Your data, your rights.

1 Who We Are

Music Career AI is operated by Polsia Inc. ("we", "us", "our"). Our platform at musiccareer.ai provides AI-powered music business guidance to independent artists, managers, and labels.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights under applicable law including GDPR (EU/UK) and CCPA (California).

2 Data We Collect

We collect only what we need to provide the service:

• Account data: email address and hashed password when you create an account.
• Artist profile: artist name, genre, career stage, location, and bio — entered voluntarily.
• Social links: Spotify, Instagram, TikTok profile URLs you connect for AI-personalized advice.
• Conversation history: your chat messages and AI responses, stored to provide continuous context.
• Uploaded files: PDF/DOC contracts uploaded for AI analysis — processed in memory and not stored permanently.
• Usage data: pages visited, features used — collected anonymously for product improvement.
• Payment data: handled entirely by Stripe. We store only your subscription status — never card numbers.

3 How We Use Your Data

• AI advisor personalization: your profile and social links give the AI context for relevant guidance.
• Conversation continuity: chat history lets you pick up where you left off across sessions.
• Career tasks & coaching: your goals and profile power AI-generated action plans.
• Analytics & improvement: anonymous usage data helps us understand which features are most valuable.
• Billing: we process payments via Stripe and track your plan status.
• Transactional emails: account confirmation, password reset, billing receipts. No promotional emails without consent.

4 Third-Party Services

We work with trusted third parties who process data on our behalf:

• Anthropic (Claude AI): your chat messages are sent to Anthropic's API. Anthropic does not use API inputs to train models by default.
• Stripe: payment processing under PCI-DSS Level 1. See stripe.com/privacy.
• Deezer API: used to enrich artist profiles with public catalog metadata.
• Meta (Facebook/Instagram): if you connect Meta Ads, we access only authorized campaign data.
• Postmark: transactional email delivery. Email addresses shared only to send your messages.
• Render / Neon: cloud hosting and database. Data stored on secure US/EU servers.

5 Cookies & Local Storage

We use minimal tracking. Our app stores your session token and language preference in localStorage — not third-party tracking cookies.

• mm_token: your authentication JWT. Required to stay logged in.
• mmai_lang: your language preference (EN/FR/ES/DE).
• Meta Pixel: conversion event tracking if you arrived via a Meta Ad. Disable via browser settings.

We do not use advertising cookies, cross-site tracking, or sell your data to data brokers.

6 Data Retention

• Account data: retained until you delete your account.
• Chat history: retained until you delete it or close your account.
• Uploaded files: processed in memory and discarded immediately.
• Billing records: retained for 7 years per financial regulations.
• Anonymous usage data: retained in aggregate form for product analytics.

After account deletion, personal data is purged within 30 days from active systems. Backups overwritten within 90 days.

7 Your Rights (GDPR & CCPA)

If you are in the EU, UK, or California, you have the following rights:

To exercise any right, email support@musiccareer.ai. We respond within 30 days.

8 International Data Transfers

Our services are hosted primarily in the United States. EU/UK data transfers are covered by Standard Contractual Clauses (SCCs) with our service providers.

9 Children's Privacy

Music Career AI is not directed at children under 16. We do not knowingly collect data from anyone under 16. Contact us immediately if you believe a child has provided us data.

10 Changes to This Policy

We may update this policy periodically. Material changes will be communicated by email or platform notice. Continued use after changes constitutes acceptance.

11 Contact Us

Questions about this policy or to exercise your data rights: