IndyHouse · StarHouse LLC

IndyHouse Privacy Policy

Version 1 · Effective October 15, 2026

This policy explains what information IndyHouse collects, what we do with it, and the choices you have. It covers the IndyHouse website, the IndyHouse platform at app.indyhouseapp.com, every House, the IndyHouse iPhone app, and the IndyHouse Fans iPhone app.

IndyHouse is made by StarHouse LLC, a Texas company. In this policy, "StarHouse," "we," and "us" mean StarHouse LLC.

It's part of our Terms of Service.


1. The short version

2. Who this policy is about

IndyHouse is used by different people in different ways:

Who decides what happens to the information.

If you're a fan or collaborator and want to know what an artist keeps about you, start with the artist. You can also write to us. Section 13 explains how.

3. What we collect

3.1 Your account

We use a sign-in company to send your sign-in codes and check them. It holds your email address and a record of your sign-ins.

Fans sign in differently. See Section 10.

3.2 What you put in your House

This is your content. It can include:

Photo details. Photos and videos often carry hidden details from the camera. That can include the time, the camera model, and the location where the photo was taken. IndyHouse reads and keeps these details so it can sort and search your media. If you share or download an original file, those details can go with it.

3.3 Information about other people that you add

Running a music career means keeping track of people. An artist or their team can add:

An artist can send a collaborator a link to confirm their details and their share of a song. The collaborator doesn't need an account. Through that link they may give their legal name, PRO, IPI, publisher, address, phone, and email. They may also sign a split, leave a note, or say they're interested in IndyHouse. We don't keep tax ID numbers sent this way. Our system drops them.

When an artist shares music with a private link, we may record:

If a share link has a passphrase, we record the internet (IP) address of each wrong try. We use it to stop people from guessing.

3.6 Email you send into your House

Each House has a private email address. Files sent to it land in the House. We keep the attachments and the email's subject line.

3.7 Storage accounts you connect

If you bring files in from Google Drive or Dropbox, we keep:

We don't read anything you didn't ask us to bring in.

3.8 How IndyHouse is used

We don't use advertising trackers or outside analytics tools.

3.9 Your device

3.10 Payments

Payment isn't switched on yet. When it is:

We keep your plan, payment status, and invoices. If someone else pays for your House, we keep their name and email too.

IndyHouse Fans is free. Fans never pay through it.

4. How we use information

We use information to:

Emails from us. We send emails you need, like sign-in codes and important notices about your account. We'll only send product news if you say yes, and you can stop at any time.

Legal reasons we rely on. Some privacy laws, like Europe's GDPR, ask for the legal reason behind each use:

5. Radar: finding public mentions

Radar is an IndyHouse feature, on plans that include it. Here's how it works:

Radar results are information about what's public. They aren't a full record. They can be wrong.

6. AI processing

What uses AI. Some IndyHouse features use AI services run by other companies:

When you use one of these, the needed content goes to an AI service, and the result comes back to your House. An agreement can include other people's details, like a co-writer's PRO or IPI number. Then those details go too.

Voice memos stay on your phone for transcription. On iPhone, voice memos are turned into text by Apple's speech recognition. It runs on your phone. The audio isn't sent to an AI service for transcription. The text it makes is saved in your House with the memo.

Rhyme help looks words up on your device. It doesn't use an AI model.

No training, ever. StarHouse never uses your content, or your fans' information, to train, fine-tune, or improve AI models. We only use AI services whose terms say they won't train on what we send them. They may keep what we send for a short time, under their terms, to check for abuse. Then they delete it.

Your control. You can choose "No AI" for a file when you bring it into your House. Then no AI feature will use that file.

AI makes mistakes. Check what it suggests before relying on it.

7. What we never do

8. Who can see your information

People in your House. The owner decides who comes in and what each role can see and do. A room passcode can stop people in your House from opening that room without it.

People you share with. When you send a share link, invite, or message, the people you send it to can see what you shared.

StarHouse staff. Some StarHouse staff can see inside any House, including its fan club. They do it only to:

When staff use that access to get past something a House member couldn't, it's logged. Our team can also see visit records (Section 3.8) to support and run IndyHouse.

Companies that help us run IndyHouse. We use service providers. They get only what they need to do their job for us. They aren't allowed to use it for anything else. They include:

What they doWho
Hosting, database, file storage, video and image handling, inbound email, some AI features, and technical logsCloudflare
Sign-in for artists and their teamsClerk
Email to fans, fan sign-in codes, text messages, and the photo safety checkAmazon Web Services
Other email from IndyHouse, like invites and remindersResend
AI features (Section 6)Anthropic, Google (Gemini), and Cloudflare (Workers AI)
Searching the news for RadarGoogle News
Storing our backupsGoogle (Google Workspace)
Notifications on iPhone, and address suggestions in IndyHouse FansApple
Payments, when switched ona card payment company, and Apple for iPhone purchases

For the current list, write to privacy@starhousellc.com.

