be discriminated against for exercising these rights.

Nova does not sell your personal information. We do not share personal information for cross-context behavioral advertising.

11.2 California "Shine the Light"

California residents have the right to request details regarding how personal information is shared with third parties for direct marketing purposes. Because we do not disclose personal information to third parties for their direct marketing purposes, no such disclosures would be reported.

11.3 How to Exercise Your Rights

To exercise your rights, please contact support@novadistro.io. When submitting your request, you must affirm that you are a California resident or an authorized representative for a California resident.

12. Updates to This Privacy Policy

We reserve the right to change, modify, add, or remove portions of this Privacy Policy at any time. We will post the updated version with a new effective date. If changes are material, we will provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated Privacy Policy.

13. Contact Us

Nova Artist Services Agency LLC

Privacy Requests: support@novadistro.io Legal: legal@novadistro.io Mailing Address: PO Box 299, Alpine NJ 07620

By using the Services, you acknowledge that you have read and understood this Privacy Policy.