Privacy Policy
This policy explains what personal data Musiband holds, why, for how long, and what you can do about it.
1. Who is responsible
[[OPERATOR NAME]], [[ADDRESS]], is the controller of your personal data. Contact: [[CONTACT EMAIL]].
2. What we hold and why
| Data | Why | Legal basis |
|---|---|---|
| Account: email, password (hashed), username, linked Google or Apple sign-in, when you accepted the terms and confirmed your age | To run your account and sign you in | Contract |
| Musician profile: display name, bio, picture, birth year, city, instruments, genres, links | To show your profile and let bands find you | Contract |
| Bands you create or join, and your role | To run band pages | Contract |
| Invitations and join requests, with their notes and answers | To connect musicians and bands | Contract |
| Messages you send and receive | To let you talk about an invitation | Contract |
| Notifications and your email settings | To tell you what happened | Contract |
| Activity: when you were last active, sign-ins and actions such as sending an invitation | To show "active recently", to keep the service safe and to investigate abuse | Legitimate interest |
| Reports you file, reports about you, suspensions | To moderate the service | Legitimate interest |
We do not sell your data and do not use it for advertising.
3. Who can see it
Your public profile and band pages are visible to everyone, but only after you confirmed your email. Your email address is never shown to other users. Messages are visible only to the people in the conversation. Moderators can see reports, including the reported message and the five before it.
We use these processors: hosting [[HOSTING PROVIDER]], email delivery [[EMAIL PROVIDER]], and Google and Apple if you sign in with them.
4. How long we keep it
- Your account and profile: until you delete your account.
- Activity events: 180 days.
- Data exports: 7 days after they are ready.
- After you ask to delete your account: 14 days, during which you can cancel; then it is erased.
- Your old username stays reserved for 30 days after it is released.
- If your account was banned: a fingerprint (a one-way hash) of your email, so it cannot sign up again, until you ask us to remove it.
When your account is deleted we erase your profile, pictures, band memberships, notifications, activity, blocks, and the notes you wrote on invitations; pending invitations are withdrawn. Messages you sent stay visible to the people who received them, shown from "Deleted user". Reports and moderation decisions are kept without your account details.
5. Your rights
You can:
- download a copy of your data (Settings → Your data);
- correct your data in Settings;
- delete your account (Settings → Your data);
- object to processing based on legitimate interest, or ask us to restrict it;
- complain to your data protection authority.
For anything else, write to [[CONTACT EMAIL]].
6. Cookies
We use only the cookies needed to keep you signed in and to protect forms. We do not use tracking or advertising cookies.
7. Children
Musiband is for people aged 16 and over. If you believe a younger person has an account, tell us and we will delete it.
8. Changes
When this policy changes, we will ask you to review and accept the new version.