Welcome to Musebox Labs, LLC ("we," "us," or "our"). We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you use our websites and services, especially within California, the European Union, and other jurisdictions.
1. Information We Collect
We collect the following types of information:
- Personal Information: Name, email, age, gender, location, account details, and other information you provide when registering or engaging with our services.
- Usage Data: Details about your activity, preferences, and interactions.
- Device Information: IP address, browser type, device identifiers, and operating system.
- Additional Data for GDPR Users: If you are located in the EU, we may also collect your IP address, language preferences, and other technical data necessary to provide services compliant with GDPR.
2. How We Use Your Information
Your data may be used to:
- Provide, operate, and improve our services.
- Personalize content based on your preferences.
- Communicate with you regarding your account, updates, or support.
- Deliver targeted advertising, marketing, and cross-platform promotions under our corporate umbrella Musebox Labs, LLC.
- Conduct analytics and research to improve user experience and service quality.
We don't sell any of your information to anyone, and we never will. Third-party marketing partners act only on our instructions and are bound by contractual obligations to protect your data. We do not share your personally identifiable information with them unless required to provide our services or with your explicit consent.
3. Sharing and Cross-Platform Marketing
By using our services, you agree to the sharing of your information across our family of websites operated by Musebox Labs, LLC, including for purposes such as:
- Delivering relevant marketing and advertisements.
- Sharing your profile and activity data across platforms.
- Collaborating with third-party marketing and advertising partners, subject to applicable law.
We may use your information to inform you about services and products offered by other Musebox Labs properties. You can opt out of receiving such communications at any time via your account settings or by contacting us at info@musebox.io.
Where required by law, we will obtain your consent before using your personal information for marketing purposes, including marketing other services offered under the Musebox Labs umbrella.
4. Your Rights and Choices
For California Residents (CCPA):
- Right to access the personal information we hold about you.
- Right to delete your personal information.
- Right to opt out of the sale or sharing of your data for marketing purposes.
To exercise these rights, contact us at info@musebox.io or visit your account settings.
For GDPR-eligible users (EU Residents):
You have the following rights under GDPR:
- Right to access your personal data.
- Right to rectification of inaccurate or incomplete data.
- Right to erase your data ("Right to be Forgotten").
- Right to restrict or object to processing.
- Right to data portability.
- Right to withdraw consent at any time where processing is based on consent.
- Right to lodge a complaint with a supervisory authority.
To exercise these rights, please contact us at info@musebox.io. We will respond within the timeframes required by law. We retain your personal information only as long as necessary to provide services, comply with legal obligations, resolve disputes, or enforce agreements. You may request deletion of your data as outlined in Section 4.
5. Data Security
We are committed to protecting your data. To safeguard your information, we:
- Use secure servers and data encryption both in transit and at rest (e.g., TLS/SSL protocols, encryption keys).
- Perform periodic vulnerability assessments and security audits.
- Limit access to personal data to authorized personnel only, subject to confidentiality agreements.
- Maintain policies and procedures for managing data security incidents.
- Implement multi-factor authentication for sensitive systems where applicable.
- Regularly review and update security measures based on evolving threats and industry standards.
Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are dedicated to protecting your data to the best of our ability.
6. Data Processing Location
Your data is processed primarily in the United States. By using our services, you acknowledge and agree to the transfer of your data to this jurisdiction and applicable data storage and processing facilities.
7. Children's Privacy
Our services are not directed to children under 13 years old, and we do not knowingly collect personal information from minors. If we learn we have collected information from a child under 13 without parental consent, we will delete it.
8. Changes to This Privacy Policy
We may update this Privacy Policy periodically, and the "Effective Date" at the top will reflect any such change. Material updates will be communicated via our website or direct notification. We encourage you to review this policy regularly.
9. Chrome Extension Data Collection
Our Musebox Chrome extension collects and processes the following data to provide its core functionality:
Personal Information:
- Email address: Collected through Google OAuth authentication and direct sign-in to identify your account.
- Name/Display name: Retrieved from your Google profile or provided during registration to personalize your experience.
- Username: Created during account setup and stored in your user profile for account identification.
- Avatar URL: Retrieved from your Google profile to display your profile picture in the extension.
Authentication Information:
- Google OAuth tokens: Securely stored to maintain your authenticated session and sync your prompt library across devices.
- Session tokens: Used for API access and maintaining your login state within the extension.
- Note: We do not store passwords. All authentication uses secure OAuth flows.
Data Usage and Storage:
- Authentication tokens are stored locally in your browser and on our secure servers for account synchronization.
- Personal information is used solely for user authentication, profile display, and prompt library management.
- Your data is not shared with third parties except for Google OAuth authentication services.
What We Don't Collect:
- AI Conversations: The extension does not collect, read, or store any of your conversations or interactions with AI platforms (ChatGPT, Claude, Gemini, etc.).
- Website Content: We do not collect any content from the websites you visit or the AI responses you receive.
- Browsing History: The extension does not track or collect your browsing history or website activity.
- User Activity: We do not monitor clicks, mouse movements, or other user behaviors outside of direct interactions with the extension interface.
Extension Functionality:
The Chrome extension only accesses web pages to insert your selected prompts into text input fields when you explicitly request it. The extension operates only on supported AI platforms and only when you actively use its features. No background monitoring or data collection occurs.
10. Contact Us
For questions about this Privacy Policy, rights, or our data practices, please contact us at info@musebox.io.
