Privacy Policy

MusicOne Global Ltd. ("MusicOne", "we", "us", "our") runs a radio station management and music scheduling platform. This policy explains what personal data we collect, why, how long we keep it, who helps us process it, and what your rights are.

It covers our website musicone.io, the MusicOne web dashboard at cloud.musicone.io, the MusicOne phone app, our API, CloudSync and our related tools and surveys.

MusicOne Global Ltd. is the controller of your personal data. We are a company registered in England and Wales (company number 16436692) with our registered office at 8 Berry Hill, Stanmore, Middlesex, HA7 4XS, United Kingdom. Our representative in the European Union (Article 27 GDPR) is Robbert Scholten, Baafjeslaan 19, 1852 BE Heiloo, the Netherlands, [email protected].

Where you use MusicOne on behalf of a station or organisation, that organisation decides what music, schedules and other content it puts into MusicOne. If your organisation needs a Data Processing Agreement for that content, we can provide one on request.

Account information

• Name and email address
• Password (stored securely using one-way hashing; we can't read it)
• Sign-in security details if you use them: two-factor authentication (stored encrypted), backup codes (hashed), passkeys, and one-time sign-in codes sent by email
• Organisation details: name, address, city, postal code, country, phone number and tax ID (if applicable)
• The team members you invite, and the stations and settings they can access

Billing information

• Subscription status, plan, number of stations, billing cycle, currency, invoices, credit notes and account credit
• Payments are handled entirely by Stripe. We don't store your card numbers, bank account details or other payment credentials on our servers.

Usage and session data

• IP address, and the country our network provider (Cloudflare) derives from it
• Device type and model, platform, browser or app name and version
• Session times, and a history of when a sign-in moved from one browser or phone to another
• A log of actions taken in your account (for example, a schedule generated or a setting changed), so we can help when something goes wrong
• Product analytics and error reports from the dashboard and the phone app (see section 8)

Content data

• Your music library: the details of your songs and other items (such as title, artist, length and category), imported from library files you upload or synced from your automation software through CloudSync. We don't store your audio: when you preview a track in the dashboard, it is streamed from your own computer through CloudSync and isn't kept.
• Artist, category, clock, format and schedule configurations you create

What you tell us

• Emails and messages to our support team
• Feedback you give us, such as the reason you give when you cancel, or answers to our surveys

Website visitors (musicone.io)

• Analytics data about your visit and, if you came from one of our Google ads, the ad click ID: once you accept cookies or, if you visit from outside the European Economic Area, the UK and Switzerland, unless you switch them off. See section 8.

We use your data for these purposes. Under UK and EU data protection law each one needs a legal basis, shown next to it.

We don't sell your personal data. We don't share your name, email address or organisation name with advertising platforms. We do use Google's tools to measure how our own website and ads perform, as described in section 8.

These companies help us run MusicOne. Each processes personal data only as needed for its service.

• DigitalOcean: hosts our database, and stores the library files you upload for import, copies of stations you remove, and station backups.
• Cloudflare: protects and speeds up cloud.musicone.io. It handles every request to the dashboard, which includes your IP address.
• Stripe: payment processing. Stripe receives your billing details directly and is also governed by its own privacy policy.
• Resend: delivers our emails.
• PostHog: product analytics, session recordings and error reports for the dashboard and phone app. We use PostHog's EU cloud.
• Google (Google Analytics, Google Tag Manager, Google Ads): website and sign-up analytics, and measuring our ads. See section 8.
• Framer: hosts our website musicone.io and provides its built-in visitor statistics.

Where a provider is based outside the UK or the European Economic Area, see "International transfers" in section 8.

Your account data, including your music library (the details of your tracks, not the audio), is stored in a PostgreSQL database run by DigitalOcean in Frankfurt, Germany. Library files you upload for import, copies of stations you remove, and station backups are stored in DigitalOcean Spaces in Frankfurt, Germany, with restricted access. Your audio files stay on your own computers.

We use industry-standard security measures, including encrypted connections (TLS), hashed passwords, encrypted two-factor secrets, session token management and access controls. No system is completely immune to risk, but we take reasonable steps to protect your information.

