LVSTR Store Music

Privacy Policy

Version 2026-10-07

LVSTR Store Music is a store-music service for businesses: a web portal where a company manages its stores, devices, playlists and schedules, and an iPhone and iPad app that plays the music in the stores. This policy explains what personal data we handle, why, for how long, who we share it with, and what rights you have.

In short

We collect what is needed to run the service for the companies that use it, and nothing for advertising.
There is no tracking, no analytics and no advertising in the portal or the app.
The app sends nothing to us unless the device has been activated for a company.
Your music stays in your own Google Drive or Dropbox. We do not store music files.
We never sell personal data.

Who is responsible

LVSTR Store Music is provided by Lovestjärna Consulting AB, Swedish organisation number 559085-7842, Ekåsvägen 1, 504 75 Borås, Sweden (“LVSTR”, “we”). Contact us about privacy at support@lvstrstoremusic.com.

We have two roles, depending on the data:

On behalf of the company that uses the service. Stores, devices, device names and status, playlists, schedules, channels and cloud connections are data that a company puts into the service. For that data the company is the controller and LVSTR processes it on the company's behalf, as its processor, under our agreement with the company. If you work for such a company, your employer decides how this data is used, and questions about it are best sent to your employer. We will pass on any request we receive.
For our own purposes. LVSTR is the controller for the data we use to run our business and to protect the service: customer and billing details, records of who accepted our terms, the security of portal accounts, support conversations and our servers' logs.

What we collect and why

Portal users (company administrators)

Account: email address, role, the company you belong to, and your password, stored only as a bcrypt hash, never in plain text. We also store whether you must change a temporary password, when a temporary password expires, and a counter that lets us sign out your other sessions when your password changes. Accounts have no name field.
Activity in the portal: your email address is recorded on configuration you publish and on some changes you make (for example “published by” or “updated by”), so that the company can see who changed what.
Service emails: invitations and password-reset links are sent to your email address. The links are single-use and expire (an invitation after 72 hours, a reset link after one hour); we store only a hash of each link. We send no marketing email.
Sign-in security: repeated failed sign-ins and activation attempts are limited per IP address. These counters are kept in server memory for about ten minutes and are not stored.

Why: to give you access to the portal, to keep accounts secure and to show the company a history of its changes.

Company, contact and billing details

The company's legal name, organisation number, VAT number, billing address, invoice email and invoice reference, and the name, email address and phone number of its contact person.
A billing record of which devices were active in which month, and the invoices based on it.
A record of each acceptance of our terms: who accepted (email), when, which versions, and for which company (legal name and organisation number).

Why: to manage the customer relationship, to invoice, to keep our accounts as Swedish law requires, and to be able to show what was agreed.

Store devices and store staff (the app on an activated device)

When an iPhone or iPad is activated for a company (with an activation code, a QR code or the company's device management system), the app sends the following to the portal:

At activation: the device name staff type (for example “Counter”), the hardware model (for example “iPad13,18”) and, for devices enrolled through the company's device management system, the hardware serial number and store that the company's system provides.
Regularly while in use (“heartbeat”): app version, iOS or iPadOS version, whether music is playing, the name of the audio output (for example “Speaker” or an AirPlay device name), the output volume, and, for devices that broadcast channels in the store, each channel's name and status, the number of listeners, the names, identifiers and status of the Sonos rooms it plays in, the device's health signals (for example overheating or no network) and the type of network connection. We also record when the device was activated and last checked in.

Why: to send each device its company's playlists, schedules and settings, to show the company whether its stores are playing, for troubleshooting, and to count active devices for billing. Device names and Sonos room names are free text and may contain a person's name if someone types one; please avoid that.

Stores, playlists and schedules

Store names, addresses, store IDs and time zones; playlists, which are references to folders in the company's cloud storage; internet radio addresses; schedules, holiday exceptions and device policies. This is usually company data, but a store name or address can identify a person, for example a sole trader. Why: to run the service.

