Privacy Policy

1. Introduction

This Privacy Policy explains how TP-CAMP (“TP-CAMP,” “we,” “us,” or “our”) collects, uses, stores, processes, shares and protects personal information in connection with TP-CAMP OneSuite and its associated applications, websites, modules, tools, integrations and services (collectively, the “Services”).

TP-CAMP OneSuite is an integrated music-business management ecosystem. The Services may include the primary OneSuite platform together with connected applications and modules for catalogue management, rights and ownership administration, split management, operations and workflow, invoicing, finance, contracts, campaigns, artificial-intelligence-assisted tools and other functionality made available by TP-CAMP.

Connected applications may operate through different web addresses or technical environments while remaining part of the OneSuite ecosystem.

This Privacy Policy applies across those Services unless a particular service expressly provides a different privacy notice.

By using the Services, you acknowledge the information practices described in this Privacy Policy.

2. Information We May Process

The information processed by TP-CAMP depends on the Services you use, the information you choose to provide, your role within a workspace and the functionality enabled for your account.

Information may include the categories described below.

3. Account, Profile and Workspace Information

We may process information used to establish and administer your account, including:

• name;
• email address;
• telephone number;
• business or professional information;
• artist or stage name;
• company, label, publisher, management or organization information;
• account and internal user identifiers;
• workspace or organization identifiers;
• account preferences;
• subscription or entitlement information;
• team memberships;
• user roles;
• application permissions;
• invitation information; and
• account status.

Workspace owners and authorized administrators may be able to invite other users and assign, modify, suspend or remove access according to the permissions available within the Services.

4. Authentication and Cross-Application Access

TP-CAMP OneSuite may provide centralized authentication and access management for connected OneSuite applications.

When you move between authorized OneSuite applications, we may process account identifiers, workspace identifiers, application entitlements, access levels, authentication assertions, session information and other security information necessary to verify your identity and determine whether you are authorized to access the requested application.

Connected applications may maintain their own application databases while associating your records with your OneSuite identity and workspace.

This processing is used to provide secure single sign-on, enforce access permissions and maintain separation between different customer workspaces.

5. Music Catalogue and Rights Information

Users may store and process music-business and rights-management information through the Services.

Depending on the modules used, this information may include:

• musical work and composition information;
• sound recording information;
• release information;
• songwriters and composers;
• publishers;
• performers;
• producers;
• labels;
• managers and representatives;
• contributors and rights holders;
• ownership and split percentages;
• master ownership;
• publishing ownership;
• royalty interests;
• CMO, PRO and neighbouring-rights affiliations;
• IPI/CAE numbers;
• ISNI identifiers;
• ISWC identifiers;
• ISRC identifiers;
• UPC/EAN identifiers;
• catalogue and recording metadata;
• registration status;
• registration references;
• contributor contact information; and
• other repertoire, ownership or rights-administration information.

Some of this information may concern individuals who do not themselves have TP-CAMP OneSuite accounts.

6. Information About Other People Provided by Users

Users may enter information concerning other people, including artists, songwriters, composers, performers, producers, publishers, managers, employees, contractors, customers, suppliers and other contributors or rights holders.

Where you submit another person's personal information through the Services, you are responsible for ensuring that you have an appropriate lawful basis, permission, authorization, contractual right or other legitimate authority to provide and process that information.

The existence of a field within OneSuite for recording particular information does not establish that a user has legal authority to submit that information.

TP-CAMP may process this information to provide the functionality requested by the account holder.

7. Ownership, Splits and Cross-Application Synchronization

OneSuite applications may securely exchange information so that authorized users can maintain consistent business and rights records across connected modules.

For example, catalogue information may be transferred to a split-management application, while validated ownership or split information may be reflected back into catalogue records.

Information exchanged between applications may include contributor names, roles, ownership percentages, identifiers, recording or work information, revision information, validation status and related metadata.

Connected applications may also exchange operational or financial information where necessary to provide integrated OneSuite functionality.

These exchanges are performed within the OneSuite ecosystem to provide the Services and are subject to applicable workspace, authentication and access controls.

8. Business, Invoice and Financial Information

Users may enter or generate business and financial information through the Services, including:

• customer and supplier information;
• quotations;
• invoices;
• receipts;
• payment records;
• payment vouchers;
• expenses;
• revenue;
• budgets;
• forecasts;
• royalty information;
• accounting entries;
• bookkeeping information;
• campaign expenditure;
• recoupment information;
• financial reports; and
• other business records.

