Legal

Privacy Policy

Last updated: 25 May 2026

1. Who We Are

Musos.app is a live music discovery platform connecting gig-goers with grassroots live music events across the UK.

The data controller for all personal data collected through this website is the operator of Musos.app. If you have any questions about this policy or about how your personal data is handled, please get in touch:

Email: hello@musos.app
Website: musos.app

2. What Personal Data We Collect and Why

If you submit a gig listing

When you submit a gig listing we collect your contact email address, the venue name and address, the band or act name, event details (date, time, price, genre, description), and a ticket URL if you provide one.

We use this to review your submission, notify you of its approval or rejection, and — if approved — to display the listing publicly on Musos.app.

Our lawful basis is that processing is necessary to take steps at your request before providing the service you have asked for (UK GDPR Article 6(1)(b)), and our legitimate interest in moderating the platform (Article 6(1)(f)).

If you submit a gig listing by email

Venues may also submit gig listings by emailing details to gigs@musos.app. When you submit by email, we collect the email address of the sender, the venue name, the band or act name, and the event details contained in the email or any attachments.

We use this information to process, review and, if approved, publish the listing on Musos.app. The submission email and its contents are processed automatically and then reviewed by the platform operator. Emails are accessed via a secure connection and are not stored beyond the period needed for processing.

Our lawful basis is that processing is necessary to take steps at your request before providing the service you have asked for (Article 6(1)(b)).

If you create a band or musician profile

When you create a profile we collect the band or act name, a contact email address, genre, location (town/city), a bio, website or social media links you choose to provide, and whether you are available for bookings.

This information is displayed publicly on Musos.app. Please do not include sensitive personal information — such as health details, financial information or religious beliefs — in your profile.

Our lawful basis is that processing is necessary to provide the service you have requested (Article 6(1)(b)).

If you create a musician or dep directory listing

If you list yourself as available for dep or session work, you are doing so in a professional capacity as a performer or music professional. Information you submit, including your act name, instrument, genre, location, experience and availability, will be displayed publicly as a professional directory listing. Please do not include sensitive personal information in any free-text fields such as your bio. You can request removal of your listing at any time by emailing hello@musos.app.

Our lawful basis is that processing is necessary to provide the service you have requested (Article 6(1)(b)). Individuals listing themselves for professional work would reasonably expect that information to be visible to other music professionals, venues and bookers.

If your venue appears on the platform

We may contact venues whose publicly listed events appear on or are being considered for the Musos.app platform, using contact details published on their own websites. If you would prefer not to be contacted or not to be listed on Musos.app, please email hello@musos.app and we will action your request immediately.

Our lawful basis is our legitimate interest in promoting grassroots live music and providing accurate event information to the public (Article 6(1)(f)).

Venue and event data we add ourselves

We may add venue and event information to Musos.app that is already publicly available, such as details published on venue websites or public event listings. Our lawful basis for this is legitimate interests (Article 6(1)(f)). Venues benefit from the free visibility and would reasonably expect publicly listed information to appear in relevant directories.

Where we add this information without direct contact with the venue, we rely on the exemption at Article 14(5)(b) from the requirement to notify data subjects directly, on the grounds that doing so would involve a disproportionate effort. This privacy policy is publicly accessible and provides the required transparency.

Venues and event organisers can request removal of their listing at any time by contacting hello@musos.app and we will action this promptly.

Automated collection of publicly available event information

We use automated tools to collect publicly available event information directly from venue websites, including event dates, times, artist names, and ticket links. These tools run on a scheduled basis and collect only from venue websites directly in order to support their promotion of live music events. We do not scrape or collect data from third party ticketing platforms or aggregator sites, and we do not collect or store personal data through this process. Source URLs are retained so users can verify information directly with the venue. If you are a venue or artist and would like your information removed from our listings, please contact us at hello@musos.app.

Promotional content on social media

Gig listings, band profiles and venue details published on Musos.app may be featured in promotional videos and other content posted on Musos.app's social media accounts, including TikTok and Instagram. This includes the names of acts, venues, dates, prices and other event details you have submitted or that appear on venue websites.

