Privacy Policy
Last updated: August 21, 2026
Musavise™ ("we", "us", or "our") operates musavise.com (the "Service"). This policy explains what we collect, how we use it, and — just as important — what we will never do with it. The short version: your data exists to power your tools, it stays yours, and we don't sell it.
1. What We Collect
We collect what you give us and a small amount of technical data:
- Account information: name, email address, and a password (stored only as a secure hash). If you sign in with Google (or Spotify, where we offer it), we receive your name, email address, and profile picture from them — nothing else. We also record when you accepted these Terms and which version.
- Career and music data you enter: questionnaire answers, your song catalog and splits, releases, royalty registrations, press kit content, smart links, setlists, stage plots, gig details and finances, merch counts, pitch history, agreements, tours, and tickets. You enter it; we store it so the tools work.
- Audio you record or upload: voice memos and song ideas in the Inspirations tool are stored as files on Cloudflare R2 and, when you ask for a transcript, are transcribed by a speech-to-text model on Cloudflare Workers AI. Storage and transcription are metered per plan.
- Your audience's data, held for you: fan contacts collected through your join page or QR code, guest lists, ticket holder names, and the names of people who e-sign your agreements. We store this on your behalf and show it only to you (and, for signatures, to the other parties of that agreement).
- Signature records: when someone signs a split sheet or agreement, we record their typed name or drawn signature along with the IP address, browser, and the date and time reported by their own device, plus a fingerprint of the exact document text they agreed to. This is what makes an electronic signature hold up if it is ever questioned. It is shown to the parties of that document and to nobody else, and it is kept for as long as the account it belongs to. If that account is deleted, the signature record goes with it — including the signature image and the IP we logged. Signers are not our customers and never held an account here, so once the artist who invited them has gone there is nobody left for us to be holding their data on behalf of. Keep your own copy of anything you have signed: download the PDF, and it is yours regardless of what happens to any account.
- Public page analytics: when someone views your press kit or taps your smart link, we log the visit with coarse detail — date, the platform tapped, country, and the referring site — so we can show you your own numbers. No cookie is set on your visitors for this.
- Payment information: subscriptions and one-time supporter tips are processed by Stripe. Your card number goes to Stripe, never to us — we store a Stripe customer reference, your subscription status, and a record of each tip (amount, date, Stripe's payment id).
- Forms you send us: feedback (with the page it was sent from), support and connection requests, provider and partner applications, contact messages, and launch-list or accelerator-waitlist signups.
- Technical data: a session cookie keeps you signed in; request ids and error logs are kept briefly by Cloudflare for debugging; and IP addresses are used for rate limiting only as salted hashes, so the raw address is never stored. Google Analytics runs only if you allow it (Section 8).
2. How We Use It
- To run the tools: everything you enter exists to power your press kit, links, catalog, gigs, and the rest of the toolkit.
- To show your own analytics back to you: link clicks, press kit views, fan growth, gig finances.
- To generate career guidance and transcripts: your career data is sent to a language model on Cloudflare Workers AI (currently Llama 3.3) to produce your score, roadmap, and advisor answers, and your recordings to a speech model there (currently Whisper) for transcripts. Cloudflare processes these requests for us and does not train models on them; neither do we.
- To build industry insight: your activity contributes to anonymous, aggregated statistics — things like average catalog sizes, link conversion rates, and typical gig fees — that power benchmarks in the product and industry research we may publish or commercialize. These statistics never identify you or your fans.
- To send transactional email: account verification, password resets, email-change confirmation, and agreement signing links (delivered via Resend). Fan broadcasts, when we enable them, go out through the same provider on your behalf with replies addressed to you. We don't send marketing email unless you signed up for it, and every marketing email has an unsubscribe link.
- To improve the product: aggregate usage patterns and the feedback you submit guide what we build.
- To keep the service safe: abuse prevention, rate limiting, a Cloudflare Turnstile bot check on signup, and legal compliance.
3. What We Don't Do
Our practices today, plainly stated (Section 13 explains how we'd tell you before any of this changed):
- We don't sell your personal information — not to advertisers, not to data brokers.
- We don't sell, rent, or share your fan list. Your audience is yours — you can export it any time, and we don't contact your fans for our own purposes.
- We don't share your identifiable career data with anyone unless you ask us to (see provider matching below).