Access to such information may depend on the user's workspace role and permissions.

9. Projects, Campaigns, Contracts and Documents

The Services may process information relating to projects, campaigns, tasks, deadlines, team assignments, approvals, workflows, contracts, split sheets, uploaded files, generated documents, notes, operational records and supporting documentation.

OneSuite may also provide document-acceptance or electronic-signature functionality now or in the future.

Where such functionality is enabled, information may be processed to create an appropriate record or audit trail, including signer information, timestamps, document status, acceptance information and related technical records.

Where a third-party electronic-signature provider is introduced, information transmitted to that provider may also be governed by its privacy practices.

10. Artificial Intelligence Features and OpenAI

Certain OneSuite features use or may use artificial intelligence to assist users with tasks such as generating, organizing, summarizing, analyzing or interpreting information.

TP-CAMP currently uses technology provided by OpenAI to support certain AI-assisted functionality within OneSuite.

When you intentionally use an AI-assisted feature, information submitted to that feature may be transmitted to and processed by OpenAI or another AI technology provider used by TP-CAMP to generate the requested response and operate the feature.

Depending on the feature, submitted information may include prompts, instructions and relevant business information or records selected or supplied for processing.

TP-CAMP seeks to limit AI processing to information reasonably necessary to provide the requested functionality.

Users should not intentionally submit unnecessary sensitive personal information, confidential third-party information or information they are not authorized to process through an AI feature.

AI-generated results may contain errors, omissions or inaccurate information. Users should review outputs before relying upon them for legal, financial, accounting, contractual, rights-management, registration or other significant business decisions.

The handling of information by an external AI provider may also be subject to the contractual and privacy arrangements applicable to the service used by TP-CAMP.

11. Customer Relationship Management and HubSpot

TP-CAMP uses HubSpot as part of its customer relationship management and customer-communications activities.

Information processed through customer relationship management systems may include:

• name;
• email address;
• telephone number;
• company or organization;
• account information;
• demo information;
• trial information;
• subscription or customer status;
• onboarding information;
• customer lifecycle information;
• support or sales communications;
• relevant account activity; and
• email engagement information where available.

TP-CAMP may use this information to manage enquiries, demonstrations, trials, onboarding, customer relationships, support, subscription communications, renewal communications, product announcements, customer education and other legitimate business communications.

Information processed through HubSpot is also subject to the privacy and security practices applicable to HubSpot's services.

Where applicable law requires consent for particular marketing communications, TP-CAMP will seek appropriate permission.

Recipients may unsubscribe from eligible promotional email communications using the method provided in those communications.

12. Support, Feedback and Correspondence

We may process information contained in customer-support requests, feedback submissions, bug reports, enquiries, demonstrations, onboarding communications, account communications and other correspondence with TP-CAMP.

We may retain relevant correspondence to provide support, maintain business records, resolve disputes and improve the Services.

13. Technical, Security and Usage Information

TP-CAMP and its technology providers may automatically process technical information associated with use of the Services.

This may include:

• IP address;
• browser type;
• device information;
• operating system;
• login timestamps;
• authentication events;
• session information;
• security events;
• application errors;
• pages or features accessed;
• integration events;
• request timestamps;
• application identifiers;
• diagnostic information; and
• basic usage or performance information.

This information may be used for authentication, security, fraud prevention, troubleshooting, system monitoring, performance improvement and protection of the Services.

14. Payment Processing and PayPal

TP-CAMP may use third-party payment providers to process purchases.

PayPal is one payment provider used or supported by TP-CAMP for OneSuite transactions.

When payment credentials are entered directly into PayPal or another authorized payment provider's systems, the payment provider processes those credentials according to its own terms and privacy practices.

TP-CAMP may receive and retain information necessary to administer and verify a transaction, including:

• purchaser or account information;
• transaction identifier;
• purchase reference;
• amount;
• currency;
• payment status;
• payment date;
• selected plan, add-on or service;
• billing status;
• processor response information; and
• limited payment-method information made available by the payment provider.

TP-CAMP does not require access to customers' complete payment-card credentials merely to verify a payment processed by an external payment provider.

