Privacy Policy
Last updated: March 2, 2026
1. Introduction
Musyn ("we", "our", or "the Service") is an AI-powered A&R intelligence platform operated by Clandestino Ventures, LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our web application and associated APIs.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your name, email address, job title, organization name, and other profile details you provide during onboarding. If you sign in via Google OAuth, we receive your name, email, and profile picture from Google.
2.2 Usage Data
We automatically collect information about how you interact with the Service, including pages visited, features used, search queries, and timestamps. We use PostHog for product analytics. Session recordings, if enabled with your consent, capture anonymized interaction data to help us improve usability.
2.3 Music Industry Data
Musyn aggregates publicly available data from music platforms (Spotify, YouTube) to provide artist metrics and insights. This is publicly available information and is not personally identifiable.
2.4 Feedback & Communications
When you submit feedback through the in-app widget, we collect your feedback content, NPS score, category, and the page URL where you submitted it.
3. How We Use Your Information
- To provide and maintain the Service
- To personalize your experience based on your role and preferences
- To send alert notifications and email communications you've configured
- To improve the Service through analytics and feedback
- To provide AI-powered insights through the A&R Copilot
- To detect and prevent fraud, abuse, or security incidents
4. Data Sharing
We do not sell your personal information. We may share data with:
- Service providers — We use industry-standard cloud infrastructure providers for hosting, database storage, caching, AI-powered analysis, transactional email, product analytics, and error monitoring
- Your organization — Data within your workspace is visible to members of your organization based on their role
- Legal requirements — When required by law, subpoena, or government request
5. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS 1.3) and at rest
- Row-level security (RLS) policies on all database tables
- Role-based access control (RBAC) within organizations
- Regular security audits and dependency updates
6. Data Retention
We retain your account data for as long as your account is active. Usage analytics are retained for 12 months. You may request deletion of your account and associated data at any time by contacting us at privacy@musyn.io.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request deletion of your personal data
- Object to or restrict processing of your data
- Export your data in a portable format
8. Cookies
We use essential cookies for authentication and session management. We use PostHog for analytics, which uses first-party cookies. We do not use third-party advertising cookies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact Us
For privacy-related inquiries, contact us at privacy@musyn.io.