Privacy Policy

Last updated: 14 August 2026

This Privacy Policy explains how personal data is handled when you visit ikson.com, create or use an account, contact Ikson, or purchase or manage a subscription or license.

1. Who is responsible for your personal data

Ikson Music Publishing AB is the data controller for personal data processed through ikson.com.

For questions about privacy or to exercise your data-protection rights, please contact:

contact@ikson.com

2. Personal data we process

The personal data processed depends on how you use ikson.com.

When you create or use an account, we may process information such as your name, email address, country, postcode, account status and authentication or security information, including password hashes, activation information and two-factor authentication settings.

Legacy account records may also contain information previously provided for business, VAT, tax or social-login purposes.

When you purchase or manage a subscription or license, we may process billing information such as your country and postcode, subscription and order information, payment status and references received from payment providers.

We do not store your full payment-card details.

When you contact Ikson through the website, we process the name, email address, selected subject and message you provide in order to deliver and respond to your message.

For security and operation of the website, technical information such as IP addresses, timestamps, URLs, login attempts and other account or authentication events may also be processed or recorded.

Authenticated Music Library downloads may be associated with your account and the downloaded track. Anonymous downloads are not stored as user-linked download records, although aggregate download counts may be recorded.

3. Why we process personal data

We process personal data where necessary to operate ikson.com and provide its services.

This includes:

• providing and administering accounts;
• providing subscriptions, licenses and purchases;
• processing and maintaining transaction and billing records;
• sending account activation, password reset, purchase and other service-related communications;
• responding to messages and providing support;
• preventing abuse, fraud and unauthorised access;
• maintaining the security and operation of ikson.com;
• understanding general website usage and performance;
• and complying with applicable accounting, tax and other legal obligations.

Depending on the processing involved, we generally rely on the following legal bases:

Performance of a contract — where processing is necessary to provide an account, subscription, license, purchase or related service you have requested.

Legal obligation — where information must be retained or processed to comply with accounting, tax or other legal requirements.

Legitimate interests — where processing is necessary to operate and secure ikson.com, prevent fraud or abuse, respond to general enquiries, maintain appropriate records or understand the general performance and use of the website.

Consent — where we specifically ask you to consent to an optional form of processing. Where processing is based on consent, you may withdraw that consent.

4. Payments

New subscription and license payments may be processed by Stripe.

Stripe receives and processes the payment information necessary to complete the transaction. Ikson Music Publishing AB does not store your full payment-card details.

ikson.com may retain information such as order details, payment status and Stripe customer, subscription, invoice or payment references where necessary to administer purchases, subscriptions and financial records.

PayPal remains integrated for certain historical subscriptions and transactions. Information relating to those transactions may continue to be processed and retained where necessary to support existing customer relationships and historical financial records.

5. Email and contact messages

Transactional emails such as account activation, password reset and purchase messages are currently delivered using MailerSend.

Messages submitted through the ikson.com contact form may be processed through MailerSend and delivered to Ikson email accounts hosted through Google Workspace.

Contact-form messages are not stored in a dedicated ikson.com contact-message database. Copies may, however, remain in email systems and associated provider or application logs.

6. Analytics

ikson.com uses Fathom Analytics to understand general website traffic and performance.

Fathom receives the browser and request information necessary to provide its analytics service.

This analytics information is used to understand how ikson.com is being used and how the website can be improved. It is not used by Ikson Music Publishing AB to build advertising profiles of visitors.

7. Security and anti-abuse services

ikson.com uses Google reCAPTCHA on certain forms, including registration and contact forms, to help identify automated abuse.

Security and audit records may also contain IP addresses and information about events such as logins, failed login attempts, account activation and account changes.

These records are used to protect users and accounts, investigate abuse and maintain the security and integrity of the service.

Normal web-server and application logs may also contain technical information such as IP addresses, browser or user-agent information, requested URLs and timestamps.

8. Hosting, storage and other service providers

Ikson Music Publishing AB uses external service providers where necessary to operate ikson.com.

These currently include:

DigitalOcean — website infrastructure and hosting
Amazon Web Services (AWS S3) — music files, artwork, website assets and certain uploaded files
Stripe and PayPal — payment processing
MailerSend and Google Workspace — email and communications
Fathom Analytics — website analytics
Google reCAPTCHA — security and abuse prevention
Adobe Typekit — hosted website typography

These providers may receive technical or personal information where necessary to provide their respective services.

Some service providers may process personal data outside Sweden or the European Economic Area. Where this occurs, the applicable data-protection requirements for international transfers apply.

9. How long personal data is kept

Personal data is retained for different periods depending on why it is processed.

Account information may be retained while an account remains active.

Subscription, payment, order and accounting information may be retained for longer where necessary for financial administration, accounting, tax requirements, dispute handling or other legal obligations.

Security, audit and technical records may be retained where reasonably necessary to protect the website, investigate abuse, prevent fraud or maintain appropriate operational records.

Password-reset links and tokens are intended for short-term use and expire after a limited period.

Information stored by external service providers may also be subject to their respective retention practices and legal obligations.

Personal data should not be retained longer than necessary for the purpose for which it is processed.

10. Account deletion and personal data

You may request deletion of your account or personal data by contacting:

contact@ikson.com

Account deletion may involve deleting or anonymising account information rather than physically removing every historical database record.

Certain records connected to subscriptions, orders, payments, accounting, security, fraud prevention or historical transactions may remain after an account has been closed.

Whether such information can or should be deleted will depend on why it is retained and any applicable legal, accounting, security or other requirements.

Some information may therefore not be capable of immediate deletion even when an account is removed.

11. Your rights

Depending on applicable data-protection law and the circumstances of the processing, you may have the right to:

• request access to personal data held about you;
• request correction of inaccurate personal data;
• request deletion of personal data;
• request restriction of certain processing;
• receive certain personal data in a portable format;
• object to certain processing;
• and withdraw consent where processing is based on your consent.

To exercise these rights, contact contact@ikson.com.

You also have the right to lodge a complaint concerning the processing of your personal data with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

12. Security

Ikson Music Publishing AB uses technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

If a personal-data breach occurs, it will be assessed and handled in accordance with applicable data-protection requirements.

13. Changes to this Privacy Policy

This Privacy Policy may be updated when ikson.com, its services, service providers or applicable requirements change.

The latest version published on ikson.com applies.