Privacy Policy

1. Information we collect

We collect the following categories of personal information:

• Account information: name, email address, password, profile photo, and (for teachers) biography, qualifications, instruments taught, hourly rate, and location.
• Booking and lesson information: lessons booked, schedules, messages exchanged with teachers or students, lesson history, and reviews.
• Payment information: billing details and payment method tokens processed by our payment provider (Stripe). Full card numbers are never stored on Musably's servers.
• Technical data: IP address, device and browser type, operating system, referring URLs, and usage data collected via cookies and similar technologies.
• Communications: records of your correspondence with our support team.

2. How we use your information

We use your personal information to:

• create and manage your account;
• match students with teachers and facilitate lesson bookings, payments, scheduling, and Zoom video calls;
• process payments and pay teachers their share of lesson fees;
• send transactional emails (booking confirmations, reminders, receipts) and, where permitted, marketing communications you can unsubscribe from at any time;
• provide customer support and respond to enquiries;
• detect, prevent and investigate fraud, abuse and breaches of our Terms of Service;
• comply with our legal obligations.

3. Cookies and similar technologies

Musably does not use analytics or advertising trackers. We use a small number of cookies and browser storage items:

• Essential storage — keeps you signed in, remembers your quiz answers while you complete it, and supports secure payment processing. Stripe, our payment provider, sets its own fraud-prevention cookies when you check out. These are required for the service to work.
• Optional storage — with your consent, we remember how you first found Musably (for example a link from a partner music shop) so we can credit the partner who referred you. This is first-party only: nothing is shared with advertising or analytics networks.

You can accept or decline optional storage when you first visit, and change or withdraw your choice at any time using the "Cookie Preferences" link in the footer. Withdrawing consent stops future optional storage and deletes what was previously stored. You can also control cookies through your browser settings, but disabling essential storage may affect your ability to sign in or check out.

4. Third-party services

We share personal information with trusted third parties only as necessary to provide our service:

• Stripe — processes payments and payouts. Stripe handles your payment information in accordance with its own privacy policy and PCI DSS standards.
• Zoom — powers our video lessons. When you join a lesson, Zoom may collect information such as your name, email, device and connection data, as set out in Zoom's privacy policy.
• Hosting, email and analytics providers who help us operate the platform under contractual confidentiality obligations.

We do not sell your personal information to third parties.

5. International transfers

Some of our service providers (including Stripe and Zoom) are located outside Australia, including in the United States and the European Union. Where we transfer your information overseas we take reasonable steps to ensure it is handled consistently with the APPs.

6. Data retention

We retain personal information for as long as your account is active or as needed to provide our service. We may also retain information to comply with legal, tax, accounting or dispute resolution obligations (typically up to seven years for financial records). When no longer required, information is securely deleted or de-identified.

7. Security

We use industry-standard administrative, technical and physical safeguards to protect your information, including encryption in transit, access controls and regular monitoring. No system is ever completely secure, and we cannot guarantee absolute security.

8. Your rights under the Australian Privacy Act

You have the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your account and associated data, subject to legal retention requirements;
• opt out of marketing communications at any time;
• complain to us about how we have handled your information. If you're not satisfied with our response you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Children

Musably is not directed to children under 13. Students under 18 must have a parent or guardian's consent to use the platform, and the parent or guardian is responsible for managing the account.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified via email or a prominent notice on the site. Your continued use after the changes take effect constitutes acceptance of the updated policy.

11. Contact us

For any privacy questions, requests or complaints, contact us at hello@musably.com.