Privacy Policy

1. Who is the data controller?

The data controller for personal data processed in connection with the Moozz platform is Muzico Innovations GmbH, CHE-475.033.787, Dübendorf, Switzerland. You can reach our data-protection contact at privacy@moozz.com.

2. What we collect

2.1 Account and identity data

• Name and email address
• Phone number (for SMS verification via Twilio)
• Plan / account type (free, indie, org, enterprise)
• Authentication and session metadata

2.2 Payment data

Subscription and top-up payments are processed by Stripe Payments Europe, Ltd.. Moozz does not store full card numbers; we store only the Stripe customer ID, subscription ID, last-four digits of the card, and billing country as needed to operate your account.

2.3 Content data

• Audio files you upload (MP3, WAV, FLAC — up to 50 MB)
• Lyrics, song metadata (title, artist name, ISRC, ISWC, release year, label, catalog reference)
• Rights Trail data (ownership declarations, signatures, contributor entries, territory scope)
• Generated artefacts (translated audio, translated lyrics, RT1/RT2 PDF certificates)

2.4 AI training data ("HITL")

When you (or a community contributor) edit an AI-generated lyric, the original AI output, the human correction, the language pair, and the contributor identifier are captured and used to improve the Moozz model.

2.5 Distribution data (where you opt in)

If you choose to distribute via Moozz, we share your track, metadata, ISRC/UPC identifiers, and royalty-split configuration with Revelator.io (our distribution-services provider) and with the streaming platforms you select (Spotify, Apple Music, YouTube Music, Amazon Music). Royalty payouts are processed via Stripe Connect.

2.6 Technical data

• IP address, browser type, device identifiers
• Pages visited, actions taken, error logs
• Cookies and similar technologies (see §6 below)

3. How we use your data

• To provide the platform: account creation, authentication, translation, distribution, royalty calculation and payout.
• To improve the platform: aggregated analytics, model training (HITL data — see §2.4).
• To communicate with you: service emails, billing notices, security alerts. Marketing emails only if you opt in.
• To comply with law: tax records, anti-fraud, responses to lawful requests from authorities.

4. Lawful bases (GDPR Article 6)

• Performance of a contract: account, payment, translation, distribution.
• Legitimate interests: security, fraud prevention, product improvement (subject to your right to object).
• Consent: marketing emails, optional analytics cookies, HITL training data (where counsel confirms separate consent is required).
• Legal obligation: tax, anti-money-laundering, court orders.

5. Data sharing and processors

We share your data only with the processors and partners listed below, each bound by a data-processing agreement:

• Stripe — payments, subscriptions, royalty payouts (Stripe Connect).
• Twilio — SMS verification during enrollment.
• Revelator.io — distribution to DSPs (only if you opt in).
• Microsoft Azure — hosting and audio storage (Switzerland and EU regions).
• SendGrid / Postmark (TBC) — transactional email.
• Anthropic / OpenAI (TBC) — AI translation infrastructure.

6. Cookies and tracking

Moozz uses strictly-necessary cookies for authentication and session management. Optional analytics or marketing cookies, where used, are loaded only after you provide consent through our cookie banner. You can change your cookie choices at any time from the cookie-settings link in the page footer.

7. Data retention

• Account data: retained while your account is active and for 12 months after closure (longer where required by tax/anti-money-laundering law).
• Audio uploads: retained while the linked translation is active. Deleted on request, subject to subsection below.
• Rights Trail certificates (RT1/RT2): retained indefinitely as legal records of declared rights, except where deletion is mandated by law.
• HITL training data: retained as anonymised aggregate data for as long as needed to improve the model. Personal identifiers are removed where feasible.
• Payment records: retained for 10 years (Swiss accounting law).

8. Your rights

Under GDPR, Swiss DSG, and other applicable laws, you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten") — subject to retention exceptions in §7.
• Restrict or object to certain processing (including HITL training).
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time (without affecting prior lawful processing).
• Lodge a complaint with your supervisory authority — for EU users, your national DPA; for Swiss users, the Federal Data Protection and Information Commissioner (FDPIC).

To exercise any of these rights, email privacy@moozz.com. We will respond within 30 days.

9. International transfers

Your data is primarily stored in Switzerland and the EU. Where transfers outside these regions are necessary (for example to a sub-processor), we use the European Commission's Standard Contractual Clauses (SCCs) and Swiss-equivalent safeguards.

10. Security

We implement appropriate technical and organisational measures to protect your data, including TLS encryption in transit, encrypted storage at rest, access controls, and regular security reviews. No system is perfectly secure; if a breach affects your data, we will notify you and the relevant authorities in accordance with applicable law.

11. Children

Moozz is not intended for children under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact privacy@moozz.com and we will take action to delete the account.

12. Changes to this Privacy Policy

We may update this policy. Material changes will be communicated by email or through the platform at least thirty (30) days before they take effect.

13. Contact

Data-protection enquiries: privacy@moozz.com
Postal: Muzico Innovations GmbH, Dübendorf, Switzerland