Privacy Policy
Last updated: 25 May 2026
1. Who We Are
Musos.app is a live music discovery platform connecting gig-goers with grassroots live music events across the UK.
The data controller for all personal data collected through this website is the operator of Musos.app. If you have any questions about this policy or about how your personal data is handled, please get in touch:
Email: hello@musos.app
Website: musos.app
2. What Personal Data We Collect and Why
If you submit a gig listing
When you submit a gig listing we collect your contact email address, the venue name and address, the band or act name, event details (date, time, price, genre, description), and a ticket URL if you provide one.
We use this to review your submission, notify you of its approval or rejection, and — if approved — to display the listing publicly on Musos.app.
Our lawful basis is that processing is necessary to take steps at your request before providing the service you have asked for (UK GDPR Article 6(1)(b)), and our legitimate interest in moderating the platform (Article 6(1)(f)).
If you submit a gig listing by email
Venues may also submit gig listings by emailing details to gigs@musos.app. When you submit by email, we collect the email address of the sender, the venue name, the band or act name, and the event details contained in the email or any attachments.
We use this information to process, review and, if approved, publish the listing on Musos.app. The submission email and its contents are processed automatically and then reviewed by the platform operator. Emails are accessed via a secure connection and are not stored beyond the period needed for processing.
Our lawful basis is that processing is necessary to take steps at your request before providing the service you have asked for (Article 6(1)(b)).
If you create a band or musician profile
When you create a profile we collect the band or act name, a contact email address, genre, location (town/city), a bio, website or social media links you choose to provide, and whether you are available for bookings.
This information is displayed publicly on Musos.app. Please do not include sensitive personal information — such as health details, financial information or religious beliefs — in your profile.
Our lawful basis is that processing is necessary to provide the service you have requested (Article 6(1)(b)).
If you create a musician or dep directory listing
If you list yourself as available for dep or session work, you are doing so in a professional capacity as a performer or music professional. Information you submit, including your act name, instrument, genre, location, experience and availability, will be displayed publicly as a professional directory listing. Please do not include sensitive personal information in any free-text fields such as your bio. You can request removal of your listing at any time by emailing hello@musos.app.
Our lawful basis is that processing is necessary to provide the service you have requested (Article 6(1)(b)). Individuals listing themselves for professional work would reasonably expect that information to be visible to other music professionals, venues and bookers.
If your venue appears on the platform
We may contact venues whose publicly listed events appear on or are being considered for the Musos.app platform, using contact details published on their own websites. If you would prefer not to be contacted or not to be listed on Musos.app, please email hello@musos.app and we will action your request immediately.
Our lawful basis is our legitimate interest in promoting grassroots live music and providing accurate event information to the public (Article 6(1)(f)).
Venue and event data we add ourselves
We may add venue and event information to Musos.app that is already publicly available, such as details published on venue websites or public event listings. Our lawful basis for this is legitimate interests (Article 6(1)(f)). Venues benefit from the free visibility and would reasonably expect publicly listed information to appear in relevant directories.
Where we add this information without direct contact with the venue, we rely on the exemption at Article 14(5)(b) from the requirement to notify data subjects directly, on the grounds that doing so would involve a disproportionate effort. This privacy policy is publicly accessible and provides the required transparency.
Venues and event organisers can request removal of their listing at any time by contacting hello@musos.app and we will action this promptly.
Automated collection of publicly available event information
We use automated tools to collect publicly available event information directly from venue websites, including event dates, times, artist names, and ticket links. These tools run on a scheduled basis and collect only from venue websites directly in order to support their promotion of live music events. We do not scrape or collect data from third party ticketing platforms or aggregator sites, and we do not collect or store personal data through this process. Source URLs are retained so users can verify information directly with the venue. If you are a venue or artist and would like your information removed from our listings, please contact us at hello@musos.app.
Promotional content on social media
Gig listings, band profiles and venue details published on Musos.app may be featured in promotional videos and other content posted on Musos.app's social media accounts, including TikTok and Instagram. This includes the names of acts, venues, dates, prices and other event details you have submitted or that appear on venue websites.