• Your account: we keep your account and organisation data while your account exists. When your subscription ends, we keep your account for 12 months so you can pick up where you left off (station backups are removed when the subscription ends). After 12 months we email the account owner, and delete the account 30 days later unless they choose to keep it. Choosing "Keep my account" starts the 12 months again. The account owner can also delete the account at any time once the subscription has ended, under Preferences > Billing, or ask us to do it. We delete it no sooner than 7 days later, and until then the owner can cancel the deletion on the same page. The 7 days protect you against an accidental deletion. Deleting removes your users, stations, music library, schedules and the rest of your account data, and deletes the people in your account at the time, with their events and recordings, from PostHog (see section 8). Your invoices and billing records are kept, as described below.
• Database backups: deleted data stays in our database backups for up to 7 days before it is gone for good.
• Billing records: we keep invoices, credit notes and billing records, with the billing name, address, tax ID and the card type and last four digits on them, for 6 years after the end of the financial year they relate to, as UK law requires, even after your account is deleted. A deleted account's invoices and billing records are then deleted together, once the newest of them is 7 years old.
• Sign-in sessions: removed after 7 days without activity. The history of sign-ins moving between devices is kept for 90 days.
• Activity log: kept for 90 days.
• Your music library and stations: library items, schedules and other station data are deleted when you remove them, or when your account is deleted. When you remove a whole station, we keep a copy of it (its library, schedules and settings) so it can be restored if the removal was a mistake, and library files you upload for import are kept too; both are deleted when your account is deleted. Station backups are deleted once they're older than your backup plan keeps them, when you switch backups off, when the station is removed, or when the subscription ends. While an ended account is kept (see "Your account" above), everything else here is kept with it.
• Analytics and error data: PostHog event and error data is kept for 1 year, and session recordings for 30 days. When an account is deleted, we also erase its people from PostHog. Google Analytics data is kept for 14 months.

Depending on where you live, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted (the account owner can also delete the whole account under Preferences > Billing once the subscription has ended, see section 6)
• Restrict how we use your data
• Object to our use of your data where we rely on legitimate interests
• Receive your data in a portable format
• Withdraw your consent at any time, without affecting what we did before you withdrew it (for cookies, use "Cookie settings", see section 8)
• Complain to a data protection authority. In the UK, that's the Information Commissioner's Office (ico.org.uk). In the EU, it's the authority in the country where you live or work.

To use any of these rights, email us at the address in section 11. We'll reply within one month.

Cookies and local storage are small pieces of data a website keeps in your browser. We use some to make MusicOne work, and some to understand how people use our website and dashboard, and to measure our ads.

Your choice

We ask whether you accept cookies for analytics, session recordings and measuring our ads. On cloud.musicone.io (the dashboard, the sign-in page and the sign-up page) we ask every visitor, wherever you are, whether you're signed in or not. On musicone.io we ask when you first visit from the European Economic Area (including Norway), the UK or Switzerland; for visitors from elsewhere, musicone.io's analytics and advertising cookies are on by default, and you can switch them off at any time.

Accepting covers analytics (Google Analytics on our website and sign-up page, and PostHog on cloud.musicone.io), session recordings on cloud.musicone.io, and measuring which of our Google ads lead to visits and sign-ups. Until you accept, PostHog's cookies and session recordings stay off (PostHog still receives anonymous page views, see below), and Google's tag doesn't run on cloud.musicone.io.

We remember your choice in a cookie called m1_consent for one year. musicone.io and cloud.musicone.io share it, so a choice you make on one holds on the other.

Changing your mind

You can change your choice whenever you like: in the dashboard, choose "Cookie settings" in your account menu at the top right; on the sign-in page, click "Cookie settings" under the sign-in box; on musicone.io, click "Cookie settings" in the footer, or go to musicone.io/?cookie-settings. If you decline or withdraw consent, we stop setting analytics and advertising cookies, stop sending sign-up events to Google, PostHog stops recording sessions, and we delete PostHog's cookie and stored data from your browser. If you withdraw while on the sign-up page, Google's tag, already loaded, is told you've declined, and is switched off completely when you leave that page or reload it. Google's cookies already set stay in your browser until they expire, or until you delete them in your browser settings.

What happens before you choose (Google Consent Mode)

We use Google Consent Mode in its basic form on cloud.musicone.io. Until you accept, Google's tag doesn't load at all, wherever you are: nothing is sent to Google, and no Google cookies are set or read. If you decline, it stays that way.

On the sign-up page (cloud.musicone.io/onboard)

The sign-up page follows the same m1_consentchoice. If you've accepted, Google Analytics and Google Ads receive your visits to the sign-up page (its address, including any campaign or ad click details in it, and the page you came from), your browser and device type, and your IP address, which Google uses to estimate your location, plus the information below, all linked to Google's cookies. If you haven't accepted, Google's tag doesn't load and Google receives none of it:

• Which steps of sign-up you complete, with only these details: account type, billing country, automation software, whether you imported a library, platform, number of stations, billing cycle, plan currency and the sign-up method.
• A conversion when you create an account and when you connect CloudSync, with an internal reference number so a sign-up isn't counted twice. The number doesn't contain your name or email address.

We never send your name, email address or organisation name to Google.

