Skip to content
Back to MusicOps

Privacy Policy

Effective Date: October 12, 2026

1. Who We Are

MusicOps is a product of AstraBrava LLC, a company registered in the State of California, United States. When this policy refers to "we," "us," or "our," it means AstraBrava LLC.

2. Information We Collect

Account Information

  • Name and email address
  • Organization name and role
  • Authentication credentials (managed via Google OAuth)

Usage Data

  • Pages visited and features used
  • Browser type, device, and operating system
  • IP address and approximate location
  • Timestamps and session duration

Campaign and Artist Data

Information you provide about your artists, releases, campaigns, and budgets is stored to deliver the service. This data belongs to you.

Uploaded Audio

Audio files you upload for Music Brain analysis, which may include unreleased recordings, are stored to deliver the service. Section 6 explains which AI providers receive them. This content belongs to you.

3. How We Use Your Information

  • Provide, maintain, and improve the MusicOps service
  • Authenticate your identity and manage your account
  • Send transactional emails (account updates, billing, notifications, and digests)
  • Run the AI features you use, such as track analysis, recommendations, and content drafts
  • Monitor errors and performance to keep the service reliable
  • Analyze usage patterns to improve the product
  • Comply with legal obligations

We do not sell your personal information. We do not use your data for advertising.

4. Data Storage and Security

Your data is stored using Cloudflare infrastructure (D1 database, R2 storage, KV key-value store). Authentication is handled via Google OAuth. Payment processing is handled by Stripe. Some data is also processed by the providers listed in Section 6. All data is encrypted in transit via TLS.

We implement industry-standard security practices to protect your data, including access controls, encryption, and regular security reviews.

5. Cookies

We use essential cookies required for authentication and session management, and we save your cookie notice choice in your browser's local storage. We do not use advertising cookies.

We do use a third-party monitoring service, Sentry, which collects error reports and a sample of performance data from your browser and from our servers. See Section 6.

6. Third-Party Services

  • Google OAuth: Authentication. Google shares your name, email address, and profile picture with us when you sign in.
  • Stripe: Payment processing and billing
  • Cloudflare: Hosting, CDN, and data storage, including uploaded audio files, plus aggregate traffic and performance metrics
  • Resend: Delivery of transactional email. Resend receives the recipient's email address and the content of each message, which can include release and campaign details.
  • Sentry: Error and performance monitoring for the website and the API. We remove email addresses and authentication headers from reports before they are sent.
  • Chartmetric: Streaming and audience statistics. Artist names you search for and artist identifiers are sent to Chartmetric to retrieve this data.
  • Spotify: Artist search and public artist data. Artist names and Spotify artist IDs are sent to Spotify. If you choose to connect a Spotify account, Spotify shares that account's profile with us.
  • Anthropic (Claude): AI text generation. See AI Processing below.
  • Google (Gemini API): AI audio analysis. See AI Processing below.
  • OpenAI (Whisper API): AI lyric transcription. See AI Processing below.

AI Processing

MusicOps uses third-party AI models to deliver some features. When you use them, your content is sent to these providers:

  • Music Brain: The audio file you upload is sent to Google (Gemini API) to analyze musical features and to OpenAI (Whisper API) to transcribe lyrics. The resulting analysis and lyric transcript are then sent to Anthropic (Claude) to produce strategy suggestions.
  • AI Feed, content drafts, and the AI assistant: Your prompts and the workspace data needed to answer them, such as artist, release, content, audience, and campaign details, are sent to Anthropic (Claude).

For the models used by each feature and how AI output is labeled, see our AI Disclosure.

If you connect your own AI client to MusicOps through our MCP connector, the workspace data you request is sent to that client at your direction.

Each third-party service handles data under its own terms and privacy policy. We share only the data each service needs to perform its function.

7. Your Rights

Depending on your location, you may have the following rights under applicable privacy laws (including CCPA and GDPR):

  • Access: Request a copy of your personal data
  • Deletion: Request deletion of your personal data
  • Portability: Receive your data in a portable format
  • Correction: Request correction of inaccurate data
  • Opt-Out: We do not sell personal information, so there is nothing to opt out of

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. We may retain anonymized, aggregated data for analytics purposes.

9. Children

MusicOps is not intended for use by individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we will notify you by email or through the service. Your continued use of MusicOps after changes take effect constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests, contact us at [email protected].