Our lawful basis for this is legitimate interests (Article 6(1)(f)). The purpose of submitting a gig listing or band profile is to promote your events and visibility. Social media promotion is a direct extension of that purpose, and we consider it reasonable for anyone who has submitted details for public listing to expect that those details may be used in promotional content on social platforms. The same applies to publicly available event information collected from venue websites: venues publish that information to promote their events, and social media amplification supports that same purpose.
If you do not wish your name or details to appear in Musos.app social media content, please email hello@musos.app and we will exclude you from future posts. This is your right to object to processing based on legitimate interests under Article 21 UK GDPR, and we will honour it without requiring any justification from you.
If you submit a deletion request
When you ask us to remove a listing, we collect your email address to verify you are the original submitter. We use an email token system to confirm your identity before removing the listing. We keep this email address for 30 days after the listing is deleted, then we delete it.
Our lawful basis is our legitimate interest in preventing unauthorised removal of listings (Article 6(1)(f)).
If you are browsing the platform
You do not need to create an account or provide any personal information to browse Musos.app. We do not currently use analytics tools that track your browsing behaviour.
3. Cookies
Musos.app uses a small number of strictly necessary cookies that are essential for the site to work. These do not track your behaviour and do not require your consent.
| Cookie | Purpose and duration |
|---|---|
| Session cookies (Next.js) | Keep your session active while you browse. Deleted when you close your browser. |
| Security cookies | Protect the site from cross-site request forgery. Deleted when you close your browser. |
We do not currently use analytics, advertising or tracking cookies. If we introduce these in the future, we will update this policy and obtain your consent before placing any non-essential cookies on your device.
4. Who We Share Your Data With
We use trusted third-party service providers to operate the platform. They process personal data only under our instruction and are bound by data processing agreements:
| Provider | Role and location |
|---|---|
| Supabase | Database storage. EU servers in Ireland. Data processing agreement in place. |
| Vercel | Website hosting. US company, EU deployment. Standard contractual clauses cover any international data transfers. |
| Resend | Transactional email delivery. EU region selected. Data processing agreement in place. |
We use the TikTok Content Posting API to publish promotional videos to Musos.app's own TikTok account. This does not involve sharing any end-user personal data with TikTok. Content posted to TikTok may include event details (act names, venue names, dates) as described in the promotional content section above.
We do not sell your personal data. We do not share it with advertisers. We will only share your data with others if required by law or a court order.
5. International Transfers
Your data is primarily stored on servers within the European Union (Ireland). Where providers with US operations are involved (such as Vercel), Standard Contractual Clauses or equivalent UK International Data Transfer Agreements are in place to protect your data.
6. How Long We Keep Your Data
| Data type | Retention period |
|---|---|
| Approved gig listings and associated contact email | Duration of the event plus 12 months |
| Rejected submission data including contact email | 90 days from rejection, then deleted |
| Gig listing submission emails (email ingestion route) | Processed and then deleted within 30 days of receipt |
| Band and musician profile data | While the profile is active plus 12 months after a deletion request |
| Deletion request verification email | 30 days after the listing is removed, then deleted |
7. Your Rights
Under UK data protection law you have the following rights regarding your personal data:
| Right | What it means |
|---|---|
| Right to access | Request a copy of the personal data we hold about you |
| Right to rectification | Ask us to correct inaccurate information |
| Right to erasure | Ask us to delete your data where we no longer have a lawful reason to keep it |
| Right to restrict processing | Ask us to pause processing in certain circumstances |
| Right to object | Object to processing we carry out on the basis of legitimate interests |
| Right to data portability | Where applicable, request your data in a portable, machine-readable format |
To exercise any of these rights, please email hello@musos.app. We will respond within one calendar month. There is no charge for making a request.
You also have the right to request removal of a gig listing using the deletion tool on the platform, or to request removal of a band profile by emailing hello@musos.app.
If you are unhappy with how we have handled your data or a request, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
8. Changes to This Policy
We may update this policy from time to time. The date at the top shows when it was last revised. We will post a notice on the website if we make significant changes.
9. Contact
For any data protection query, please email hello@musos.app.