PrivacyPolicy.
Music Director HQ is operated by Bean & Magoo. This policy explains what we collect, why, and what we do with it. The short version: we collect what the Service needs to work, we do not sell it, and the content of your organisation is yours.
1. What we collect
From the person who creates an organisation
- Organisation name and address (the part before musicdirectorhq.com), the type of organisation, your name and email address, and the IP address the signup came from.
From everyone who signs in
- Email address and, if the admin entered it, name and role. Sign-in is by emailed link and code; we do not store passwords.
- Session records (which device is signed in, when) so access can be revoked, and an activity log — sign-ins, plays, downloads, changes — visible to the organisation's admins.
- Technical data your browser sends: IP address, user agent, timestamps.
Content your organisation puts in
- Setlists, songs, keys, tempos, notes, lyrics, audio files, rosters and personnel by date, day-sheet details (call times, venues, addresses), branding images, and — if connected — the events from a calendar feed you provide.
Billing
- Payment is handled by Stripe. We receive your billing email, the plan, subscription status and period; we never see or store card numbers.
2. Why we use it
- To run the Service: sign you in, show your organisation its own data and nobody else's, deliver audio, send the emails the Service needs (sign-in links, receipts, service notices).
- To keep it secure: rate limiting, abuse detection, audit logs.
- To support you when you ask, and to bill you.
- To improve the Service, using aggregate usage that does not identify individuals.
We do not sell personal data, and we do not use your organisation's content for advertising or to train models.
3. Who else sees it
- Cloudflare hosts the Service (application, database, file storage) and delivers our email. Data is processed on Cloudflare's network, primarily in the United States.
- Stripe processes payments and holds card details under its own privacy policy.
- The people in your organisation see what its admins have given them access to; admins see the organisation's activity log.
- We may disclose data if the law requires it, or to protect the rights and safety of the Service and its users.
Our own staff access customer content only to operate the Service or to help with a support request you have made; every such access is logged with a reason.
4. Cookies and local storage
The Service uses browser storage to keep you signed in and to cache your setlist for fast loading. The marketing site sets no tracking cookies. We do not run third-party analytics or advertising trackers.
5. Retention
We keep your organisation's data for as long as the organisation is active, on trial or within a grace period, and for at least 90 days after suspension or cancellation so it can be reinstated. Delivery logs for email are kept by Cloudflare for about 31 days. Backups expire on their own schedule. You can ask us to export or delete your organisation's data at any time.
6. Your rights
You can see and change most of your data inside the Service. You can ask us to access, correct, export or delete personal data we hold about you, or object to a use of it, by writing to admin@musicdirectorhq.com. We will respond within 30 days. If you are in the EU, UK or a jurisdiction with similar law, you also have the right to complain to your data-protection authority.
7. Children
The Service is for working musicians and their teams and is not directed at children under 16. If you believe a child has provided personal data, tell us and we will remove it.
8. Changes
We will post updates here with a new date and notify organisation admins by email of material changes.
9. Contact
Bean & Magoo · admin@musicdirectorhq.com