- We don't run any third-party trackers on your public pages — your fans, signers, and ticket holders are never asked about cookies because we set none on them.
- What we do monetize: paid plans, voluntary supporter tips, clearly-labeled sponsored placements, connections you request, and anonymous aggregate insights that identify no one (Section 4).
4. When We Share
- Service providers that run the platform: Cloudflare (hosting, database, file storage, AI models, bot check), Stripe (billing and tips), Resend (email), Google (sign-in, if you use it; and analytics, if you allow it). Each receives only what it needs to do its job.
- Provider matching, only when you ask: if you request a connection through our Get Connected page, we share a summary of your situation with the vetted provider so they can actually help — your plan, handle, Musavise Score, questionnaire answers, and counts like how many songs and releases you have. This never happens without your explicit request.
- Sponsored partners: some recommendations are affiliate links, always labeled "Sponsored." We count clicks (and, if you're signed in, which account clicked, so the numbers can be audited); once you click through, the partner's own privacy policy applies. We don't send them your data.
- Aggregate and de-identified insights: we combine activity across all artists into anonymous statistics — industry benchmarks, trend reports, market data — and may publish, license, or sell those insights. They are built so they cannot identify you or your fans, and we commit to never attempting to re-identify anyone from them.
- Partner offers: we may show partner offers inside the product or send them by email (always with an unsubscribe). If an offer would involve sharing your personal information with the partner, we ask you first.
- What you publish: your press kit, smart links, and any share links you turn on (setlists, stage plots, tickets, signing links) are visible to anyone with the link — that's their purpose. You can unpublish or revoke them at any time.
- Legal requirements: we may disclose information if required by law, regulation, or valid legal process.
- Business transfers: if Musavise is ever acquired or merged, your data may transfer with the service — under this same policy's commitments.
5. Support Access to Your Account
To help with a problem, a Musavise administrator can open your account and see the toolkit exactly as you see it. We do this only for a support or safety reason, the session is marked as an administrator's and expires within an hour, and nothing is changed in your account unless you asked for the change. Administrator accounts are operator-only — they hold no artist data of their own.
6. Other People's Data in Your Account
Fan contacts, guest lists, ticket holders, co-writers, and agreement signers are people who trusted you with their information. We store it for you and keep it out of everyone else's hands, but you are responsible for collecting and using it lawfully — get consent, honor unsubscribe requests, and follow the email and privacy laws that apply to you. Agreement signers: we keep your typed or drawn signature, the time you signed, and a frozen copy of what you signed, so every party has a reliable record for as long as the account exists. Download your copy when you sign — that one is yours to keep.
7. Data Retention, Export, and Deletion
We keep your data while your account is active. You can export your work at any time — your whole account as JSON from Settings, and fan lists, catalog, gig history, and more as CSV from each tool — because portability is the point. You can delete your account yourself from Settings; your personal data, your audio files, and the records held on your behalf are deleted with it, and residual copies in database backups age out within 30 days. Two things remain: anonymous aggregate statistics your activity contributed to (they contain nothing that identifies you), and the record of any supporter tip you made, with the link to your account removed — the money was received and the running total shouldn't quietly change. Questions about deletion: privacy@musavise.com.
9. Your Rights
Depending on where you live, you may have legal rights to access, correct, delete, or receive a copy of your personal information. We honor these requests for everyone regardless of jurisdiction — most of them you can do yourself from Settings (export, correct, delete); for anything else, email privacy@musavise.com. Since we don't sell personal information, there's nothing to opt out of on that front.
10. Security
Passwords are stored only as secure hashes, traffic is encrypted in transit, sessions expire when idle, and the service runs on Cloudflare's infrastructure. No system is perfectly secure, and we can't guarantee absolute security — but we don't cut corners with your data.
11. Children's Privacy
The Service is not directed to individuals under 13 (or 16 in certain jurisdictions), and we do not knowingly collect their information. If you believe we have, contact us and we'll delete it.
12. International Data Transfers
Musavise runs on Cloudflare's global network, and your information may be processed in countries other than your own, including the United States. Wherever it's processed, this policy's commitments apply.
13. Changes to This Policy
If we change this policy, we'll post the update here with a new "Last updated" date. If a change meaningfully reduces your rights or expands what we share, we'll tell you before it takes effect — not after.
14. Contact Us
Questions or concerns about privacy? Contact us at privacy@musavise.com.