Data Privacy & Your Information
What data DIMBER collects, how we use it, and how you stay in control of your personal and professional information.
Transparency is not optional. You trust DIMBER with your music, your money, and your identity. Here is exactly what we collect, why we collect it, and how you stay in control.
What Data We Collect
DIMBER collects the information needed to distribute your music, pay your royalties, verify your identity, and keep your account secure. We collect different kinds of data depending on how you use the platform.
- Account data — name, email, artist name, profile image, and social links
- Identity verification (KYC) — government ID, proof of address, and tax information
- Release data — audio files, metadata, artwork, ISRC codes, and UPC codes
- Financial data — bank account details, tax forms, royalty transactions, and payment history
- Usage data — dashboard activity, feature usage, and login timestamps
- Fan data — if you use smartlinks or pre-saves, DIMBER collects aggregated fan interaction data. We do not collect individual fan personally identifiable information unless you capture it yourself through your own tools.
KYC data is required by law and payment processors. We collect it once during onboarding and store it encrypted.
How We Use Your Data
We use your data to operate your account and deliver the services you signed up for.
- Distribute your music to 150+ DSPs
- Process royalty payments and generate statements
- Verify identity for compliance and fraud prevention
- Provide support and resolve account issues
- Improve platform features and user experience
We do not sell your personal data to third parties. Period.
Data Retention
DIMBER keeps your data for as long as it is needed to operate your account and meet legal obligations. The retention period depends on the type of data and whether your account is still active.
If your account is active, we retain your account, release, financial, and usage data while the account remains open. That allows us to distribute your catalog, track royalties, maintain statements, and support your ongoing use of the platform.
If you close your account, we still retain release data and financial records where law, tax, accounting, or audit requirements apply. In practice, that retention period is typically seven years under EU requirements and many African jurisdiction standards.
KYC documents follow separate regulatory retention rules. If a legal or compliance obligation still applies, we cannot delete those documents on request until the retention period ends.
Your Rights
You stay in control of your personal information. Depending on your location and the laws that apply to your account, you may have the right to:
- Access — request a copy of your data
- Correction — update inaccurate information
- Deletion — request data deletion, subject to legal retention requirements
- Portability — export your release and royalty data
- Withdrawal — revoke consent for non-essential data processing
To exercise any of these rights, submit a request through the dashboard support system or email support@dimber.co. Include Data Rights Request in your subject line. For the fastest route, start with Contact & Support.
GDPR & African Data Protection
DIMBER operates with a global reach and African roots, so our privacy practices are built to meet both international and regional requirements. We comply with GDPR in the EU and recognize African data protection frameworks including the Nigeria Data Protection Act, the Kenya Data Protection Act, South Africa POPIA, and similar regional regulations.
DIMBER operates with a global reach and African roots. We align with both EU and African data protection standards by default.
Cookies & Tracking
DIMBER uses essential cookies in the dashboard for authentication and session management. We do not use third-party advertising trackers on the dashboard.
If you use smartlink or pre-save pages, DIMBER may use anonymized analytics cookies to measure aggregate engagement. Those analytics help you understand campaign performance without building advertising profiles around individual fans.
Request Data Deletion
If you want DIMBER to delete your data, follow this process. We review each request carefully to protect your account and apply the right legal retention rules.
Submit a support ticket
Open a support request and include Data Deletion Request in the subject line. This gives the team the context needed to route your request correctly from the start.
Verify your identity
DIMBER confirms that you are the account holder before processing the request. You may be asked to verify ownership of the email address or provide additional account details.
Specify what to delete
Tell us whether you want full account deletion or deletion of specific data categories. If some data must be retained for legal or financial compliance, we will tell you what can be deleted now and what must remain on file.
We process and confirm
DIMBER completes eligible deletion requests within 30 days and sends confirmation once processing is complete. If your request includes data with mandatory retention rules, the confirmation explains those limits.
Deleting your account does not remove releases already distributed to DSPs. Takedowns are a separate process and may take additional time per platform. See Requesting Takedowns.