Privacy Policy

Last updated: May 19, 2026

1. Who we are

roshmusik (operated by Roshith Menon, sole proprietor, "we", "us") is an indie music brand and data-product business based in Kerala, India. We operate:

  • This website and Android app (the "App") at leads.roshmusik.com
  • The roshmusik leads service — a one-time-purchase contact database of South India music industry businesses
  • The roshmusik leads Telegram bot at t.me/roshmusikleadsbot

2. What data we collect

a) Through the App / website (leads.roshmusik.com):

The App does not collect any personal data automatically. We do not use analytics, advertising SDKs, tracking pixels, or cookies. All app traffic is served via Cloudflare's CDN, which logs aggregated, anonymous request metrics (IP-derived country, request count) per Cloudflare's privacy policy. We do not have access to individual user data via Cloudflare.

b) Through the Telegram bot (optional, only if you choose to interact):

If you message our Telegram bot, we collect and store:

  • Your Telegram user ID and username (public Telegram metadata)
  • The email address you voluntarily provide for waitlist signup or product delivery
  • Your stated role (e.g. "indie musician") if you select one
  • Message timestamps and the conversation history with the bot

This data is stored in a private SQLite database controlled by us, used only to: (i) deliver the leads product you purchase, (ii) notify you of launch updates, (iii) send sample leads. We never sell, rent, or share this data with third parties.

c) Through payment processing:

When you purchase a leads pack, payment is processed by Razorpay. We never receive your card or banking details. Razorpay shares with us only: your name, email, phone number (used for delivery), and payment confirmation. Razorpay's privacy policy applies: razorpay.com/privacy.

3. How we use your data

  • To deliver the leads pack you purchased (CSV via email + Google Sheet link)
  • To send transactional emails about your purchase (receipt, delivery)
  • To notify you about product launches and updates (only if you opted in via waitlist)
  • To answer your questions when you reply to the bot or email us

We never use your data for advertising, retargeting, or selling to third parties.

4. Data sharing

We share data only with these processors, who handle data on our behalf:

  • Cloudflare Inc. — website + app hosting and CDN
  • Telegram FZ-LLC — bot messaging platform
  • Razorpay Software Pvt Ltd — payment processing
  • Google LLC — Gmail for transactional emails; Google Sheets for product delivery

5. Data about the leads pack (third-party business contact info)

The leads pack contains contact information of music industry businesses (film production houses, music labels, recording studios, ad agencies, event companies). All such data is sourced from publicly available business listings — primarily Google Maps — and verified manually before delivery. We do not include personal data of private individuals, only published business contact details.

If you are a business owner and your listing appears in our database and you would like it removed, email rosh.musik@gmail.com and we will remove it within 7 days.

6. Your rights

You can at any time:

  • Request a copy of personal data we hold about you
  • Request deletion of all your data ("right to erasure")
  • Withdraw consent for marketing emails (just reply STOP or unsubscribe)
  • Stop the Telegram bot by typing /stop

Email rosh.musik@gmail.com for any request. We respond within 7 days.

7. Children's privacy

The App and the roshmusik leads service are B2B / professional tools intended for adults working in the music industry. We do not knowingly collect data from children under 18. If you believe a minor has provided us data, email us and we will delete it.

8. Data retention

Waitlist email addresses are retained until you unsubscribe. Bot conversation data is retained for 12 months from your last interaction. Purchase records are retained for 7 years (tax compliance, India IT Act).

9. Security

All data in transit is encrypted via HTTPS / TLS. The bot database is stored on a private server with restricted access. We do not process or store payment card data ourselves — that is handled entirely by Razorpay.

10. Changes to this policy

We may update this policy over time. Material changes will be announced via email to waitlist subscribers and posted here with a new "Last updated" date.

11. Contact

Questions, requests, or concerns?