Last updated: April 8, 2026 · CatalogIQ Partners · Incorporated in Delaware · Operating in New York & Massachusetts
This Privacy Policy explains how CatalogIQ Partners ("CatalogIQ", "we", "us") collects, uses, discloses, and protects personal information when you use our Platform. By creating an account, you agree to the practices described here.
1. Information We Collect
You provide: full name, email, phone number, password, royalty CSV files, stream counts, income figures, artist name, genre, and requested financing amounts.
Automatically collected: submission history, login timestamps, session activity, IP address, browser type, and operating system via standard server logs.
2. How We Use Your Information
- Provide catalog valuations, risk assessments, DSCR calculations, and financing term recommendations.
- Identify you as a candidate for royalty-backed loans, RBF, or other financing offered by CatalogIQ or its lending partners.
- Aggregate submission data for internal deal flow analytics and portfolio management.
- Share your profile with vetted lending partners and institutional investors to facilitate financing opportunities for you.
- Improve our valuation models and underwriting engine.
- Comply with legal obligations and enforce our Terms & Conditions.
3. How We Share Your Information
We do not sell your personal data for advertising. We may share with:
- Lending partners & investors — to identify and facilitate catalog financing opportunities.
- Service providers — hosting and database vendors under confidentiality obligations.
- Legal authorities — when required by law or court order.
- Business transfers — in connection with a merger or acquisition.
4. Data Retention
We retain your data while your account is active and for up to 7 years after closure for financial record-keeping and regulatory compliance. You may request deletion at any time (see Section 6).
5. Data Security
We use PBKDF2-SHA256 password hashing (260,000 iterations), 30-day session tokens with server-side invalidation, HTTPS encryption, and access controls. No method of internet transmission is 100% secure.
6. Your Rights
You may request to access, correct, delete, or export your personal data at any time by emailing privacy@ciqpartners.com. Deletion requests are honored within 30 days except where law or active financing agreements require retention.
7. State-Specific Rights
New York (SHIELD Act) — We maintain reasonable administrative, technical, and physical safeguards for NY residents' private information and will notify affected individuals of any breach as required by law.
Massachusetts (201 CMR 17.00) — We maintain a Written Information Security Program (WISP) and verify that third-party service providers handling MA residents' personal information maintain appropriate security measures.
Delaware (DOPPA) — We comply with applicable Delaware online privacy and data protection laws.
California (CCPA/CPRA) — CA residents may request to know, delete, or opt out of any sale of personal information (we do not sell personal information) without discrimination. Contact privacy@ciqpartners.com.
8. Children's Privacy
The Platform is not directed to individuals under 18. We do not knowingly collect data from minors.
9. Changes to This Policy
We may update this Policy periodically. Material changes will be posted with a revised date. Continued use of the Platform constitutes acceptance.
10. Contact
Questions or requests: privacy@ciqpartners.com — subject line "Privacy Request".