Legal
Privacy Policy
This policy explains what personal data MusicDown collects, why we collect it, who processes it with us, and how you can access, correct, or delete it.
Last updated:
Data we collect
- Account data: name, email address, and password. Passwords are stored only as a cryptographic hash. If you sign in with Google or Facebook, we receive your name, email, and profile picture from that provider.
- Usage data: playlists, favorites, download history, and the download quota consumed under your plan.
- Subscription data: your current plan, its status, and its billing period.
- Technical data: IP address, browser user agent, and request logs, kept to keep the service running and to apply rate limits and abuse protection.
- Messages you send: the name, email, and content you submit through the contact form.
How we use your data
- Provide the service: authentication, playlists, previews, and downloads.
- Manage subscriptions, download limits, and plan benefits.
- Reply to support requests and other messages you send us.
- Protect the platform against fraud, abuse, and automated attacks.
- Comply with legal and accounting obligations.
We do not sell your personal data and we do not use it for third-party advertising.
Third-party services
Some features depend on providers that process data on our behalf or under their own privacy policies:
- Stripe — payment processing and subscription billing.
- Cloudflare Turnstile — human verification on the contact form, to block automated spam.
- YouTube — track previews, embedded in privacy-enhanced mode.
- Google and Facebook — optional sign-in, used only if you choose those providers.
- Hosting and email providers — infrastructure that stores our data and delivers transactional email.
These providers may process data on servers outside your country. We only share what each service needs to work.
Payments
Payments are handled by Stripe on Stripe-hosted pages. Full card numbers never reach MusicDown servers and we never store them. We keep only the subscription identifiers and status needed to release the benefits of your plan.
Never send passwords or complete card details through the contact form or by email.
Data retention
Account data is kept while your account is active. After deletion, we remove or anonymize your data, except for records we must keep for legal, tax, or fraud prevention reasons. Security and access logs are kept for a limited period and then discarded.
Your rights
Under the Brazilian General Data Protection Law (LGPD) and equivalent regulations, you may request:
- Confirmation that we process your data, and access to it.
- Correction of incomplete, inaccurate, or outdated data.
- Deletion of your data and of your account.
- A portable copy of the data you provided to us.
- Information about the parties with whom we share your data.
Send requests to support@musicdown.com.br. We may ask for information to confirm your identity before acting on a request.
Security
We use HTTPS across the platform, hashed passwords, HttpOnly session cookies, and rate limiting on sensitive endpoints. No system is completely immune to incidents, so keep your password unique and do not share it.
Children's privacy
MusicDown is not directed to children under 13. If you believe a child has created an account, contact us and we will remove the data.
Changes to this policy
This policy may be updated as the platform evolves. The date at the top of the page always reflects the latest revision, and relevant changes will be announced within the platform.
Contact
Questions about this policy or about your data can be sent to support@musicdown.com.br or through our contact page. See also the Terms of Service.