15. How We Use Information

TP-CAMP may process information where reasonably necessary to:

• create and maintain accounts;
• authenticate users;
• operate workspaces;
• manage team access and permissions;
• provide access to authorized OneSuite applications;
• operate catalogue, rights, splits, operations, invoice, finance and other functionality;
• synchronize authorized information between connected applications;
• provide AI-assisted functionality requested by users;
• generate documents and business records;
• administer subscriptions, trials and entitlements;
• process and reconcile payments;
• provide demonstrations and onboarding;
• manage customer relationships;
• provide technical and customer support;
• communicate service and account information;
• send eligible product or marketing communications;
• protect accounts and Services;
• detect fraud, abuse or unauthorized activity;
• investigate errors and security incidents;
• improve platform functionality and reliability;
• maintain appropriate business and accounting records;
• establish, exercise or defend legal rights;
• enforce applicable agreements;
• respond to lawful requests; and
• comply with applicable legal obligations.

16. How Information May Be Shared

TP-CAMP does not make customer information publicly available merely because it has been entered into OneSuite.

Information may, however, be disclosed or made available where reasonably necessary:

Within your workspace: to users authorized by the workspace owner or administrator according to their assigned permissions.

Between OneSuite applications: where necessary to provide connected functionality requested or enabled for the workspace.

To technology and service providers: including providers assisting TP-CAMP with hosting, databases, authentication, communications, CRM, payment processing, artificial intelligence, security, analytics, support, storage and related technical infrastructure.

At your direction: where you intentionally export, submit, transmit or otherwise direct information to another person, organization or service.

For legal or security purposes: where disclosure is reasonably necessary to comply with applicable law or lawful process, enforce agreements, investigate suspected fraud or abuse, protect the Services, or protect the rights and safety of TP-CAMP, users or others.

Business transactions: where information forms part of a legitimate merger, acquisition, financing, restructuring, sale or transfer of all or part of the business, subject to appropriate safeguards.

17. Third-Party Integrations and Music-Industry Submissions

OneSuite may provide integrations, links, exports or workflows involving external platforms and organizations.

These may include payment providers, CRM systems, artificial-intelligence providers, music-industry organizations, collective management organizations, performing-rights organizations, neighbouring-rights organizations, registration services, distribution services and other external platforms.

Where OneSuite provides functionality that allows or assists a user in preparing information for registration, submission or transmission to an external organization, the user remains responsible for reviewing and authorizing the information before submission unless the applicable service expressly provides otherwise.

Where a user directs or authorizes OneSuite or TP-CAMP to transmit information to an external organization, the information may become subject to that organization's own terms, privacy practices, procedures and retention requirements.

The availability of a data field, export, registration workflow or integration does not mean that TP-CAMP represents or warrants that a third-party organization has accepted, approved or legally validated the underlying information.

TP-CAMP is not responsible for the independent privacy practices of third-party organizations.

18. Service Providers

TP-CAMP relies on selected third-party technology providers to operate portions of the Services.

Current or applicable providers may include:

• OpenAI — artificial-intelligence functionality;
• HubSpot — customer relationship management and communications;
• PayPal — payment processing; and
• hosting, database, authentication, email, security, storage, monitoring and other technical infrastructure providers used to operate OneSuite.

The particular providers used by TP-CAMP may change as the Services evolve.

Where appropriate, TP-CAMP seeks to select providers and arrangements suitable for the nature of the information being processed.

19. Sale of Personal Information

TP-CAMP does not sell users' personal information to third parties for their independent advertising purposes as part of the OneSuite business model.

If this practice changes materially, this Privacy Policy will be updated as appropriate.

20. International Processing

Some technology providers supporting TP-CAMP, including providers of cloud, CRM, payment or artificial-intelligence services, may operate infrastructure or personnel outside Trinidad and Tobago.

As a result, information may be transmitted, processed or stored in another jurisdiction.

Where appropriate, TP-CAMP seeks to use reasonable contractual, organizational and technical measures when engaging service providers that process information internationally.

21. Data Retention

TP-CAMP may retain information for as long as reasonably necessary for the purposes for which it was collected or processed, including to:

• provide the Services;
• maintain active accounts and workspaces;
• preserve catalogue and rights records;
• meet contractual obligations;
• maintain financial and accounting records;
• administer subscriptions and payments;
• maintain security and audit records;
• prevent fraud and abuse;
• resolve disputes;
• enforce agreements;
• comply with applicable legal requirements; and
• maintain reasonable backup and disaster-recovery systems.