Inside the dashboard and phone app (PostHog)

We use PostHog to see how MusicOne is used and to find and fix errors. On cloud.musicone.io it follows the same cookie choice as Google, and we ask every visitor, wherever you are.

• Before you accept (or if you decline): PostHog stores nothing on your device, so no cookies and no local or session storage. It records no sessions, and doesn't link anything to you or your account, even when you're signed in. It does still receive anonymous page views and page leaves (the page's address, the page you came from, when, your browser, operating system, device type and screen size, and the approximate location PostHog works out from your IP address) and error reports. Each time you open or reload MusicOne in a tab you start as a new anonymous visitor; pages you move to in that tab without reloading are linked to each other, but not to you.
• If you accept: PostHog sets its cookie and local storage so it can recognise your browser from one visit to the next, and records sessions of how you use cloud.musicone.io, including the sign-in and sign-up pages. Passwords, email addresses and phone numbers you type, the details you enter when you sign up or set up CloudSync, two-factor codes, passkey names, the CloudSync pairing code, API keys, billing details and the cancellation feedback box are hidden from these recordings; other information on screen can appear in them.
• Dashboard: PostHog records the pages you visit. We don't record clicks automatically. PostHog also receives error reports, with typed text, links and email addresses removed where we can detect them.
• Identification on cloud.musicone.io: only if you've accepted and are signed in, we link this data to your user ID and your organisation and station names, not to your name or email address.
• Sign-up: PostHog receives the sign-up steps and details listed above for Google: account type, billing country, automation software, whether you imported a library, platform, number of stations, billing cycle, plan currency and the sign-up method. It doesn't receive the internal reference number. Until you accept, these reach PostHog only as anonymous events, like the page views above.
• Phone app: the app sends PostHog error and crash reports only, never page views or session recordings, and doesn't ask for a cookie choice. Each report includes your device type, manufacturer and name, operating system, app version, language, time zone and screen size, and a random ID the app keeps for your device. When you're signed in, reports are linked to your user ID and your organisation and station names, not to your name or email address, and PostHog keeps this link on your phone until you sign out.
• Where: we use PostHog's EU cloud, so this data is stored in the EU.

Our surveys on cloud.musicone.io

Our TrafficONE survey page (cloud.musicone.io/survey/traffic) doesn't show the cookie banner. It keeps your unsent answers and a random visitor ID in your browser's local storage, and tells PostHog, through our server, only that the page was opened, which steps were reached and whether it was sent, with that ID and never your answers or your IP address.

Framer

musicone.io is built and hosted with Framer. Framer's built-in visitor statistics don't use cookies or persistent identifiers, according to Framer.

The cookies and storage we use

You can also block or delete cookies in your browser settings. If you block the necessary ones, you won't be able to sign in.

International transfers

MusicOne Global Ltd. is based in the UK. The UK is covered by an EU adequacy decision, so personal data can flow from the EU to us without extra safeguards.

Some of our providers are based in, or may access data from, the United States or other countries outside the UK and EEA:

• Google: Google LLC is certified under the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. framework. Google also uses Standard Contractual Clauses.
• PostHog: PostHog, Inc. is a US company. We use its EU cloud, so data is stored in the EU. Where PostHog processes data outside the EU, including in the US, this is covered by its certification under the EU-U.S. Data Privacy Framework and its UK Extension. Its data processing agreement also includes Standard Contractual Clauses, with the UK Addendum for UK data.
• Stripe, Cloudflare, Resend and DigitalOcean: where they process data outside the UK or EEA, this is covered by their certification under the EU-U.S. Data Privacy Framework and its UK Extension. Their data processing agreements also include Standard Contractual Clauses, with the UK Addendum for UK data.

You can ask us for a copy of the relevant safeguards using the contact details in section 11.

Legal bases for cookies and tracking

• Necessary cookies and storage (sign-in, security, fraud prevention, remembering your choice): needed to provide the service you ask for, so no consent is required.
• Google Analytics and Google Ads cookies: your consent. You can withdraw it at any time.
• PostHog's cookies, local storage and session recordings: your consent. You can withdraw it at any time.
• Anonymous page views and error reports sent to PostHog without cookies or storage, and the phone app's error and crash reports: our legitimate interest in a reliable, usable product.
• The survey page's visitor ID and visit counts: our legitimate interest in knowing whether the survey is used.

MusicOne is not intended for anyone under 16. We don't knowingly collect personal data from children. If you believe a child has given us personal information, please contact us and we'll delete it promptly.

We may update this policy from time to time. When we make material changes, we'll tell you by email or with a notice in MusicOne before they take effect. The date at the top shows when it was last updated.

If you have questions about this policy or how we handle your data, or you want to use any of your rights, contact us at:

[email protected]