Privacy & cookies

Muster.Band helps bands run their gigs, rehearsals, setlists and money in one place. This page explains what we store, why we store it, and what you can do about it. We've tried to keep it short and plain.

Who we are

Muster.Band is run by HRP Workspaces, based in the UK. We're the "controller" for the personal data described here.

For any privacy question or request, email hrp.workspaces@gmail.com. A person reads it.

What we store on your device

We don't use a cookie banner, because we only store what's needed to make the site work. Here's everything:

No advertising and no third-party analytics. We don't use Google Analytics or any other analytics service, and nothing on this site follows you to other websites. We do keep our own simple count of how visitors get from the home page to signing up (see How we count sign-ups), which stores nothing on your device. If any of that changes, we'll update this page first and ask for your consent where the law requires it.

Our fonts are served from our own site, not from Google, so loading a page doesn't tell any third party you visited. The exception is the sign-in and sign-up pages: Google's sign-in button loads from Google there, so Google can see that you opened them, whether or not you use it.

Light and dark mode follow your device's own setting. We don't store a preference for it.

What we hold in the app

About you, if you have an account:

• your email address, which is how you sign in
• the display name you choose
• a record that you accepted our terms: which version, and when, from when you created your account and each time you pay for Pro
• if you turn on notifications, each device's notification address and keys, and a label such as “iPhone · Safari” so you can tell your devices apart
• if you set up a calendar feed: when you set it up, when a calendar app last checked it, a count of recent checks (so a link that's checked far too often can be slowed down), and a record of any links you've replaced or turned off. We keep only a scrambled copy of the link itself, not the link
• for your calendar feed, a short copy of each gig or rehearsal that has left it (band name, venue or title, and times), so your calendar app can show it as cancelled instead of leaving it there

About your band, entered by you or your bandmates:

• the band's name and roster: each member's name and, if someone adds them, their contact email and phone number
• gigs: dates, venues, call times, fees, who's playing and what they're paid
• rehearsals, tasks, songs and setlists, and whether each person can make each rehearsal and gig
• dates each person has blocked out as dates they can't play, with any note added
• the band fund: expenses, payments in and out, and who paid them
• the band's plan (Free or Pro) and, for a Pro band, its billing status and its Stripe customer reference. Stripe holds the billing details themselves.

We hold this for one reason: to provide the service you signed up for. We don't sell it, we don't use it for advertising, and we don't share it with anyone except the providers listed below that run the service for us.

Who can see what. Everything about a band is visible to that band's members. Band leaders can see and edit the whole roster, including members' contact details. A gig's call sheet can be shared by link: anyone with that link can see the gig's date, venue, times and setlist, but not its fees, notes or who's being paid what.

Your calendar feed. Your calendar feed link is private to you. Anyone you give it to, and any calendar app you add it to (such as Google, Apple or Outlook, which fetch it under their own privacy terms), can see the dates, venues, times and band names of your gigs and rehearsals, but not fees, notes, contacts or who's playing. You can replace the link or turn the feed off on your Account page, and the old link stops working straight away.

Blocked dates and your other bands. Dates you block out, and their notes, are visible to everyone in that band, and only that band. If you're on the roster for a confirmed gig in one of your bands, your other bands on Muster see that you have another gig that day. They don't see which band, where, the times or anything else about it.

People on a roster without an account. A band leader can add someone to the roster (say, a dep) before that person signs up. If that's you and you'd like your details removed, ask the band leader or email us.

How we count sign-ups

To see where people give up on the way to signing up, we count six steps: viewing the home page, tapping Start free, viewing the sign-up page, choosing Google or email, creating an account, and creating a first band.

Each step is saved in our own database with the time, a random visit number, the name of the ad or link you came from if that link carried one, and whether you were browsing inside the Facebook or Instagram app. The visit number is made up when the page opens and is kept only in the open page, so it's gone when you close or reload it. It also travels in the sign-in link, so we can tell an account came from that visit.

We don't keep your IP address or details of your device, nothing is stored on your device, and none of it is sent to anyone else. The steps before you create an account aren't linked to you. The last two, creating an account and a first band, are linked to your account. If you delete your account, that link is removed and only the anonymous count remains. We keep these records for 12 months, then delete them.

Who runs the service for us

Your data is stored in London. Where a provider handles data outside the UK, they do it under the UK's international data transfer safeguards (such as the UK Addendum to the EU Standard Contractual Clauses).

Stripe only has data if a band leader upgrades a band to Pro. Your card details go straight to Stripe and never touch our servers. The rules for paying are in our terms.

Your rights

You can ask us to:

• see the personal data we hold about you
• correct anything that's wrong (you can change your display name yourself on your account page)
• delete it (see below; you can delete your account yourself)
• stop or limit how we use it, or object to it

Email hrp.workspaces@gmail.com. We'll reply within one month.

If you're unhappy with how we've handled your data, tell us first at the same address. We'll acknowledge your complaint within 30 days and tell you what we're doing about it. If you're still not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Deleting your account

You can delete your account from your Account page. When you do:

• your sign-in, email address, display name, notification subscriptions and calendar feed are deleted straight away
• any band where you're the only member is deleted with everything in it
• if you're the only leader of a band that has other members, you'll need to make someone else a leader first, so the band isn't left without one
• in bands that carry on without you, your entry on the roster stays, along with the gigs, payments and records it's part of. That's the band's history, and the rest of the band still needs it to make sense of past gigs and the fund. A band leader can edit or remove your roster entry, or you can email us and we'll remove your contact details from it.

Changes

If we change this page in a way that matters, we'll update the date at the top. If the change affects how we use data you've already given us, we'll tell signed-in users in the app.