Different categories of information may therefore have different retention periods.

Expiry or cancellation of a OneSuite subscription does not necessarily result in immediate deletion of the customer's underlying business records.

22. Account Closure and Deletion

Users may request account closure or deletion through the account or support processes made available by TP-CAMP.

Workspace-level data may belong to or be controlled by the organization or account holder rather than an individual team member. Removal of an individual team member therefore does not necessarily require deletion of business records that form part of the organization's workspace.

Closing an account does not necessarily result in immediate deletion of every record.

TP-CAMP may retain information where reasonably required for legal compliance, accounting, payment reconciliation, fraud prevention, security, dispute resolution, enforcement, legitimate business records, rights-administration records, backups or other lawful purposes.

Where information is no longer reasonably required, TP-CAMP may delete or anonymize it in accordance with applicable requirements and operational processes.

23. Security

TP-CAMP seeks to use reasonable administrative, organizational and technical safeguards appropriate to the nature of the information processed.

Measures may include authentication controls, workspace isolation, role-based permissions, server-side authorization, database protections, secure application communications, integration authentication, logging, duplicate-event protection, session management and other safeguards.

No online service, database, transmission method or security system can guarantee absolute security.

Users are responsible for protecting their credentials, maintaining appropriate team permissions and promptly notifying TP-CAMP of suspected unauthorized access.

24. Cookies, Sessions and Similar Technologies

TP-CAMP and its technology providers may use cookies, browser storage, session technologies and similar mechanisms where necessary to:

• authenticate users;
• maintain login sessions;
• support single sign-on;
• protect accounts;
• remember preferences;
• provide application functionality;
• maintain security; and
• support analytics or performance monitoring where implemented.

Additional information may be provided through a separate Cookie Policy where appropriate.

25. Your Privacy Rights and Requests

Depending on applicable law and the circumstances, individuals may have rights concerning their personal information.

These may include rights to request access to, correction of or deletion of certain personal information, or to make another privacy-related request available under applicable law.

Requests may be subject to reasonable identity verification and lawful limitations or exceptions.

Where information is held within a customer organization's workspace, TP-CAMP may need to consider the rights and responsibilities of the relevant workspace owner or organization when responding to a request.

Privacy requests may be submitted using the official contact or support method provided by TP-CAMP.

26. Children's Privacy

TP-CAMP OneSuite is primarily intended as a professional and business platform for the music and creative industries.

The Services are not intended for children under 18 to independently establish or administer business accounts without appropriate legal authorization.

Music-business records may legitimately contain information about a minor artist, performer, songwriter or other contributor.

Where a user submits information concerning a minor, the responsible account holder must ensure that appropriate parental, guardian, contractual or other lawful authority exists where required.

27. Trinidad and Tobago and Applicable Privacy Requirements

TP-CAMP operates within the Trinidad and Tobago business environment.

The Data Protection Act, Chap. 22:04 forms part of the privacy and data-protection framework of Trinidad and Tobago. Certain provisions of that legislation have been proclaimed into operation while other provisions have not been fully brought into force.

TP-CAMP seeks to handle personal information consistently with privacy and data-protection requirements applicable to its operations and with reasonable privacy and information-security practices.

Where users, processing activities or services are subject to additional mandatory requirements in another jurisdiction, those requirements may also apply.

Nothing in this Privacy Policy is intended to exclude or restrict a privacy right that cannot lawfully be excluded or restricted.

28. Changes to the Services

OneSuite is an evolving software platform.

TP-CAMP may introduce, modify, replace or discontinue applications, integrations, providers or features over time.

Where a change materially affects how personal information is processed, TP-CAMP may update this Privacy Policy and, where appropriate, provide additional notice.

29. Changes to This Privacy Policy

TP-CAMP may update this Privacy Policy to reflect changes in the Services, technologies, integrations, business practices, providers or applicable legal requirements.

The latest version will display its effective or last-updated date.

Material changes may be communicated through the OneSuite website, account interface, email or another appropriate method.

30. Contact

Questions, privacy requests or concerns concerning this Privacy Policy or TP-CAMP OneSuite's handling of personal information may be submitted through the official TP-CAMP OneSuite contact or support channels.

The current Privacy Policy will be made available through the TP-CAMP OneSuite website.