Privacy policy

What we collect and why

Band details: band name, ABN, GST registration, super guarantee rate, contact email and contact phone. These are collected because the ATO requires them on a valid tax invoice.

Member details: each member's name, role, share of the split, super fund name, USI and member number, and their bank account name, BSB and account number. These are collected so super can be allocated and paid to the right fund, and so the band can pay each member their share.

Band banking: the band's account name, BSB and account number, so a venue can pay the invoice.

Invoice records: venue name, venue ABN, gig date, line items, fees, GST, super figures, payment dates and super payment dates. These are collected to produce invoices and to track the seven business day payday super deadline.

Account details: the email address and password you sign up with, so only you can reach your band's records.

We do not collect information we do not need for those purposes, and we do not use any of it for marketing or profiling.

How we collect it

Directly from you. Everything above is typed into the app by you or another person you have given your login to. We do not buy data, we do not scrape it from third parties, and there is no tracking beyond what is described below.

Who we disclose it to

Nobody, with four exceptions. First, whatever is printed on an invoice you choose to send — the band name, ABN, contact details, the band's bank account and the line items — is seen by the venue you send it to. That disclosure is your decision, made each time you send an invoice.

Second, our database and authentication provider, which stores the records on our behalf in Sydney.

Third, our hosting provider, which serves the app and receives anonymous technical error reports.

Fourth, Google, but only if you choose to sign in with Google. In that case Google learns that you use MusosMate and when you sign in, and handles that sign-in itself. No band, member, banking or invoice content is shared with Google. Sign in with email and password instead and Google is not involved at all.

We never sell your information.

Where your data lives

All band, member and invoice records, and all authentication records, are stored in Supabase in Sydney (ap-southeast-2), including backups. Those records are never copied to a database outside Australia.

Separately, when something goes wrong in the app, an anonymous technical error report — the error message, the page it happened on and browser details, with no band, member, banking or invoice content — is sent to our hosting provider's telemetry and may be processed on servers overseas. The app itself is served from a global edge network, so the page you are reading may be delivered from a server outside Australia even though your records are not.

If you sign in with Google, that sign-in is processed on Google's own servers, which may be overseas. That is limited to the sign-in itself — your email address and the fact and time of the sign-in. Your band, member, banking and invoice records stay in Sydney.

Keeping it secure

Row level security enforces band level isolation in the database, so one band can never read another band's invoices, splits or fund details.

Bank account numbers and super member numbers are only ever rendered in full on the settings form and on the invoice you generate. Everywhere else — dashboards, tables, on screen exports — they are masked to the last three digits.

Accessing and correcting your information

You can see and edit everything we hold about your band at any time in band settings and on your invoices. Band settings also has a download that gives you the band, its members and every invoice with its line items as a single file.

If something is wrong and you cannot correct it in the app yourself, email the privacy contact below and we will correct it or tell you in writing why we have not.

How long we keep it

Invoices and their line items are kept for at least five years, because the ATO requires financial records to be kept for five years from the date they are prepared, obtained or the transaction is complete. Removing an invoice in the app hides it from view but keeps the underlying record for that period.

If you delete your account, everything is destroyed immediately — band, members, invoices, line items and your login. That is your right to erasure, and it overrides the retention above, so download your data first if you may still need those records for the ATO.

Complaints

If you think we have mishandled your personal information, email the privacy contact below with the details. We will acknowledge your complaint and respond within 30 days.

If you are not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner at oaic.gov.au, or by phone on 1300 363 992.

Privacy enquiries

Privacy enquiries, access and correction requests, and complaints go to [your band's privacy contact email] — replace this with the address the band monitors before you send an invoice to anyone.

Not tax advice

MusosMate helps you produce paperwork and track deadlines. General information only, not tax advice. Talk to a registered tax agent about your circumstances.