Skip to content
Lomuco

LOMUCO COMMUNITY BETA

Privacy Notice

Operated by Lomuco LLC.

Effective October 27, 2026. Policy version: 2026-10-27.

This notice describes the information handled by the current Lomuco beta at lomuco.com. Contact musicianssupport@lomuco.com about privacy or your account.

1. Information you provide

  • Account and signup: email address, display name, username, a password stored as a WordPress password hash, email-verification records, invitation records, and the policy version and adult confirmation recorded during signup. The signup form does not ask for an exact date of birth.
  • Profiles and media: musician, act, or venue name, ZIP code, city and state, biography, experience, genres, instruments, interests, website and performance links, and uploaded images. ZIP-area coordinates support approximate distance matching.
  • Member activity: saved profiles, manager invitations and access, private messages, blocks, reports, gig and musician-opening listings, applications, booking terms and revision history, and unavailable-date blocks.
  • Support: the messages and attachments you send us when asking for help or making a privacy or moderation request.

Do not submit passwords, verification codes, government identification, bank details, or sensitive information that is unnecessary for using the service. Free beta membership does not collect payment-card details. Any show payments are arranged directly between the act and venue.

2. Information visible to other people

Approved profiles and listings are public. They include submitted names, city and state, descriptions, images, genres, instruments, and links. Public gig information may include a venue location, schedule, and pay arrangement. Search engines and other visitors may copy public material.

Account emails, profile ZIP codes, saved profiles, and manager controls are excluded from public profile responses. Uploaded image files have public URLs even while a profile is a draft. Upload only material intended for publication. Archiving a profile does not itself remove every uploaded file or copies made elsewhere.

Private messages and applications are available to the relevant profile teams. Owners and accepted managers can see earlier shared activity; accepted act and venue managers also have booking and availability authority. An unavailable-date label is shared with that profile’s team. Other teams receive a generic scheduling-conflict message rather than the private block details.

A member who confirms a message report shares the selected message and up to five earlier messages with moderators. The application does not provide administrators with a general inbox view of unrelated private conversations, but authorized site and hosting operators can access stored information for maintenance and support. Messages are not end-to-end encrypted.

3. How information is used

Lomuco uses information to verify and maintain accounts, display profiles and listings, match approximate locations, deliver the member features you request, manage shared profile access, record booking agreements, prevent conflicting dates, respond to support and privacy requests, moderate reported activity, and protect the service against misuse.

Verification and password-reset messages support account access. Creating a signup invitation does not send it automatically. Members may opt in to activity emails for messages, applications, bookings, review decisions, and team invitations in Account & Privacy, and may turn them off there. These emails summarize recent unread updates with counts and links to the signed-in dashboard; they do not include private message text or booking terms. We store category preferences and recent sending state to honor choices and reduce duplicate emails. Delivery can be delayed, so members should check their workspaces for time-sensitive updates. Turning off activity emails does not stop account-access messages.

4. Cookies, logs, and service providers

WordPress uses cookies for sign-in and session functions. The platform uses server-observed IP information and temporary rate-limit records to limit misuse. Hosting and security infrastructure may record requests and technical information, such as IP addresses, browser information, timestamps, and requested pages, to operate and protect the site.

GoDaddy Managed WordPress provides website hosting, content delivery, caching, and managed backups. We use Microsoft 365 for the support mailbox at musicianssupport@lomuco.com; messages and attachments you send to support are handled through that service. Authorized site-maintenance providers may process the site information needed to maintain and troubleshoot the service.

The hosting service also adds browser-based traffic and performance measurement. GoDaddy describes its Real User Metrics as measuring connection and page-load performance. The current site integration also provides technical site information and whether the visitor is signed in. The custom Lomuco platform does not include an advertising-data sale or targeted-advertising feature.

You can use your browser settings to manage cookies and site storage. Blocking cookies needed for sign-in may prevent account features from working. Hosting and security logs are handled separately from browser storage.

Public profile links may lead to other websites with their own privacy practices. Following those links is optional. Information may also need to be disclosed in response to a valid legal requirement or to address unlawful activity and protect people’s rights.

5. Retention and deletion

Account, profile, message, application, and booking records are stored to provide the service and maintain shared history. Archiving a profile, withdrawing an application, cancelling a booking, or releasing an unavailable block does not immediately erase its historical record. A profile archive is recoverable through WordPress Trash while retained there.

Signup verification links expire after one hour; a newer link invalidates the previous one. Pending signup records are eligible for scheduled cleanup after expiry. Signup invitation links expire after seven days; expired invitation records are eligible for cleanup after an additional 30 days. A scheduled cleanup can run later than its intended time.

Deletion and export requests require review of account ownership, shared team records, legal obligations, and backup copies. After a verified request, Lomuco reviews which information can be removed or de-identified and which limited records are still needed for shared bookings, disputes, safety, or legal obligations. Retained records need a documented reason and a review date. Automated erasure of all Lomuco records is not implemented. Retention decisions consider the purpose of the information, ongoing member use, unresolved commitments or disputes, and applicable obligations. We explain the outcome of a request and any relevant limitations.

Support messages, attachments, and privacy-request records are kept as needed to handle the request, document its outcome, and address justified follow-up or legal needs. Temporary data-export files and any copies created while handling a request need separate review. Mailbox retention and deleted-item handling also depend on the Microsoft 365 service and its configured policies.

We keep website backups in GoDaddy; we do not currently keep separate downloaded website backups. Backup copies can retain earlier information after the live site changes and remain subject to the hosting service’s backup cycle. They require separate handling during a privacy request. Restoring an older backup can reintroduce previously removed information, so completed privacy changes must be reviewed after a restore.

6. Your choices and requests

Signed-in members can visit Account & Privacy for help with data copies, corrections, and account closure. Its request buttons open your email app so you can review and send a message to support. Requests are reviewed manually; opening the page or sending an email does not automatically delete information, close an account, or cancel a booking.

You can edit your profiles, manage your saved connections, withdraw applications, block profile pairs, and remove managers where you are the owner. Public-profile edits require review again. Removing a manager revokes current access but cannot recall information they already saved.

For access, correction, a data export, account closure, or deletion, email musicianssupport@lomuco.com, preferably from your account address. Describe the request and the relevant profile or account. We may ask you to verify control of the account; do not email your password or a verification code. Rights and any permitted exceptions depend on the law that applies to your request.

7. Adults-only beta, security, and updates

The beta is intended for adults 18 and older in the United States. Contact support if you believe a person under 18 has created an account or supplied information. Account permissions, email verification, HTTPS, and abuse controls help protect the service; no online system can promise absolute security.

We identify the effective date of the notice in use. Changes in actual data handling, providers, features, or applicable requirements will be reflected in the notice and communicated as required before implementation.