Privacy Notice

1. Who we are

Musebit ("Musebit", "we", "us") operates Musebit AI, an AI product operating system available at ai.musebit.in. Musebit AI is a product of Musebit Agency. For all data protection matters you can reach us at info@musebit.in.

2. Our role

Musebit is the data controller for personal data processed through Musebit AI. We decide what data is collected, why, and how it is protected. Where we sell subscriptions internationally, our Merchant of Record acts as a separate controller for the payment transaction.

3. Data we collect and why

• Account data (name, email address, login credentials or social sign-in identifiers, profile settings) — to create and secure your account. Legal basis: performance of a contract.
• Workspace content (prompts, uploaded files, URLs, generated research reports, design outputs, project memory) — to provide the service you requested. Legal basis: performance of a contract.
• Support messages — to answer your questions. Legal basis: performance of a contract and legitimate interests.
• Usage and telemetry (features used, request counts, timestamps, error logs, device and browser identifiers, IP address) — for security, abuse prevention, reliability and product improvement. Legal basis: legitimate interests.
• Billing records (plan, subscription status, invoice references) — to manage entitlements and comply with tax and accounting law. Legal basis: contract and legal obligation. Card and bank details are never collected or stored by us.
• Marketing preferences — to send product updates if you ask for them. Legal basis: consent, withdrawable at any time.

4. Who we share data with

• Service providers and subprocessors: cloud hosting and database providers, AI model providers used to generate outputs, email delivery, analytics and support tooling.
• Our Merchant of Record, Paddle.com Market Ltd, for sale of subscriptions, subscription management, payments, tax compliance and invoicing; and Razorpay for payments made in India.
• Professional advisers such as legal, audit and accounting providers.
• Authorities and regulators where disclosure is required by law, or to establish or defend legal claims.
• A buyer or successor in the event of a merger, acquisition or reorganisation of our business.

We do not sell personal data.

5. International transfers

We operate from India and use providers located in India, the EEA, the UK and the United States. Where personal data leaves the UK or EEA, we rely on adequacy decisions or on Standard Contractual Clauses together with appropriate technical safeguards such as encryption in transit and at rest.

6. Retention

Account and workspace data is retained while your account is active. If you delete your account, we delete or anonymise your workspace content within 30 days, except where we must keep records longer — for example billing and tax records, which are kept for the period required by law. Security and error logs are kept for up to 12 months.

7. Your rights

Subject to applicable law you may request access to your data, correction of inaccurate data, erasure, restriction of processing, a portable copy, and you may object to processing based on legitimate interests or withdraw consent at any time. You also have the right to complain to your data protection authority — in the UK the ICO, in the EEA your national supervisory authority. Email info@musebit.in and we will respond within one month.

8. Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest, row-level access controls scoped to your account and workspace, least-privilege administrative access, and monitoring of authentication events. No system is perfectly secure, so please use a strong, unique password.

9. Cookies

We use strictly necessary cookies and local storage for sign-in sessions, theme and workspace preferences. We also use analytics cookies (Google Analytics 4) to understand aggregate product usage. We do not use advertising cookies. You can clear or block cookies in your browser settings; blocking essential cookies will prevent sign-in.

10. Changes

We will update this notice when our practices change and will revise the date above. Material changes will be notified by email or in-product.