Privacy policy

If you use this website or any other digital resource provided by SONOR Capital SA, including social media profiles such as LinkedIn and WhatsApp, your personal data is processed in accordance with the revised Swiss Federal Act on Data Protection (revFADP), the EU General Data Protection Regulation (GDPR) where it applies, and, where applicable, the California Consumer Privacy Act (CCPA).

Use of AI applications

If you access our proprietary or third-party business applications, a customised Data Processing Agreement (DPA) is available, including the list of subprocessors involved in delivering the service.

Types of data collected

We collect and process personal data to respond to your requests and improve your experience. This includes:

• Your language preference, stored in your browser so the site opens in the language you chose. We do not use a cookie for this.
• Data you submit through our forms, social media or messaging channels, such as: first and last name; email address; phone number; country; organisation; investor type and indicative ticket size; the content of your message; IP address or messaging ID (for example WhatsApp or social media).

We use this data mainly to answer your request and, where relevant, to keep you informed about the offering you asked about. We never opt you in automatically.

WhatsApp and other touchpoints

If you contact us on WhatsApp, we may see your public WhatsApp profile information. WhatsApp Business data is processed under this policy. You can opt out at any time through the app or by blocking our business account. If messages are sent or forwarded to third-party WhatsApp accounts, please read those parties' privacy practices.

Website usage data and cookies

This website does not use advertising or analytics cookies. To deliver and protect the site, our hosting provider automatically processes technical data such as:

• IP address, including approximate location and preferred language
• Device type, browser and operating system
• Referring website addresses and domains
• Unique resource identifiers (URIs)
• Pages visited, access times and server logs

Marketing communications

We work with partner communities that may share your personal data with us for information or marketing purposes. You can unsubscribe at any time through the messages you receive.

Recordings and video contributions

Some events may be recorded and shared publicly. You will be told in advance and can choose not to take part if you do not want to be recorded.

Use of collected data

We use the information we collect to:

• Answer your requests and deliver our services
• Improve your experience across our digital touchpoints

Privacy by default

• Transparency. You can give or withdraw your consent at any time. Some services cannot be delivered without it.
• Data minimisation. We collect and process only the data each interaction needs.
• Retention. We keep personal data only as long as needed for the purposes stated. Data with no business purpose, such as applications from candidates not selected, is deleted promptly. Other data may be kept for the processor's default retention period, usually 12 months, or longer where the law requires it.

Your rights (revFADP, GDPR, CCPA)

Depending on where you live, you can at any time exercise the right:

• To access your personal data
• To have your data deleted
• To opt out of communications
• To restrict or object to processing
• To data portability (revFADP and GDPR)

Under the CCPA, California residents also have the right:

• To know what personal data we collect, use, share and sell
• To request deletion of personal information
• To opt out of the sale of personal information. We do not sell personal information.
• Not to be discriminated against for exercising these rights

To exercise any of these rights, write to apply@sonorcapital.com.

Data controller

SONOR Capital SA
Via M. Magatti 1
6900 Lugano, Switzerland
Business Register No. Canton Ticino: CHE-320.225.940
Email: apply@sonorcapital.com

Categories of data subjects

The people whose personal data we mainly process are:

• Investors and prospective investors, such as family offices, private credit funds and qualified investors
• Artists, labels, managers and scouts
• Employees, contractors, suppliers and professionals
• Job applicants

And anyone who regularly interacts with us in the course of our core business: music royalty advances and investor relations.

Security measures

We protect your data through:

• Encryption in transit and SSL certificates
• Authentication-based access monitoring
• Access limited to people bound by strict confidentiality
• Strong authentication and continuous monitoring of third-party services
• Regular reviews of how we handle and store data

Data sharing and subprocessors

Your personal data may be shared with third-party providers acting as data processors under contract. In some cases your data may be transferred outside Switzerland and the EU. Such transfers rely on:

• Standard Contractual Clauses under EU Commission Implementing Decision (EU) 2021/914, as recognised in Switzerland
• Adequacy decisions or other lawful mechanisms under applicable data protection law

For more on subprocessors or transfer safeguards, write to apply@sonorcapital.com.

For https://sonorcapital.com

Subprocessor	Purpose	Services used	Location	Safeguard
Cloudflare, Inc.	Website hosting and security	Hosting, content delivery, protection against attacks	USA / global	GDPR, Standard Contractual Clauses
Framer B.V.	Website builder	Website design, management and hosting	Netherlands (EU)	GDPR
Brevo (Sendinblue SAS)	Forms and email	Contact form leads, contact list and confirmation emails	France (EU)	GDPR
Webflow, Inc.	Website hosting	Website management and hosting	USA	GDPR, Standard Contractual Clauses
Cal.com	Booking and scheduling	Meeting booking	USA	GDPR
Google Workspace, Google Cloud Platform, Google Analytics 4	Office automation and business apps	Email, calendars, document storage, site visitor statistics	Various, EU	GDPR
LinkedIn Sales Navigator	Outreach	List sourcing	USA	GDPR
Notion Labs, Inc.	Workspaces and project management	Workspace, notes, storage and project management	USA	GDPR
Fathom	Call recording and document generation	Call and meeting recording, analysis and document generation	USA	GDPR
Clay Labs, Inc.	Data enrichment	List sourcing, data cleansing and management	USA	GDPR
Kit.com	Marketing automation	Newsletter and subscriber management	USA	GDPR
LeadMagic, Inc.	Email finder	Work email sourcing	USA	GDPR
OpenAI, LLC	Generative AI	Search, generate and manage content and insights	USA	GDPR
Anthropic PBC, Anthropic Ireland	Generative AI	Search, generate and manage content and insights	USA, Ireland	GDPR
Zoom Video Communications, Inc.	Videoconferencing	Remote meetings	USA	GDPR
YouTube	Video storage and player	Video content	USA	GDPR

Access to third-party resources

You may be given access to content or services provided by third parties. SONOR Capital SA does not control these resources and accepts no responsibility for their content, availability or compliance. Their use is governed by the terms of their owners or licensors.

Policy updates

We review and update this privacy policy regularly. Please check this page from time to time to see how we protect your personal data and any changes made under applicable law and business practice.

Last update: 11/11/2026