Privacy Policy

1. Information we collect

• Account details: your name, email address, role, assigned organization or location, and when you last signed in. Passwords are stored only as salted hashes, never in readable form.
• Organization and venue details: organization name and contact person, location names, addresses, countries and time zones.
• Music and playback content: uploaded audio files and their details (title, artist, album, genre), playlists, schedules, zone settings, equalizer presets and Prayer Mode settings.
• MusicServer data: server name, software version, operating system, IP address, CPU, memory and disk usage, cache status, logs, and a reported time zone and location used for scheduling and prayer times.
• Activity and security records: sign-ins, sign-outs, failed sign-in attempts, commands sent to zones, and administrative changes, including the IP address and browser details of the person who made them.

2. How we use it

• to sign you in and apply the permissions of your role;
• to store your music library and sync it to your paired MusicServers;
• to run schedules, Prayer Mode and remote playback controls;
• to show server health, alerts and activity on the dashboard;
• to keep the service secure, investigate problems and keep an audit trail.

We do not sell your information and we do not use it for advertising.

3. Emails

ZoneMaestro sends an invitation email when an administrator creates your account. We do not send marketing emails or newsletters.

4. Cookies and browser storage

We use one essential cookie to keep you signed in, and your browser's local storage to hold your session, your display preference and cached Prayer Mode times. We do not use advertising or analytics cookies or third-party trackers.

5. Sharing with third parties

Information is shared only as needed to run ZoneMaestro: with the hosting infrastructure that runs the service, and, when Prayer Mode is enabled, with the AlAdhan Prayer Times API, which receives only a venue's coordinates, time zone and calculation method. No names or email addresses are sent. We may also disclose information where the law requires it.

6. How long we keep it

• MusicServer logs: 30 days.
• Activity history, completed zone commands and acknowledged alerts: 90 days.
• Security audit records: about 13 months (400 days).
• Expired sign-in tokens are deleted automatically.
• Account, venue and music data: while your organization uses ZoneMaestro, or until an administrator deletes it.

7. Security

Connections to ZoneMaestro are encrypted with HTTPS. Passwords, sign-in tokens and MusicServer credentials are stored as hashes, access is limited by role and organization, and MusicServers only connect outward to the cloud. No system is perfectly secure, but we work to protect your information.

8. Your choices and rights

You can ask to access, correct or delete your personal information. Many changes can be made by your organization's administrator, who manages user accounts. Depending on where you are, you may have other rights under data protection law, including the right to complain to a supervisory authority.

9. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top shows the latest version.

10. Contact

For privacy questions or requests, contact contact@zonemaestro.com.