Privacy Policy

1. Introduction

Welcome to MusicPals ("we," "our," or "us"), operated by JestoConnect. We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, web platform, and related services (collectively, the "App").

By using MusicPals, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our App.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information when you register and use our App:

• Name and email address
• Username and display name
• Profile picture and bio (optional)
• Password and authentication credentials
• Social media profile links (optional)
• Musical preferences and interests
• Payment information (for premium features)

2.2 Content and Creative Data

As a music generation and sharing platform, we collect:

• Music tracks you create, upload, or generate using AI
• Audio files, samples, and recordings
• Lyrics, song titles, and descriptions
• Collaboration data and shared projects
• Playlists and collections you create
• Comments, likes, and interactions with other users' content
• AI generation parameters and preferences
• Music metadata (genre, tempo, key, mood tags)

2.3 Usage and Analytics Data

We automatically collect information about your use of the App:

• Music creation and listening history
• Search queries and discovery patterns
• Feature usage and interaction data
• Time spent in the app and session duration
• Sharing and social interaction metrics
• AI model usage and generation requests
• Playback statistics and streaming data

2.4 Device and Technical Information

• Device type, model, and operating system
• Unique device identifiers and advertising IDs
• IP address and approximate location (city/country level)
• Browser type and version
• App version, crash reports, and error logs
• Network information and connection type
• Audio hardware capabilities and settings

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide Services: To enable AI music generation, store and stream your creations, facilitate sharing and collaboration
• Personalization: To recommend music, suggest collaborators, and customize your experience based on your preferences
• AI Training: To improve our AI music generation models (using anonymized and aggregated data)
• Social Features: To enable social interactions, sharing, comments, and discovery features
• Content Moderation: To detect and prevent copyright infringement, inappropriate content, and abuse
• Communications: To send notifications, updates, newsletters, and respond to your inquiries
• Payment Processing: To process subscriptions and payments for premium features
• Analytics: To analyze usage patterns and improve App performance and features
• Security: To protect against fraud, unauthorized access, and ensure platform security
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Public Content

When you choose to share music, playlists, or profiles publicly, this content and associated metadata (username, profile picture, likes, comments) will be visible to other users and may be accessible to search engines.

4.2 Collaboration Partners

When you collaborate with other users, your username, profile information, and collaborative project data will be shared with those users.

4.3 Service Providers

We may share information with third-party service providers who perform services on our behalf:

• Cloud storage and hosting providers (for music files and data)
• Content delivery networks (CDN) for streaming
• AI and machine learning service providers
• Analytics and performance monitoring services
• Payment processors (Stripe, Apple Pay, Google Pay)
• Email and push notification services
• Customer support and ticketing tools
• Content moderation services

4.4 Legal Requirements

We may disclose your information if required by law, court order, or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.

4.5 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice in the App of any such change.

4.6 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for research, marketing, or analytics purposes.

5. Content Ownership and Rights

Your Content: You retain ownership of the music and content you create. By using MusicPals, you grant us a worldwide, non-exclusive, royalty-free license to host, store, reproduce, distribute, and publicly perform your content as necessary to provide our services.

AI-Generated Content: For music generated using our AI tools, you have the right to use, modify, and distribute the output, subject to our Terms of Service. We may use AI-generated content (in anonymized form) to improve our AI models.

Copyright: You represent that you have the right to upload and share all content you submit. We have systems in place to detect and remove content that infringes on copyright or intellectual property rights.

6. Data Security

We implement comprehensive security measures to protect your personal information and creative content:

• End-to-end encryption for data transmission (TLS/SSL)
• Encryption of stored audio files and personal data
• Secure authentication with password hashing (bcrypt)
• Multi-factor authentication (MFA) option
• Regular security audits and penetration testing
• Access controls and role-based permissions
• Secure backup and disaster recovery systems
• DDoS protection and firewall systems
• Intrusion detection and monitoring

However, no method of transmission over the internet or electronic storage is 100% secure. While we implement industry-standard security practices, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information and content for different periods depending on the type of data:

• Account Data: Retained while your account is active and for 90 days after account deletion
• Music Content: Retained until you delete it or close your account; publicly shared content may be cached
• Usage Analytics: Retained in anonymized form for up to 2 years for improvement purposes
• Payment Records: Retained for 7 years for tax and legal compliance
• Legal/Security Data: Retained as required by law or for legitimate security purposes

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal compliance, dispute resolution, or enforcement of our agreements.

8. Your Rights and Choices

You have various rights regarding your personal information and content:

• Access: Request access to your personal information and download your data
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information and account
• Content Control: Delete, edit, or change privacy settings for your music and content
• Portability: Request a copy of your data in a structured, machine-readable format
• Opt-out: Opt-out of marketing communications, newsletters, and non-essential notifications
• Advertising: Opt-out of personalized advertising through device settings
• Withdraw Consent: Withdraw consent where processing is based on consent
• Object: Object to processing of your personal information for certain purposes
• Privacy Settings: Control who can see your profile, music, and activity

To exercise these rights, please contact us at privacy@jestoconnect.com or use the in-app settings. We will respond to your request within 30 days.

