Privacy Policy

We collect information you provide and information generated as you use the Service:

• Account data — email, password (stored hashed), and your role (artist, venue, label, etc.).
• Profile data — names, bios, genres, locations, media, links, and rates you add.
• Booking & transaction data — bookings, messages, contracts, and payment records (amounts, status, and identifiers). Full card details are handled by Stripe, not by us.
• Usage data — log data such as IP address and actions taken, used for security and to operate the Service.

To provide and secure the Service; to process bookings and payments; to send transactional emails (e.g. verification, password reset, booking updates); to prevent fraud and abuse; to improve the Service; and to comply with legal obligations.

We use trusted third parties (“processors”) to run the Service. They receive only the data needed to perform their function:

• Stripe — payment processing and payouts (Stripe Connect).
• Resend — sending transactional email.
• Anthropic — powering AI assistant features (messages you send to the assistant are processed to generate responses).
• Railway & Vercel — hosting the backend, database, and frontend.

We do not sell your personal information. We may disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

We use browser storage to keep you signed in and to remember preferences. We do not use third-party advertising cookies.

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Payment and transaction records may be retained as required for financial and tax purposes.

Depending on where you live (including under GDPR and the CCPA), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, email privacy@musicrat.ai. We will respond within the timeframe required by applicable law.

We use industry-standard measures — including hashed passwords, encrypted transport (HTTPS), rate limiting, and access controls — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

The Service is not directed to children under 18, and we do not knowingly collect their personal information.

We may process and store information in countries other than where you live. Where required, we take steps to ensure appropriate safeguards for such transfers.

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you. The “Last updated” date above reflects the latest version.

Questions or requests? Contact us at privacy@musicrat.ai.