1. Data Controller
muzeme.io is the data controller for personal data collected through our platform. For data protection inquiries, contact us at privacy@muzeme.io
2. Data We Collect
Account Data
- Email address
- Password (encrypted)
- Display name (optional)
Usage Data
- Tracks generated and their prompts
- Downloads and exports
- Feature usage patterns
- Session data and timestamps
Payment Data
- Processed securely via Stripe
- We do not store full payment card details
- Transaction history and subscription status
Uploaded Audio
- Vocal samples (for backing track generation and vocal re-singing)
- Reference loops, tracks, and acapellas (for track expansion)
- Audio files for stem separation, mastering, and mix analysis
- Temporarily processed and deleted after generation
3. Legal Basis for Processing
- Contractual Necessity: Processing required to provide our service
- Legitimate Interests: Service improvement, fraud prevention, analytics
- Consent: Marketing communications (opt-in only)
- Legal Obligation: Tax records, law enforcement requests
4. Data Retention
- Account Data: Retained while account is active, deleted upon request
- Generated Tracks: Stored indefinitely for your access (deletable by you)
- Uploaded Audio: Deleted within 24 hours of processing
- Payment Records: Retained for 7 years per UK tax requirements
- Logs: Retained for 90 days for debugging and security
5. Third-Party Data Sharing
We share data with the following third-party processors to provide our service:
- AI Music Generation (USA): Prompts and generation parameters for music creation
- Audio Processing (USA): Audio files for stem separation, vocal isolation, and audio analysis
- Voice Synthesis (USA): Audio data for vocal processing, vocal hooks, and vocal chop generation
- Stripe (USA): Payment processing and subscription management
- Cloud Infrastructure (USA): Database hosting and authentication
- AI Models: Artwork generation, track critique analysis, mix chat, and prompt engineering
We do not sell your personal data to third parties for advertising or marketing purposes.
6. Your Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
- Right to Lodge a Complaint: File a complaint with the UK Information Commissioner's Office (ICO)
To exercise these rights, email privacy@muzeme.io. We will respond within 30 days.
7. Data Security
- All data transmitted via HTTPS encryption
- Passwords hashed using industry-standard algorithms
- Database access restricted to authenticated services only
- Regular security audits and vulnerability assessments
- Row Level Security (RLS) ensuring users can only access their own data
8. International Transfers
Some of our third-party processors are based in the United States. Data transfers to the US are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring adequate protection for your personal data.
9. Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Analytics are privacy-focused and do not track individual users across sites.
10. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be notified via email or prominent notice on our platform. Your continued use after changes constitutes acceptance.
Contact
For privacy inquiries or to exercise your data rights:
Email: privacy@muzeme.io
Data Protection Officer: dpo@muzeme.io