Privacy Policy

Last updated: 01st March 2026
← Back to Musentra

This Privacy Policy describes how DroomMusic collects, uses, and protects information when users access Musentra.

1. Information We Collect

Account Information When users create an account, we may collect: • Email address • Hashed password (email/password registrations only) • Name (Google Sign-In users only) • Google profile picture URL (Google Sign-In users only) Optional Information Phone number — only if voluntarily provided by the user for account recovery purposes. System Information Session authentication tokens and IP address. IP address is used temporarily for authentication rate limiting and security only; it is not logged, retained, or linked to user identity.

2. Information Stored Only on Your Device

The following preferences are stored locally on your device and are never transmitted to Musentra's servers. DroomMusic cannot access this information: • Industry role selection • Regional content focus • Topic interest categories • Interface preferences (light/dark mode) • Onboarding completion status These preferences are used solely to personalise content ranking and display within the app, on-device.

3. Information We Do Not Collect

Musentra does not collect: • Location or GPS data • Contacts or address book data • Camera or microphone data • Financial information or payment details • Biometric identifiers • Advertising identifiers (at launch; see Section 9 for future plans)

4. How Information Is Used

Information collected is used to: • Authenticate users and maintain secure login sessions • Enable article saving and syncing across user devices • Prevent abuse, unauthorised access, and rate-limit authentication requests • Improve application stability and performance Musentra does not sell user data to third parties.

5. Third-Party Services

Musentra uses the following third-party services, each of which processes data in accordance with its own privacy policy: OpenAI — AI summarisation of publicly available article text (article title, URL, and text are sent) Google OAuth — User authentication via Google Sign-In (name, email, and profile picture URL are received from Google) Twilio — SMS one-time passcode for optional phone verification (phone number sent only if provided) Replit — Cloud hosting and PostgreSQL database infrastructure (all server-side account and session data)

6. Content Processing

To generate briefings, Musentra sends publicly available article titles, URLs, and text to OpenAI's API. Only the resulting AI-generated summaries and source links are stored in Musentra's database. Original article text is not permanently stored.

7. Data Security

DroomMusic applies reasonable, industry-standard security practices including: • Cryptographic hashing of passwords (bcrypt) • Secure session token management • Restricted database access controls • HTTPS for all data in transit No system can guarantee absolute security. In the event of a data breach affecting user information, DroomMusic will take appropriate steps to notify affected users as required by applicable law.

8. Data Retention

Account information is retained for as long as the account remains active. Saved article references are retained until deleted by the user or upon account deletion. Session tokens expire automatically. IP addresses captured for rate limiting are not retained beyond the active session. Users may request full account deletion and data erasure by contacting: contact@droommusic.com. Requests will be processed within a reasonable timeframe.

9. Future Analytics and Advertising

Musentra does not currently use analytics tools, crash reporting services, or advertising networks. Future versions of the Service may introduce: • Crash reporting and error monitoring (anonymised technical diagnostics) • Behavioural analytics (aggregated and anonymised usage data) • Display advertising (which may involve third-party ad networks and anonymised device identifiers) If any of these are introduced, this Privacy Policy will be updated before implementation.

10. Children's Privacy

Musentra is not intended for individuals under the age of 18 and does not knowingly collect personal data from minors. If we become aware that a minor has created an account, we will delete the account and associated data promptly.

11. International Users

Musentra is accessible globally. By using the Service, users acknowledge that their data may be processed and stored in jurisdictions outside their country of residence, including India and the countries where our third-party service providers operate.

12. Changes to This Policy

DroomMusic reserves the right to update this Privacy Policy at any time. Continued use of the Service following notification of material changes constitutes acknowledgement of the revised Policy.

13. Contact

For privacy-related inquiries or data deletion requests: DroomMusic Email: contact@droommusic.com