When the law requires it. We may share information if a valid legal process requires it, like a subpoena or court order. We may also share it to protect someone from serious harm, or to protect IndyHouse, StarHouse, or our users from fraud or abuse. When the law allows, we'll tell you before we share your information.

If StarHouse changes hands. If StarHouse or IndyHouse is merged or sold, information may move to the new owner. The promises in this policy go with it, including Section 7. If the new owner wants to change them, we'll tell you first. You'll have the chance to export your work and close your account.

9. Fan messaging

An artist can email and text fans from their House:

The artist decides who to message and is responsible for having consent. A fan's information is used only to send them that artist's messages. It isn't shared with other artists, and it isn't used to market anything else. Mobile sign-up details and text-message consent are never shared with third parties for marketing.

10. IndyHouse Fans

IndyHouse Fans is a free iPhone app for joining an artist's fan club. Each club is run by its artist. The same club also lives on the artist's own website. For example, Brooklyn Van Zandt's Earth Angels club is at brooklynvanzandt.com/fans.

10.1 Who runs your club

10.2 Signing in

You join with an email address or a mobile number. We send a one-time code to prove it's yours. Codes sent by text come through our text-message provider. Each code works once, for a short time. We keep only a scrambled form of it. We use your internet address to slow down repeated tries.

10.3 What you share

After you join, you share as much or as little as you want. Your profile can hold:

All of these are optional, except an email address or mobile number to sign in. When you type an address in the app, your iPhone's Apple Maps service suggests matches.

When you join, you tick a box to say you're 13 or older. We keep the time you ticked it.

10.4 What the club records

We keep a record of what you do in the club:

The artist may also hold information you gave them before, through other sign-up tools they used. If you didn't tell the club your city, it may guess one from your phone's area code. A guess never counts as a Summon pick.

10.5 Who sees it

If you're under 18, the team won't offer to write back to you about ideas you send.

10.6 Profile photos and mission photos

Before any photo is stored, an automated safety check (Amazon Rekognition) looks for unsafe content. A photo that passes is stored. A photo that fails is never stored. We keep only the check's answer. You can remove your profile photo at any time.

10.7 Emails and texts from your club

10.8 Push notifications

If you allow notifications, we store your phone's notification token and time zone with your club profile. We use them only for the kinds of notifications you leave on, like new Vault tracks, new cards, missions, polls, replies to your ideas, and Summon news. You can turn each kind off in the app, or turn all of them off in your iPhone's settings. Signing out or deleting your account removes your phone's token.

10.9 Giveaways and drawings

A club may run gift drawings. To enter, you add a mailing address. We use your entry and your address to check you're eligible, remove duplicate entries, pick winners at random, contact winners by email or text, and ship prizes. Each drawing has its own official rules. They say who can enter and whether winners are announced.

10.10 Downloading and deleting

In the app, go to You, then Privacy. There you can:

When you delete everything, we erase your profile, photos, cards, picks, entries, votes, ideas, and contact details. We keep two things:

Vault play counts stay, but they're no longer tied to you. Copies leave our backups on the schedule in Section 11. If you join again later, it's a fresh start.

10.11 Age

IndyHouse Fans is for people 13 and older. See Section 15.

11. How long we keep things

Your content stays until you delete it. It also stays while your account is open. That's true even if you stop paying.

Trash. When you delete media or Writing Room items, they go to Trash first. After 30 days, Trash empties itself.

"Delete now." When you choose Delete now, the item is removed from your House and our live storage right away. Your House shows it as gone, and so does every link to it. It isn't gone from everywhere yet. Copies can stay in our backups until those backups are replaced on schedule (see below). We use backup copies only to recover IndyHouse after a failure.

Backups. We back up IndyHouse every night.

Other records:

RecordHow long we keep it
Unfinished signups30 days
Export download links7 days
Visit records12 months
Staff access logs3 years, for security
Feedback2 years
Fan notification tokensuntil you sign out of IndyHouse Fans, delete your fan account, or the token stops working
Fan consent records (opt-ins and opt-outs)kept after you delete your fan account, as the record of your consent
Hosting company's technical logsa short time, under our hosting company's settings

When you close your account. We remove your account and your House's content from live storage within 90 days. Copies then leave our backups on the schedule above. We may keep some records longer when we have to. Examples are payment records for tax law, records of a legal claim, or the fact that you agreed to these terms.