Cloud storage connections (Google Drive and Dropbox)

When a company connects its Google Drive or Dropbox in the portal, we store the account's label (usually its email address), a refresh token encrypted with AES-256-GCM, the identifiers and paths of the folders the company selects, and file information (name, size, modified time) for the files in those folders. The access is read-only. Devices receive short-lived access tokens and download the music directly from the company's cloud storage. The refresh token never leaves our servers.

We do not store or copy music files on our servers. The files go straight from the company's cloud storage to its own devices. We do not use the content for advertising, we do not sell it, and no human reads the files, except with the company's explicit consent for support, for security purposes, or where the law requires it. We do not use the content or the file information to train AI or machine-learning models.

Limited Use disclosure

LVSTR Store Music's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we access file and folder metadata, and the contents of audio files, only in the folders the user explicitly selects; we use this access solely to sync the customer's own music to the customer's own store devices; we do not use Google user data for advertising, do not sell it, do not allow humans to read it (except with the user's explicit consent for support, for security purposes, or where required by law), and do not use it for any purpose beyond providing and improving this user-facing feature, including not using it to train AI or machine-learning models.

Central stream channels (planned, not yet offered)

We plan to offer companies central stream channels, where our stream server plays a company's playlist as an audio stream to its devices. If a company turns this on, the server will fetch tracks from the company's playlists and keep a temporary, rolling copy of them in order to stream them, and the server's logs will contain the IP addresses of the devices that listen. This is not offered today. We will update this policy and tell our customers before it starts.

Using the app without a company (free version and LVSTR Pro)

Nothing is sent to us. The app only talks to our servers after the device has been activated for a company.
If you connect your own Google Drive or Dropbox in the app, the app talks directly to Google or Dropbox. Your files and your account email stay on your device; we do not receive them.
Demo playlists are downloaded from a public folder in Google Drive. Like any download, this shows Google the device's IP address. Internet radio streams you add are fetched directly from the stream provider you choose.
Subscriptions to LVSTR Pro are sold and handled by Apple. We do not receive your payment details or your identity; Apple gives us only sales reports.
If you have chosen to share analytics with app developers in your device settings, Apple may give us crash reports and statistics about app usage. They do not identify you to us.

Features that stay in the store

Local channels, Sonos control and “Wi-Fi upload” from a computer work only on the store's local network. The audio, the speaker control and the uploaded files are not sent to us or to Sonos.

Support and our website

If you email us, we keep the conversation to answer you and follow up. When you visit lvstrstoremusic.com or use the portal, our hosting provider processes your IP address and technical request data (for example browser type and the page requested) to deliver the pages and to protect the service.

Legal bases

Data we process for a company: the company decides the legal basis. We process the data only on its instructions.
Contract (GDPR Article 6(1)(b)): where our customer is an individual (for example a sole trader), to provide the service and invoice under our agreement with them.
Legitimate interests (Article 6(1)(f)): to handle our relationship with the people who represent our customers (administrators and contact persons), to keep the service and accounts secure, to keep records of what was agreed, and to answer support requests. You can object to this processing (see your rights below).
Legal obligation (Article 6(1)(c)): to keep accounting records under the Swedish Bookkeeping Act (bokföringslagen).

A company needs to give us billing and contact details to become a customer, and an administrator needs an email address to have a portal account. We make no decisions about anyone based solely on automated processing.

How long we keep data

Device status: only the latest reported values are kept. Each heartbeat replaces the previous one.
Cloud connections: the refresh token and all stored folder and file information are deleted immediately when the company disconnects the connection in the portal.
Activation codes expire 24 hours after they are created and can be used once. Invitation and password-reset links expire after 72 hours and one hour.
Users, stores, playlists, schedules and settings are kept until the company deletes them in the portal or the agreement ends.
Deleted devices are hidden and can no longer connect, but their record is kept for as long as the billing records for the months they were active.
When an agreement ends, we delete the company's data, or return it first if the company asks, normally within 30 days. Copies in our database provider's backups expire within a further 30 days.
Billing records and invoices are kept until the end of the seventh year after the end of the calendar year in which the financial year ended, as the Swedish Bookkeeping Act requires.
Records of acceptance of our terms are kept for the duration of the agreement and then for as long as claims can be made under it, at most ten years (the general limitation period under Swedish law).
Support emails are kept as long as needed to handle the matter and follow up, and are then deleted, normally within two years.
Server logs at our hosting provider are kept for a short period, at most 30 days.