9. Children's Privacy

MusicPals is intended for users aged 13 and older (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages without parental consent.

If we become aware that we have collected personal information from a child under the applicable age without verified parental consent, we will take steps to delete that information promptly. Parents or guardians who believe we have collected information from a child should contact us immediately at privacy@jestoconnect.com.

For users between 13-17 (or 16-17 in the EEA), we provide enhanced privacy protections, including default private accounts and limited data sharing.

10. International Data Transfers

MusicPals operates globally and your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States and other countries where our service providers operate.

These countries may have different data protection laws. When we transfer your information internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with service providers
• Adequacy decisions where applicable
• Compliance with applicable cross-border transfer regulations

11. Third-Party Services and Integrations

MusicPals may integrate with or link to third-party services. We are not responsible for the privacy practices of these third parties. We recommend reviewing their privacy policies before providing any personal information.

Third-party services we may integrate with include:

• Social Media: Facebook, Instagram, Twitter/X, TikTok for sharing and authentication
• Music Platforms: Spotify, Apple Music, YouTube for content export
• Analytics: Google Analytics, Firebase Analytics, Mixpanel
• Cloud Services: AWS, Google Cloud, Azure for hosting and storage
• Payment Processors: Stripe, Apple Pay, Google Pay for transactions
• Authentication: OAuth providers (Google, Apple, Facebook)

12. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to track activity in our App and store certain information. You can control cookies through your browser or device settings. However, disabling cookies may limit your ability to use certain features.

Types of cookies and tracking we use:

• Essential Cookies: Required for App functionality, authentication, and security
• Performance Cookies: Help us understand how users interact with the App
• Functional Cookies: Remember your settings, preferences, and playback state
• Analytics Cookies: Collect data on usage patterns and feature adoption
• Advertising Cookies: Deliver personalized ads (with your consent)

You can manage cookie preferences through our cookie consent manager or your device settings.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information (with certain exceptions)
• Right to opt-out of the sale or sharing of personal information
• Right to correct inaccurate personal information
• Right to limit use and disclosure of sensitive personal information
• Right to non-discrimination for exercising your CCPA rights

Important Note: We do not sell your personal information for monetary consideration. However, sharing for personalized advertising may be considered a "sale" under CCPA. You can opt-out of such sharing through our settings.

To exercise your CCPA rights, contact us at privacy@jestoconnect.com or call our toll-free number (to be established). We will verify your identity before processing requests.

14. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:

• Contract Performance: Processing is necessary to perform our contract with you (account creation, content hosting, features)
• Legitimate Interests: Processing is necessary for our legitimate interests (service improvement, fraud prevention, analytics)
• Consent: You have given explicit consent for specific purposes (marketing, personalized recommendations)
• Legal Obligation: Processing is necessary to comply with legal obligations (tax, law enforcement)

You have the right to:

• Access, rectify, or erase your personal data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

Our EU representative can be contacted at eu-representative@jestoconnect.com.

15. Apple App Store and Google Play Store Requirements

15.1 In-App Purchases

Purchases made through the Apple App Store or Google Play Store are processed by Apple Inc. or Google LLC, respectively. We do not collect or store your payment card information for these transactions. Please review Apple's Privacy Policy and Google's Privacy Policy for information on how they handle your payment data.

15.2 App Tracking Transparency (iOS)

For iOS users, we comply with Apple's App Tracking Transparency (ATT) framework. We will request your permission before tracking your activity across other companies' apps and websites for advertising purposes. You can change your tracking preferences in iOS Settings > Privacy > Tracking.

15.3 Google Play Data Safety

We provide accurate information in the Google Play Store's Data Safety section about our data collection and sharing practices. This privacy policy provides comprehensive details about the data practices summarized there.

16. AI and Machine Learning

MusicPals uses artificial intelligence and machine learning to power our music generation features:

• AI Training: We may use anonymized, aggregated music data to train and improve our AI models
• User Opt-Out: You can opt-out of having your content used for AI training in your privacy settings
• Transparency: AI-generated content is clearly labeled in the App
• Fairness: We strive to ensure our AI systems are fair and do not perpetuate bias

We do not use your personal information (name, email, etc.) to train AI models. Only anonymized musical data patterns may be used.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of any material changes by:

• Posting the new Privacy Policy in the App with an updated "Last Updated" date
• Sending you an email notification (for significant changes)
• Displaying an in-app notification
• Requesting your consent where required by law

We encourage you to review this Privacy Policy periodically. Your continued use of the App after such modifications constitutes your acknowledgment and acceptance of the modified Privacy Policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

19. Account and Data Deletion

You have the right to request deletion of your MusicPals account and all associated personal data at any time. Upon receiving your deletion request, we will:

• Delete your account and profile information within 30 days
• Remove your personal data from our active systems
• Delete your music content and creations (unless publicly shared by others)
• Anonymize any data required for legal or security purposes
• Send you a confirmation once deletion is complete

20. Consent

By using MusicPals, you consent to this Privacy Policy and agree to its terms. If you do not agree to this policy, please discontinue use of the App immediately and contact us to delete your account.

21. Data Protection Summary

For your convenience, here's a quick summary of our key privacy practices: