MUSITU Axiom Privacy Policy

This policy describes data handled when you use the MUSITU Axiom plugin and its account-linking service.

Data we process

• Account and entitlement data: the MUSITU customer record associated with the account you choose to connect.
• OAuth security data: client identifiers, requested scopes, hashed access and refresh tokens, authorization-code/flow records, expiry and revocation state. Raw OAuth tokens are not stored in these OAuth ledger tables.
• Usage data: the Axiom operation used, compute-unit usage, outcome/status, response timing, cryptographic request/result hashes, and an internal request identifier used for metering and abuse prevention.
• Content: only the operation arguments intentionally sent for the requested calculation. The plugin does not request the full ChatGPT conversation history.

Why we use it

We use this data to authenticate your existing MUSITU account, deliver requested calculations, enforce entitlements and quotas, meter usage, prevent abuse, troubleshoot failures, and maintain security and audit integrity.

Who receives it

Data is processed by MUSITU and infrastructure providers used to operate the service, including Cloudflare and the private compute hosting layer. We do not sell plugin user data to advertisers. The public plugin does not collect card data and does not initiate digital-subscription checkout.

Retention

• Authorization flows expire after 10 minutes and authorization codes after 5 minutes.
• OAuth access tokens expire after 1 hour; refresh tokens expire after 30 days. Hashed security ledger records may be retained with the account until deletion or longer when reasonably necessary for security investigations.
• Account, entitlement, and metering records are retained while the MUSITU account remains active and until deletion is requested, except records that must be retained longer for security, fraud prevention, accounting, dispute resolution, or legal obligations.

Your controls

You can revoke an OAuth session without changing the original MUSITU account credential. You may request access, correction, or deletion of account-linked personal data through the support contact published with this plugin, subject to legal retention requirements.

MUSITU Axiom · Last updated 28 October 2026