Privacy Policy

1.Introduction

This policy explains what data Music Planner collects, why we collect it, how we use it, and the rights you have over it. If anything here is unclear, email us at privacy@musicplanner.com.

2.Information we collect

We collect information you give us directly and a limited amount we receive automatically when you use the service.

• Account details (email, name, password hash)
• Content you upload (audio files, stems, setlists, band-space data)
• Device and log data (browser, IP address, timestamps)
• Billing details, processed by our payment provider (we never store raw card numbers)

3.How we use your information

We use your data to run Music Planner, keep it secure, and communicate with you.

• Provide, maintain, and improve the service
• Process payments and send transactional emails
• Detect abuse and enforce our terms
• Send occasional product updates - you can opt out at any time

4.Audio uploads and stem splitting

When you upload a song, we process it on our servers to generate stems using machine-learning models. Your audio is stored in your band space, is only accessible to members you invite, and is never used to train our models.

5.Cookies and tracking

We use a minimal set of first-party cookies and privacy-respecting analytics. We do not use cross-site advertising trackers.

• Strictly necessary cookies (session, CSRF)
• Preference cookies (theme, language)
• Aggregate analytics - no cross-site tracking

6.Third-party services

We share limited data with trusted providers who help us operate the service. Each is bound by a data processing agreement.

• Stripe - payment processing
• Cloud hosting providers - storage and compute
• Postmark - transactional email
• Plausible - privacy-friendly analytics

7.How we share data

We do not sell your personal data. We share it only with the processors listed above, with other band members you invite into your spaces, or when required by law.

8.Data retention

We keep your account and content while your account is active. After deletion, data is removed within 30 days, except for encrypted backups which expire within 90 days.

9.Security

We encrypt data in transit (TLS) and at rest. Access to production systems is restricted to authorized personnel and audit-logged. No system is perfectly secure - please use a strong, unique password and enable two-factor authentication when available.

10.Your rights

You can exercise the following rights at any time from account settings or by emailing us:

• Access the data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Object to certain kinds of processing

11.Rights for EU/EEA residents (GDPR)

If you are in the European Economic Area or the UK, you have additional rights under the GDPR, including the right to restrict processing and to lodge a complaint with your local supervisory authority (in the EU/EEA, find yours on the EDPB's list; in the UK, the ICO). Our legal bases for processing are contract performance, legitimate interest, and, where required, consent.

12.Children's privacy

Music Planner is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe we have, contact us and we will delete it promptly.

13.Deleting your account

You can permanently delete your account at any time from Settings → Account. Deletion is irreversible and removes your personal data within 30 days. Content you shared into band spaces may persist for other members who still have access.

14.Changes to this policy

We may update this policy from time to time. Material changes will be announced by email or in-app notice at least 14 days before they take effect.

15.Contact

Questions about this policy? Email us at privacy@musicplanner.com. For EU/EEA residents, the same address reaches our data protection contact.