Who we share data with

We never sell personal data. We share it only with the service providers we need to run LVSTR Store Music, who act on our instructions under data processing agreements:

Vercel Inc. (USA): hosting of the website, the portal and the device API. Our servers run in Vercel's Frankfurt region (Germany). Requests pass through Vercel's global network, normally at the location nearest to the user.
Neon (part of Databricks, Inc., USA): the database, hosted in Frankfurt (Germany) on Amazon Web Services.
Resend (Plus Five Five, Inc., USA): sending invitations and password-reset emails. Email addresses and delivery records are stored in the USA.
Our providers of email, office and accounting software, for support conversations, invoicing and bookkeeping.

Google and Dropbox receive requests only when a company or a user connects their own account, and act under their own terms with that account holder. Apple distributes the app and handles LVSTR Pro purchases as an independent controller. We may also disclose data when the law requires it, for example to a public authority.

Transfers outside the EU

Our database and servers are in the EU. Some of our providers are US companies, so data can be accessed from or stored in the USA (for Resend, it is stored there). We rely on the EU–U.S. Data Privacy Framework for providers that are certified under it (Vercel, Databricks, which covers Neon, and Resend) and on the European Commission's standard contractual clauses in the providers' data processing agreements. You can ask us for more information about these safeguards at support@lvstrstoremusic.com.

Cookies and local storage

We use no analytics, advertising or third-party tracking cookies. The portal uses only what it needs to work:

Sign-in cookies (“authjs” cookies): keep you signed in and protect sign-in forms against forgery. A session ends after 12 hours without activity and at the latest 7 days after you sign in.
Cloud connection cookie (lvstr_oauth_state): set for at most ten minutes while you connect Google Drive or Dropbox, to protect the connection against forgery.
Administration cookie (lvstr-admin-tenant): used only by LVSTR staff to choose which company they are helping, for up to 12 hours.
Preferences in your browser's local storage: light or dark theme, whether the side menu is collapsed, and how the device list is shown. These stay in your browser and are not sent to us.

These are strictly necessary for a service you have asked for, so under the Swedish Electronic Communications Act we do not ask for consent. You can delete them in your browser at any time; you will then be signed out and your preferences reset.

How we protect data

All traffic uses HTTPS. Passwords are stored as bcrypt hashes, cloud refresh tokens are encrypted, device-management enrollment keys and email links are stored only as hashes, and every company's data is kept separate from other companies' data, which our automated tests check. Devices authenticate with tokens that the company can revoke at any time.

Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or deleted, to restrict its processing, to receive data you have given us in a portable format, and to object to processing based on our legitimate interests. Company administrators can view, correct and delete most data directly in the portal. To use your rights, email support@lvstrstoremusic.com. If the data is held for a company (see “Who is responsible”), we will pass your request to that company and help it to answer. Some data, such as accounting records, we must keep even if you ask us to delete it.

You can also withdraw Google's access at any time in your Google account settings, and Dropbox's access in your Dropbox account settings under connected apps.

If you think we handle your data wrongly, please contact us first. You also have the right to complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se, or to the data protection authority where you live or work.

Children

LVSTR Store Music is made for businesses and is not directed at children.

Changes to this policy

We will update this policy when the service or the law changes. The version date at the top shows when it last changed. We will tell our customers by email or in the portal before a material change takes effect.

Contact

Lovestjärna Consulting AB, Ekåsvägen 1, 504 75 Borås, Sweden · support@lvstrstoremusic.com