12. Exporting and deleting

Export. The owner can download everything in their House at any time. The export uses open, common file formats. It includes a list of what's inside. That covers songs, files, Writing Room work, media, releases, promotion, contacts, and business records. The download link works for 7 days.

Exporting doesn't delete anything. Your House stays as it is.

Deleting single items. You can delete items yourself, any time. See Section 11 for how Trash and Delete now work.

Closing your account. In the app or on the web, go to Your account, then Delete your account. You see exactly what goes and what stays before you confirm. Your sign-in, profile and phone notifications end at once, you leave every House you're in, and your Writing Room closes. Lines you wrote on someone else's song stay on that song, with your name on them. If other people are in a House you own, you hand it to someone else first; if you're the only person in it, the House closes with your account. You can download your work first. You can also write to privacy@starhousellc.com from the email you sign in with.

Fans can delete everything in the app. See Section 10.10.

13. Your privacy rights

Depending on where you live, you may have the right to:

We give these rights to everyone who uses IndyHouse, wherever you live.

How to ask. Email privacy@starhousellc.com.

If you're a fan, collaborator, or listener, an artist may hold your information. Ask that artist first, because they control it. If you can't reach them, or they don't help, write to us. We'll work with the artist to answer you.

Appeals. If we turn down your request, you can appeal by replying to our answer. If we still say no, you can complain to your state attorney general or your local data protection authority.

14. Cookies and storage in your browser

IndyHouse uses a small number of cookies and browser storage. They're only for making IndyHouse work. We don't use advertising cookies or tracking cookies.

Name or typeWhat it does
Sign-in cookies (from our sign-in company, and on some addresses Cloudflare Access)keep you signed in
hq_houseremembers which House you opened
Fan club sign-in cookiekeeps a fan signed in to a club. It works only on the club's pages.
Browser storage (local storage and IndexedDB)saves your settings, like theme. It also keeps drafts offline so your writing isn't lost, and lets an interrupted upload pick up again. A random ID for the browser keeps your drafts in sync.

If you block these, IndyHouse may not work properly. You can clear them in your browser settings.

An artist's own website may use its own cookies outside the club pages. Their policy covers those.

15. Children

We don't knowingly collect information from children under 13, except as described below for an artist's web club.

Artists shouldn't add children under 13 to their contacts or fan lists, or message them, except through a parent's permission as described above.

If we learn we've collected information from a child under 13 without a parent's permission, we'll delete it. If you think that's happened, write to us.

16. How we protect information

Here's what we actually do:

What we don't do. IndyHouse is not end-to-end encrypted. Our systems can read your content, because they need to show it, convert it, and back it up.

A room passcode keeps people in your House out of that room. It doesn't encrypt the words inside. Those words are still in backups and exports. StarHouse systems can still read them.

No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.

17. Where your information is stored

StarHouse is in the United States. Our providers run data centers in many countries, so your information may be handled outside the country where you live. Fan email, texts, and the photo safety check run through Amazon Web Services in the United States.

When information moves from the EU, UK, or Switzerland to the US, we rely on the safeguards the law allows.

18. Accounts you connect from other companies

18.1 Rules for every account you connect

18.2 Google Drive

When you connect Google Drive, we only read files you choose to bring in. IndyHouse's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can remove IndyHouse's access at any time in your Google security settings.

18.3 Dropbox

When you connect Dropbox, we only read files you choose to bring in. You can remove access in your Dropbox settings.

18.4 YouTube

Not available yet. This section explains how it will work.

IndyHouse uses YouTube API Services. By using IndyHouse features that connect to YouTube, you agree to be bound by the YouTube Terms of Service. Google's handling of your information is covered by the Google Privacy Policy.

18.5 Instagram

Not available yet. This section explains how it will work.

Connecting Instagram needs an Instagram Business or Creator account.

We delete it within 7 days and confirm when it's done.

18.6 TikTok

Not available yet. This section explains how it will work.

19. Changes to this policy

We'll update this policy when IndyHouse changes. If a change matters, we'll tell you at least 30 days before it takes effect. We'll tell you by email or in IndyHouse. Each version has a number and a date at the top.

We'll never change this policy to sell your information or train AI on your content.

20. Contact us

For privacy questions and requests, write to StarHouse LLC by email at privacy@starhousellc.com, or by mail at StarHouse LLC, 10601 Clarence Dr., Suite 250, Frisco, TX 75033, United States.

For help with IndyHouse or IndyHouse Fans, see our Support page.