Privacy policy

Who this covers

Artists who have an account, and their clients, whose details an artist keeps in the app or who use an artist's inquiry form or client portal. Each artist's business is kept separate: one business can never see another business's data.

What we collect

• Account details: name, email address and a securely hashed password.
• Business details the artist enters: services, prices, settings, logo and business profile.
• Client details the artist or client enters: names, contact details, event details, notes, photos, quotes, contracts, signatures and payment records.
• Emails forwarded to a business's private forwarding address, and emails the artist sends from the app.
• Basic technical records needed to run and protect the service, such as sign-in times and IP addresses used for rate limiting and security logs.

How we use it

Only to provide the service to the artist: showing their inquiries and clients, preparing quotes and contracts, sending the emails they write, and keeping the service secure and working. We do not sell data, show ads, or share data with advertisers.

Gmail and Google account data

An artist can connect their Gmail or Google Workspace account so the app can send emails they write from their own address. The app asks Google only for permission to send email and to know which address was connected. It does not read the artist's inbox.

An artist can also connect, separately and only if they choose to:

• Google Calendar, with permission to see (not change) their calendar events. The app copies the title, time and place of upcoming events so they show next to the artist's bookings, to help avoid double-booking. It never adds, changes or deletes events.
• Google Forms, with permission to see only the files the artist picks in Google's file picker. The artist picks their inquiry form, and the app reads new responses to that one form to create inquiries. It cannot see any other file in their Google Drive, and it never changes the form.

• Each connection is used only for the purpose above: sending emails the artist writes or approves, showing their calendar, or turning form responses into inquiries.
• Connection tokens are encrypted on our servers and never shared with anyone. When the artist picks a form, their own browser briefly receives a short-lived key so Google's file picker can show their forms.
• Copies of calendar events are replaced on every check and deleted when the artist disconnects their calendar.
• The artist can disconnect at any time in the app, which deletes the tokens and withdraws the app's access at Google.
• Data from Google is not used for advertising, not sold, not used to train AI models, and not read by people except with the artist's permission, for security, or where the law requires.

MeetMUA's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Outlook and Microsoft account data

An artist can connect their Outlook, Hotmail or Microsoft 365 account, separately and only if they choose to:

• Outlook email, with permission to send email as the artist and to know which address was connected. The app sends only the emails the artist writes or approves. It does not read their mailbox.
• Outlook calendar, with permission to see (not change) their calendar events. The app copies the title, time and place of upcoming events so they show next to the artist's bookings. It never adds, changes or deletes events.

Connection tokens are encrypted on our servers and never shared. Copies of calendar events are replaced on every check and deleted when the artist disconnects. Disconnecting in the app deletes the tokens; the artist can also remove MeetMUA's access at any time in their Microsoft account under Privacy, Apps and services. Data from Microsoft is not used for advertising, not sold and not used to train AI models.

Service providers

We use a small number of providers to run the service: Cloudflare (hosting and file storage), Neon (database), Stripe (card payments, when an artist turns them on), Google and Microsoft (sending email, showing calendar events and reading form responses, when an artist connects those) and Anthropic (AI contract drafting, when an artist uses it; a home address or payment details are never sent). They process data only to provide their part of the service.

Keeping and deleting data

Data is kept while the artist's account is active. Emails from unknown senders that the artist doesn't keep are removed after 30 days. An artist can ask us to export or delete their business's data; clients can ask the artist they worked with, or us.

Security

Data is encrypted in transit, connection tokens are encrypted at rest, every business's data is isolated in the database, and access is limited to what is needed to run the service.

Contact

Questions or requests: privacy@meetmua.com.