Privacy policy
This English version is provided for information only. In case of any discrepancy, the Spanish version prevails.
Data controller
Entumood SL · Tax ID B67893578 · Carrer Tudo 7, bajo, 43540 La Ràpita (Tarragona), Spain · Email: [email protected]
What data we process
- Account data: name or artist name, email and password (encrypted).
- Billing data: what you provide for invoices (address, country, tax ID if applicable).
- Payment data: handled by Stripe. We do not see or store your card details.
- Usage data: downloads, favourites, credits and plays, to provide the service.
- Support messages: what you write to us through the help chat or by email.
- Analytics (only if you accept cookies): pages visited and anonymous browsing recordings, to improve the website and measure ads. More details in the Cookie policy.
What we use it for and legal basis
- Providing the service and managing your subscription (performance of the contract).
- Charging and issuing invoices (legal obligation).
- Sending you emails about your account and subscription: sign-ups, renewals, failed payments, password changes (performance of the contract).
- Answering your enquiries (legitimate interest).
- Sending you catalogue news, only if you agree (consent, which you can withdraw at any time).
- Measuring the use of the website and our ads, only if you accept analytics cookies (consent).
How long we keep it
While you have an account and, afterwards, for the legal periods (for example, 6 years for billing data).
Who we share it with
With providers that help us deliver the service, under a data processing agreement:
- Stripe (payments), and PayPal for older subscriptions
- Railway (servers)
- Cloudflare (storage and network)
- Resend (email delivery)
- Anthropic (Latin Box AI features: the text you write in them)
- Telegram (internal team notifications about sign-ups and orders)
- Google (Analytics), Meta (pixel) and Microsoft (Clarity), only if you accept analytics cookies
Some of these providers may process data outside the European Economic Area, with appropriate safeguards (standard contractual clauses of the European Commission).
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [email protected]. If you believe we have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security
Passwords are stored encrypted, communications use HTTPS and downloads are served through signed temporary links.
Account security data
To protect our catalogue and our customers' accounts, we record the date and time of each login and each download, together with your IP address, your approximate location (country, region and city, provided by our network and security provider, Cloudflare, or obtained from the IP with a database installed on our own servers; never your exact location), the type of device (phone or computer) and the browser and operating system you use.
- Purpose: detecting unauthorised uses of the account (for example, sharing it with other people), preventing fraud and protecting the copyright of the catalogue.
- Legal basis: Latin Box's legitimate interest in protecting its service and catalogue, and performance of the contract, whose terms establish that the account is personal.
- Retention period: 90 days. After that period, this data is deleted automatically.
- Recipients: only the authorised Latin Box team. Cloudflare acts as data processor. It is not disclosed to third parties.
- Decisions: at the third account-sharing warning within 90 days, the account is blocked automatically as a precaution (see "Account security and usage limits" in the Terms). A member of our team always reviews that block before any final decision (such as closing the account), and you can ask us to review it, explain your case and challenge it by writing to us. Apart from that case, we do not make automated decisions.
You can exercise your rights over this data as explained in "Your rights".
Newsletter and promo packs
If you sign up for the Latin Box newsletter (by ticking the box on a promo pack, on the newsletter page or in My account), we will process your email to send you catalogue news, free music packs and Latin Box offers by email, at most one email a week.
- Controller: Entumood SL (details at the beginning of this policy).
- Legal basis: your consent (art. 6.1.a GDPR and art. 21 of Spanish Law 34/2002, LSSI). It is independent of accepting the terms: you can have an account and a plan without being subscribed.
- Double opt-in: after you sign up we send you an email to confirm the address is yours; until you confirm it, we send you nothing.
- Free promo packs: promo packs can be downloaded for free in exchange for being subscribed to the newsletter (with a Latin Box account, which is free). We tell you this clearly before you sign up. The rest of the catalogue, the plans and the tools do not depend on the newsletter.
- What we keep as proof of your consent: your email, the date and time you signed up and confirmed, the exact text you accepted and its version, the page you signed up from, the IP address and the browser.
- Retention period: while you remain subscribed. If you unsubscribe, we stop sending you the newsletter immediately and keep only the proof of sign-up and unsubscription for 3 years to be able to show we acted lawfully; after that it is deleted.
- Recipients: Resend (email delivery provider, under a data processing agreement). We do not share your email with third parties.
- Unsubscribing: at any time and free of charge, with the "Unsubscribe" link at the bottom of each email, from My account or by writing to [email protected]. Unsubscribing does not affect your account or what you have already downloaded.
- Your rights: those in "Your rights" (access, rectification, erasure, objection, restriction and portability) and filing a complaint with the AEPD (www.aepd.es).
Log of pages visited
While this tool is switched on, we record which Latin Box pages you visit and when you enter and leave them.
- What we keep: the date and time, the page and, if you are logged in, your customer number and your name. If you browse without an account, only a random tab code that does not identify you. We do not store your IP address or browser in this log.
- Approximate location: while you are online, the security team can see the approximate city you are browsing from (as indicated by Cloudflare from your IP), to detect shared accounts. It is not stored in the log and disappears in less than an hour.
- Purpose: the security of accounts and the catalogue, and the quality of the service (finding bugs and parts of the website that are hard to use).
- Legal basis: Latin Box's legitimate interest in protecting and improving its service.
- Retention period: 12 months at most; after that it is deleted.
- Recipients: only the authorised Latin Box team. It is stored on Cloudflare (storage), under a data processing agreement. It is not disclosed to third parties.
You can object and exercise your other rights as explained in "Your rights".