Privacy Policy

At Metrognome, we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our studio booking platform and services.

Our Privacy Commitment: We maintain a strict no-sell, no-share policy. Your personal data is used exclusively for internal operations, service delivery, and enhancing your experience with our platform.

Information We Collect

Personal Information

When you create an account or use our services, we may collect:

• Name, email address, and phone number
• Billing address and payment information
• Profile information including band/artist name and other contact details
• Account credentials and authentication information
• Communications with our support team

Usage Information

We automatically collect information about how you use our platform:

• Booking history and studio usage patterns
• Website navigation and interaction data
• Device information, IP address, and browser type
• Session recordings for security and improvement purposes
• Location data when accessing our facilities

Payment Information

Payment processing is handled securely through Stripe. We store limited payment information such as the last four digits of your card and billing address. Full payment details are processed and stored by our payment processor in compliance with PCI DSS standards.

How We Use Your Information

We use your personal information exclusively for internal purposes, including:

Service Operations

• Processing bookings and managing your account
• Facilitating access to artist studios and facilities
• Processing payments and managing billing
• Providing customer support and resolving issues
• Maintaining facility security and safety

Communication

• Sending booking confirmations and reminders
• Providing important account and service updates
• Responding to your inquiries and support requests
• Sending operational notifications and policy changes

Marketing and Improvement

• Personalizing your experience on our platform
• Analyzing usage patterns to improve our services
• Sending promotional offers and event notifications (with your consent)
• Developing new features and services
• Conducting market research and analytics

Legal and Security

• Complying with legal obligations and regulations
• Protecting against fraud and unauthorized access
• Enforcing our terms of service and facility policies
• Resolving disputes and investigating violations

Information Sharing and Disclosure

No-Sell, No-Share Policy: We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Your data remains confidential and is used solely for providing and improving our services.

We may share your information only in the following limited circumstances:

Service Providers

We work with trusted third-party service providers who assist us in operating our platform and providing services to you. These providers have access to your information only as necessary to perform their functions and are contractually obligated to maintain confidentiality:

• Payment processing (Stripe)
• Email and communication services
• Cloud hosting and data storage
• Analytics and performance monitoring
• Customer support tools

Anonymized Aggregated Data

We may disclose a portion of your information in an anonymized and aggregated format for informational purposes. This may include, but is not limited to:

• Disclosing the number of musicians using our facilities and services
• Disclosing what types of services our customers use and for how long
• Disclosing what future services our customers are most interested in
• Disclosing how many of which type of instruments our customers are playing
• Disclosing other anonymized information aggregated to help secure strategic partnerships for the benefit of the company and our customers such as discounts on equipment and services and special access for members to live music and other similar benefits

Legal Requirements

We may disclose your information when required by law, such as in response to subpoenas, court orders, or other legal processes, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction. We will notify you of any such change in ownership or control of your personal information.

Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption of data in transit and at rest using SSL/TLS protocols
• Secure authentication and access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection and privacy practices
• Secure data centers with physical and digital safeguards
• Regular backup and disaster recovery procedures

While we take reasonable measures to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to improve our security practices.

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

• Request access to the personal information we hold about you
• Obtain a copy of your data in a portable format
• Review your account information through your member dashboard

Correction and Updates

• Update your profile and contact information at any time
• Request correction of inaccurate or incomplete information
• Modify your communication preferences

Deletion and Restriction

• Request deletion of your account and associated data
• Object to certain types of data processing
• Restrict how we use your information in specific circumstances

Marketing Communications

• Opt out of promotional emails and marketing communications
• Adjust notification preferences in your account settings
• Unsubscribe using the link in any marketing email

To exercise these rights, please contact us at privacy@metrognome.com or through your account settings. We will respond to your request within 30 days.

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy:

• Account information: Retained while your account is active
• Booking history: Retained for 7 years for operational and tax purposes
• Payment information: Retained according to financial regulations
• Support communications: Retained for 3 years
• Marketing data: Retained until you opt out or for 2 years of inactivity

When you close your account, we will delete or anonymize your personal information within 90 days, except for information we are required to retain by law or for legitimate business purposes.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform:

Essential Cookies

Required for the platform to function properly, including authentication, security, and basic functionality. These cookies cannot be disabled.

Performance Cookies

Help us understand how you use our platform to improve performance and user experience. This includes analytics tools like Google Analytics.

Functional Cookies

Remember your preferences and settings to provide a personalized experience.

You can manage cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may affect platform functionality.

Third-Party Services

Our platform integrates with third-party services to provide enhanced functionality. These services have their own privacy policies:

• Stripe: Payment processing (PCI DSS compliant)
• Supabase: Database and authentication services
• Vercel: Web hosting and content delivery
• Sentry: Error monitoring and performance tracking

We encourage you to review the privacy policies of these third-party services to understand how they handle your information.

International Data Transfers

Your information may be processed and stored in countries other than your country of residence, including the United States. We ensure that any international transfers comply with applicable data protection laws and include appropriate safeguards to protect your information.

Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Displaying a notice on our platform

Your continued use of our services after any changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.