Privacy policy
Last updated 16 October 2026
NXT Listen is a tool for music companies to collect songs for a brief (a "lead") and listen through them together. This policy explains what personal data the app holds about you, what it is used for and who can see it.
Who is responsible
NXT Listen is operated by NXT Music Group AB, company registration number 559389-5161, Fryxellsgatan 4, 114 25 Stockholm, Sweden. We are responsible for your account and for running the service. You reach us through the support form.
The companies that use the app each have their own team in it. The team that invites you to a lead decides what the songs you submit there are used for, and is responsible for that use. We store and show the songs on the team's behalf. Questions about how a team handles your submissions go to that team; the name of the team is shown on the invite and on the lead.
What we hold about you
- Your account: your name, your email address and your password. The password is stored only in scrambled (hashed) form; nobody, including us, can read it.
- What you submit: the audio files you upload, the lyrics and their timing, the song's title, artist, genre and language, and any message you write to the host.
- Credits: the names of the people you list as writers, producers and performers, their roles, any instrument and any split you enter. This often includes other people than yourself; make sure they are fine with being named.
- Invitations: when a host invites you, your email address is saved on that lead's list of invited writers, or in a group of writers the team has saved to invite again.
- Your use of the app: when your account was created, when songs were started, changed and submitted, and when your account was last active, noted at most once every ten minutes. We do not record which pages you open.
- If you host: the leads, briefs and pictures you add, and your role in your team. If we help with your account, what we did is noted in a support log.
- Your team's subscription: the plan, price and period agreed with the team, and when it was started or cancelled. Payment itself is handled outside the app; we hold no card details.
- If you contact support: the name, email address and message you write in the support form, and which account was signed in when you sent it.
- Technical data: the server that runs the app may log requests (IP address, time and browser) for operation and security.
What we use it for
- To let you sign in, submit songs and come back to them, and to let the hosts of the team listen to and present what was submitted. Legal basis: it is needed to provide the service you were invited to use.
- To send the emails the app needs: your invitation and, when you ask for them, a link to choose a new password or to confirm a new email address. We do not send newsletters or marketing.
- To keep the service working and secure, help people who cannot get in, and understand in broad figures how the app is used. Legal basis: our legitimate interest in a working and secure service.
- To answer you when you contact us through the support form, and to keep track of what we have answered. If your message is about your personal data, we use it to handle that request. Legal basis: our legitimate interest in helping the people who use the app, and our legal obligation where you use your rights.
We do not sell your data, show advertising, use tracking or analytics services, or use your songs, lyrics or recordings to train AI models.
Who can see what
- You see your own songs and the leads you are invited to.
- The hosts and admins of the team that invited you see the songs submitted to their leads, drafts included, with lyrics, credits, splits and your message, and can play them for the people they present to. Splits are not shown in the presentation itself.
- Other teams see nothing of what you submit to another team, and other writers do not see your songs.
- We, as the operator, have support pages that show accounts (name, email address, role, when last active) and figures per team. They do not show songs, lyrics or briefs. The few people with technical access to the server can reach the stored data when that is needed to run or repair the service.
Who we share it with
Only the companies we need in order to run the service, who handle the data on our instructions:
- Hosting and storage: Render (Render Services, Inc., USA), with the servers and stored files in Frankfurt, Germany. Servers, database and uploaded files.
- Resend: sends the app's emails (invitations, sign-in links and messages to support). Receives your email address and the content of that email.
Render and Resend are American companies. Where they can reach data from outside the EU, the transfer is covered by the EU–US Data Privacy Framework or, where that does not apply, by the EU's standard contractual clauses in our data processing agreements with them.
Cookies
The app sets one cookie, which keeps you signed in for up to 30 days. It is necessary for the app to work and is not used for anything else. There are no advertising or analytics cookies.
How long we keep it
- A song, with its audio, lyrics and credits, is kept until you delete it or the team deletes the lead it was submitted to. You can delete your own song while its lead is open.
- Your account is kept until you delete it under Your account, or ask us to. Deleting it removes your songs with it. If you are the only admin of a team, the team and everything in it goes too; the team's subscription has to be cancelled first.
- An invitation link works for 14 days and a password link for one hour. Your address stays on a lead's invite list until the host removes it or deletes the lead.
- A message to support is kept while we help you, and deleted 12 months after it was handled.
- Server logs are kept for a short time, for operation and security.
Your rights
You have the right to know what we hold about you and get a copy of it, to have wrong details corrected, to have your data erased, to object to or ask us to restrict how it is used, and to receive the data you gave us in a format you can take elsewhere. Write to us through the support form, choosing "My personal data", and we will help you; if your request concerns songs submitted to a team, we pass it on to that team where needed.
If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY), Box 8114, 104 20 Stockholm, Sweden, imy.se.
Security
Passwords are stored hashed, sign-in links are single-use and time-limited, each team's data is kept apart from other teams', and audio files can only be played by the writer who uploaded them and the hosts of the team they were submitted to.
Changes to this policy
If we change how your data is handled, we update this page and its date. For changes that matter to you we also tell you by email.