Privacy Policy.
We believe you can have intelligence without being creepy. This policy explains what we collect, why, how long we keep it, and your rights under UK GDPR.
Who we are.
Music Intel Ltd acts as Data Controller for our marketing sites and as Processor for customer sites using our Musicata and Music Intel Pro platforms.
Registered office: Ingles Manor, Castle Hill Avenue, Folkestone, Kent CT20 2RD, United Kingdom. Registered in England and Wales.
Contact: legal@musicintel.co.uk
What we collect.
- IP-derived signals (company / region; raw IPs are not retained permanently).
- User agent and device (browser, OS, mobile or desktop).
- Referrer and UTM (traffic source, campaign metadata).
- On-page behaviour (scroll depth, dwell time, pages visited).
- Optional customer-supplied metadata (e.g. brand logo, industry) where customers enrich their own records.
- Account data (email, name, company) for users who register to use our services.
- Payment information. Payments are processed by Revolut. We do not store full card numbers or full bank details.
Why we collect it.
- Legitimate interests (Article 6(1)(f) UK GDPR): artist promotion, audience analysis, bot filtering, service security.
- Contract (Article 6(1)(b)): to deliver the dashboard and services to paying users.
- Consent: where local law requires it (e.g. marketing cookies), we or our customers obtain and pass consent status.
What we don't collect.
No cross-site tracking cookies. No ad-network sharing. No persistent device fingerprinting beyond session telemetry. No direct personal identifiers for visitors (names, emails, phone) unless you explicitly provide them to us.
Retention.
- Raw visitor telemetry: 30 days maximum, then aggregated.
- Account and billing records: for the life of the account plus statutory retention (e.g. 6 years for invoices in the UK).
- Security and event logs: up to 90 days for abuse detection.
Subprocessors.
We use vetted providers under data processing agreements:
- IP-API Pro (geolocation)
- Brandfetch (logo resolution, B2B only)
- People Data Labs (optional enrichment, only when enabled by customers)
- Revolut (payments processing)
- Cloud hosting and CDN providers in the UK and EU, or with adequate safeguards in place
Third-party platform integrations.
The Musicata platform allows users to connect their own social media and streaming accounts via OAuth 2.0 to view aggregated audience metrics in a unified dashboard. These connections are optional and user-initiated.
Meta (Instagram and Facebook)
- Permissions requested:
pages_show_list,pages_read_engagement,instagram_basic,instagram_manage_insights. - Data accessed: follower counts, page list, public profile information.
- Storage: we cache follower counts and profile metadata only. We do not store posts, comments, stories, or private messages.
- Disconnection: via Settings > Connected Accounts in the dashboard. Cached data is deleted within 24 hours of disconnection.
Google (YouTube and Search Console)
- Data accessed: YouTube subscriber count, Search Console impressions and clicks.
- Storage: aggregate metrics only.
- Disconnection: Settings > Connected Accounts.
Spotify
- Data accessed: follower count, monthly listener count (public data).
- Disconnection: Settings > Connected Accounts.
All connections use OAuth 2.0. We request only the minimum scopes needed to read public and profile metrics. We never post on your behalf, never access private messages or content, never share Connected Platform data with third parties, and never sell your social data.
International transfers.
We host primarily in the UK and EU. Any transfers outside the UK or EU use appropriate safeguards (such as the UK International Data Transfer Addendum, or Standard Contractual Clauses) and risk assessments.
Security.
Encryption in transit (TLS 1.2+), encryption at rest for customer data, least-privilege access, rate limiting, and regular key rotation for production secrets.
Your rights.
Under UK GDPR you can request access, correction, deletion, restriction, objection, or portability. You also have the right to object to processing based on our legitimate interests. Because we don't keep direct identifiers for visitors, we may ask for the IP and approximate visit time to locate data.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK at ico.org.uk. Please contact us first at legal@musicintel.co.uk.
Children.
Our services are not directed at children under 16.
Updates.
If we make material changes, we update the effective date and post a website or dashboard notice.
Questions, requests, or rights enquiries: legal@musicintel.co.uk
