Privacy

Musetta is built so that your creative work stays on your own computer. This page lists everything we do hold, why we may hold it, who helps us, and for how long.

Who is responsible

The controller under the GDPR is Aziz Khalledi (Musetta), c/o Mailboxde.com GmbH, ID 338851, Äussere Weberstr. 57, 02763 Zittau, Germany. Email: contact@musetta.ai. More in the imprint.

What stays on your machine

Your characters, reference images, outputs, models, LoRAs, workflows and recipes stay on your computer. When you generate on your own ComfyUI or on a GPU you rent from vast.ai with your own vast.ai account, the studio talks to that engine directly; we never see the request, and that provider handles it under its own terms.

The included AI and cloud generation

When you use the Brain, prompt help, captions, voice, or cloud images and video, the request (its text and any image, audio or video you attach) passes through our AI gateway to the model provider that answers it, and the result comes back through the gateway to your studio, which saves it on your computer. We do not store the content of these requests or their results. We record, per request, the feature, the model, its cost and the credits it used, so your plan’s credits add up and we can spot faults and abuse. Legal basis: performance of your contract (Art. 6 (1) (b) GDPR).

What we hold

• Your account: name, email address and a hashed password, or the id your sign-in provider (Google, Discord or GitHub) gives us. Basis: your contract.
• Your sessions and devices: for each browser and studio you sign in, its IP address, user agent and when it was last active, so you can see and sign out each one. When you link a studio, the approval request records the same for that device. Basis: your contract and the security of your account (Art. 6 (1) (b) and (f)).
• Studio activity: one note per day that your studio checked your plan, to count active users. No device name, hardware id or content is sent. Basis: our legitimate interest in understanding usage (Art. 6 (1) (f)).
• Your plan and payments: status, dates, credit balance, credit packs bought and invoices, received from Stripe. We never see your full card number. If you cancel, the reason you choose, if any. Basis: your contract and tax law (Art. 6 (1) (b) and (c)).
• One free trial per person: to keep the trial to one per person, we keep a normalised form of the email address, the Stripe customer id and the card fingerprint (a code Stripe derives from the card, not the card number) of each trial. These stay after you delete your account, for this purpose only. Basis: legitimate interest in preventing abuse (Art. 6 (1) (f)).
• Two-factor authentication: if you turn it on, the secret your authenticator app shares with us and your backup codes, stored encrypted.
• Support reports: what you write, up to three screenshots you attach, the page and app version you were on, and our replies. Basis: your contract.
• Referrals and affiliates: if you joined through an invite link, which affiliate code referred you. If you are an affiliate, your code, clicks counted with a salted, shortened hash of each visitor’s IP (never the IP itself), and the payout method and destination you give us. To check that commissions are genuine, a referred purchase’s commission record keeps the card fingerprint, card country and cardholder name from Stripe; affiliates never see them. Basis: the affiliate contract and our legitimate interest in preventing fraud (Art. 6 (1) (b) and (f)).
• The early-access list: if you join it, your email, where you joined and your operating system, so we can send you the right build. Basis: your consent (Art. 6 (1) (a)), which you can withdraw at any time.

Visits, cookies and error reports

We count page views and a few steps such as starting a trial with Vercel Web Analytics. It sets no cookies and counts visits in aggregate, without a profile of you. This site stores these cookies:

• Sign-in: your session (30 days) and, during a two-factor sign-in, a 10-minute step cookie. Strictly necessary.
• Invite link (ref and invite, 60 days): set only when you follow an invite link, holding the affiliate’s code and first name, so the discount and the thank-you reach the right person.
• First visit (ft, 90 days): the campaign tag of the link you arrived by, the name of the site that sent you and the page you landed on. When you create an account it is saved with it, so we can tell which channels bring people who stay.

When a page fails, an error report goes to Sentry: the error, the page address without its query string, browser and operating system. We switched off the collection of cookies, headers, form contents and user details. Basis: legitimate interest in a working site (Art. 6 (1) (f)).

Who processes it for us

• Vercel (hosting and visit counts; servers in Frankfurt)
• Neon (database)
• Stripe (payments, invoices, card checks)
• Resend (account emails such as confirmations and password resets; EU region)
• Sentry (error reports; EU region)
• OpenRouter, Anthropic and ElevenLabs (the model providers behind the included AI, cloud images, video and voice)
• Google, Discord and GitHub, only if you choose to sign in with them

Each acts only on our instructions and for the purpose above. Some are based in the United States; transfers there rely on the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses. We do not sell your data and do not use it for advertising.

How long

Sessions expire after 30 days of inactivity. Your account, plan, usage and support history stay until you delete your account, which removes them. What stays after that: billing records, for as long as tax and commercial law require (up to 10 years), the trial records described above, and commission records an affiliate was paid on. The early-access list is kept until you ask us to remove you.

Your rights

You can ask for access to your data, a copy of it in a portable format, its correction or deletion, or to restrict its use. Where we rely on legitimate interest, you can object at any time for reasons arising from your situation; where we rely on consent, you can withdraw it at any time. You can delete your account yourself from your profile. You may also complain to a data protection supervisory authority, in particular the one where you live or work. Write to contact@musetta.ai from the email on your account, so we can find it.

You must be 18 or older to use Musetta. The browser extension has its own page: Capture extension privacy.