Privacy Policy

Last updated October 20, 2026

MONOROOM is a website for music producers to store beats, send packs to artists and producers, run a beat store and keep track of their work. This policy explains what we collect, why, who we share it with and what you can do about it. It's written to be read, not to hide things.

MONOROOM is run by MONOROOM, based in Sweden ("we", "us"). Questions or requests: collabprodsavbeats@gmail.com.

1. What we collect

Your account

• Your producer name, username, email address and a scrambled (hashed) version of your password. We never see your password itself.
• If you sign in with Google: your Google account ID, email address and name.
• Your time zone (so scheduled sends go out at your local time), sign-in sessions and the IP addresses used to sign in, to keep your account safe and stop abuse.
• Who invited you, if you joined through an invite link.

What you put in MONOROOM

• Files you upload (beats, samples, stems, covers, agreements) and the details you add to them (names, BPM, key, tags, notes).
• Contacts you add or import: names, email addresses, phone numbers, Telegram and social media handles, notes and what you sent them. For these people, you decide what's collected and why, and we handle it on your behalf (you are the "controller", we are the "processor").
• Sendouts, messages, calendar events, to-dos, goals, placements, file requests, deals and payment plans, store listings, licenses and orders.

Connections you choose to make

• Email (for example Gmail): your address and an app password, so MONOROOM can send from your own account and read replies to your sendouts. The password is stored encrypted.
• Telegram and Discord: your bot token or webhook address, stored encrypted.
• Stripe: either your Stripe account ID (when you connect with the button) or your secret key (stored encrypted). Card details are handled by Stripe and never reach us.
• YouTube: see section 6.

People who visit your public pages

• When someone buys from your store: their name, email, country and what they bought, from Stripe. They're added to your Contacts as a customer.
• When someone asks for a free download: the email they type (the beat is sent there) and their name if they give it. They're added to your Contacts as a lead.
• When someone opens a link you shared: when it was opened and which files were played or downloaded, so you can see it in Activity.
• People who upload to your file requests: the name, producer name and email they give, and their files.

Technical data

• Server logs with IP addresses, times and errors, kept for security and fixing problems.

2. Why we use it

• To run MONOROOM for you: store your files, send your sendouts, run your store, deliver files and license agreements to buyers, send payment links and reminders for your deals (the "performance of a contract" with you).
• To keep it safe: sign-in protection, rate limits, stopping spam and abuse (our "legitimate interest").
• To email you about your account, like password resets and important changes.
• To meet legal duties, like bookkeeping for payments.

We don't sell your data. We don't use it for advertising. We don't use your files or contacts to train AI models.

3. Who we share it with

Only the services MONOROOM needs to work, each bound by its own privacy terms:

• Render (hosting the website and its storage)
• Cloudflare (domain and file storage, through Cloudflare R2)
• Stripe (payments for your store and payment plans)
• Google (Google sign-in, and YouTube when you connect it)
• Anthropic (Homie, the assistant: when you ask Homie something, your question and the parts of your MONOROOM it needs to answer are sent to Anthropic's Claude API. Anthropic doesn't train its models on this data.)
• Your own email, Telegram and Discord accounts, when you send through them
• The people you choose to send things to or share links with

We share data with authorities only when the law requires it.

Some of these companies are outside the EU and EEA. When data goes there, it's protected by the European Commission's Standard Contractual Clauses or an adequacy decision.

4. How long we keep it

• Your account and content: for as long as you have an account. Things you delete go to the Trash for 30 days, then they're gone.
• When you close your account, we delete your files and data within 30 days. Backups are overwritten within another 30 days.
• Orders and payment records: as long as bookkeeping law requires (in Sweden, 7 years).
• Server logs: up to 90 days.

5. Your rights

You can ask to see, correct, download or delete your data, ask us to limit or stop using it, and take back any consent you gave. You can edit and delete your own files, contacts and other content in MONOROOM yourself at any time. To get a copy of your data, close your account or anything else, email collabprodsavbeats@gmail.com and we'll answer within 30 days. If you're unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or the data protection authority where you live.

If you're someone in a producer's Contacts, the producer decides how your data is used. Ask them first. We'll help them answer you.

6. YouTube and Google data

MONOROOM's YouTube Uploader uses YouTube API Services. If you connect a YouTube channel:

• We ask Google for permission to upload videos to your channel, update their details and thumbnails, manage playlists and read your channel's analytics. You see exactly what's asked on Google's screen.
• We use this only to do what you ask in MONOROOM: make and upload your videos, schedule them, edit their details and show you your channel's numbers. We don't use it for anything else, we don't sell it and we don't show it to anyone else.
• We store your channel's name, ID and picture, the access tokens Google gives us (encrypted), the details of videos you upload through MONOROOM, and the analytics shown to you (refreshed regularly, never kept longer than 30 days).
• You can disconnect your channel in MONOROOM at any time, and remove MONOROOM's access in your Google account at myaccount.google.com/permissions. When you do, we delete the tokens and your stored YouTube data within 30 days.
• By using the YouTube Uploader, you agree to the YouTube Terms of Service. Google's privacy policy is at policies.google.com/privacy.
• MONOROOM's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

7. Cookies and storage in your browser

• One cookie keeps you signed in. It's needed for MONOROOM to work.
• If you came through an invite link, a cookie remembers who invited you for 30 days.
• Your browser also remembers small things like the sidebar, your view settings and a store cart. They stay on your device.

We don't use advertising or tracking cookies.

8. Security

Everything travels encrypted (HTTPS). Passwords and keys you connect are stored encrypted. Every producer's MONOROOM runs separately, so no one can see another producer's files or contacts. No system is perfect, so if something ever goes wrong, we'll tell you and the authorities as the law requires.

9. Children

MONOROOM is not for children. You must be at least 16 to make an account, and 18 to sell or take payments.

10. Changes

If we change this policy in a way that matters, we'll tell you by email or in MONOROOM before it takes effect. The date at the top shows the latest version.