Our lawful basis for this is legitimate interests (Article 6(1)(f)). The purpose of submitting a gig listing or band profile is to promote your events and visibility. Social media promotion is a direct extension of that purpose, and we consider it reasonable for anyone who has submitted details for public listing to expect that those details may be used in promotional content on social platforms. The same applies to publicly available event information collected from venue websites: venues publish that information to promote their events, and social media amplification supports that same purpose.

If you do not wish your name or details to appear in Musos.app social media content, please email hello@musos.app and we will exclude you from future posts. This is your right to object to processing based on legitimate interests under Article 21 UK GDPR, and we will honour it without requiring any justification from you.

If you submit a deletion request

When you ask us to remove a listing, we collect your email address to verify you are the original submitter. We use an email token system to confirm your identity before removing the listing. We keep this email address for 30 days after the listing is deleted, then we delete it.

Our lawful basis is our legitimate interest in preventing unauthorised removal of listings (Article 6(1)(f)).

If you are browsing the platform

You do not need to create an account or provide any personal information to browse Musos.app. We do not currently use analytics tools that track your browsing behaviour.

3. Cookies

Musos.app uses a small number of strictly necessary cookies that are essential for the site to work. These do not track your behaviour and do not require your consent.

CookiePurpose and duration
Session cookies (Next.js)Keep your session active while you browse. Deleted when you close your browser.
Security cookiesProtect the site from cross-site request forgery. Deleted when you close your browser.

We do not currently use analytics, advertising or tracking cookies. If we introduce these in the future, we will update this policy and obtain your consent before placing any non-essential cookies on your device.

4. Who We Share Your Data With

We use trusted third-party service providers to operate the platform. They process personal data only under our instruction and are bound by data processing agreements:

ProviderRole and location
SupabaseDatabase storage. EU servers in Ireland. Data processing agreement in place.
VercelWebsite hosting. US company, EU deployment. Standard contractual clauses cover any international data transfers.
ResendTransactional email delivery. EU region selected. Data processing agreement in place.

We use the TikTok Content Posting API to publish promotional videos to Musos.app's own TikTok account. This does not involve sharing any end-user personal data with TikTok. Content posted to TikTok may include event details (act names, venue names, dates) as described in the promotional content section above.

We do not sell your personal data. We do not share it with advertisers. We will only share your data with others if required by law or a court order.

5. International Transfers

Your data is primarily stored on servers within the European Union (Ireland). Where providers with US operations are involved (such as Vercel), Standard Contractual Clauses or equivalent UK International Data Transfer Agreements are in place to protect your data.

6. How Long We Keep Your Data

Data typeRetention period
Approved gig listings and associated contact emailDuration of the event plus 12 months
Rejected submission data including contact email90 days from rejection, then deleted
Gig listing submission emails (email ingestion route)Processed and then deleted within 30 days of receipt
Band and musician profile dataWhile the profile is active plus 12 months after a deletion request
Deletion request verification email30 days after the listing is removed, then deleted

7. Your Rights

Under UK data protection law you have the following rights regarding your personal data:

RightWhat it means
Right to accessRequest a copy of the personal data we hold about you
Right to rectificationAsk us to correct inaccurate information
Right to erasureAsk us to delete your data where we no longer have a lawful reason to keep it
Right to restrict processingAsk us to pause processing in certain circumstances
Right to objectObject to processing we carry out on the basis of legitimate interests
Right to data portabilityWhere applicable, request your data in a portable, machine-readable format

To exercise any of these rights, please email hello@musos.app. We will respond within one calendar month. There is no charge for making a request.

You also have the right to request removal of a gig listing using the deletion tool on the platform, or to request removal of a band profile by emailing hello@musos.app.

If you are unhappy with how we have handled your data or a request, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

8. Changes to This Policy

We may update this policy from time to time. The date at the top shows when it was last revised. We will post a notice on the website if we make significant changes.

9. Contact

For any data protection query, please email hello@musos.app.