Privacy policy.

musicbox.ai is a pre-launch service that helps artists, managers, estates, and labels audit royalty statements against their underlying contracts. This policy covers what we collect from visitors to musicbox.ai and applicants to our early-access programme.

We do not use cookies, browser local storage, or browser fingerprinting for analytics or advertising. The site does not set any tracking identifier on your device.

The only cookie we set is a session cookie for authenticated users (used after sign-in to remember the session). It is HTTP-only, secure, classified as "strictly necessary" under GDPR / ePrivacy, and does not require consent.

We measure aggregate site usage with first-party, cookieless analytics. Each event sent from your browser is processed on our server and discarded after enrichment with the following non-identifying signals:

• Approximate country (from your network connection’s geographic region)
• Device class (mobile / tablet / desktop / bot — never the exact user-agent string)
• Page path, referrer, and any UTM parameters in the URL

To estimate unique visitors without a persistent identifier, we derive a daily-rotating hash from a server-side salt, your IP address, and your user-agent. The salt rotates every 24 hours, so hashes from different days are uncorrelated. Your IP address and user-agent are never stored — they exist only inside the hash function and are discarded immediately after.

Raw events are retained for 90 days; aggregated counts are retained indefinitely for trend analysis.

When you submit the early-access form, we collect:

• The name and email address you provide
• The segment you select (artist, manager, label, etc.)
• The free-text catalogue notes you choose to share
• The UTM parameters and referrer of the page you applied from, for understanding which channels reach the right people
• Your IP address and request timestamp, briefly, for spam-prevention and audit purposes

We use this information solely to contact you about early access and to onboard you when the product is ready. We do not share it with advertisers, sell it, or use it for any unrelated purpose. We retain applications for up to 24 months from submission, unless you ask us to delete sooner.

• Run third-party scripts of any kind
• Embed advertising trackers
• Sell, rent, or share your information with third parties
• Store raw IP addresses or user-agents on disk
• Link visitor activity across days (the hash is one-way and rotates)

Depending on where you live, you may have the right to access, correct, or delete the personal data we hold about you, and to object to or restrict its processing. To exercise any of these, email privacy@musicbox.ai.

We’ll update this page if our practices change. The "last updated" date at the top reflects the current version. For material changes, we’ll contact early-access applicants directly.

Questions: privacy@musicbox.ai