Casset — Trust & privacy
Your artist world should be programmable, not exposed.
Casset is built around artist-controlled context. Public material can be made readable by agents and apps. Private music, gated drops, fan data, drafts, and raw files stay private unless the artist explicitly grants access.
Our principle
Permission beats scraping.
Artists shouldn't have to choose between hiding their world and having it scraped from public platforms. Casset gives artists a structured way to share context with the tools they choose — while keeping private material private.
Agents shouldn't scrape your catalog. They should ask permission.
What the public API can and can't see
Artist-approved context. Nothing more.
The public API surfaces only what an artist has chosen to make readable — the same boundary a logged-out visitor already sees, structured for software instead of a browser.
Can expose
- + Public profile
- + Public track metadata
- + Public drops
- + Public visuals & media
- + Approved public moments
- + Identities & projects the artist chooses to publish
- + Public lineage & provenance, where enabled
- + Links back to Casset objects
Never exposes
- × Raw audio files
- × Private uploads
- × Unreleased private tracks
- × Private B-sides
- × Drafts
- × Private notes & journals
- × Fan emails
- × Payment data
- × Wallet addresses
- × Unapproved fan submissions
- × Private analytics
- × Gated content without authorization
Storage is not exposure
Private uploads stay off public surfaces.
Casset separates storage from exposure. Uploading a track, visual, note, or moment does not automatically make it public, agent-readable, or API-visible. Artists choose what becomes public, what becomes gated, and what stays private.
Not public by default
Private tracks, drafts, BTS, notes, and unapproved moments are not exposed on public pages or public API responses.
Scoped access
Only authorized viewers, collaborators, approved API keys, or gated users can access permissioned material.
No raw private file exposure
Public APIs return structured context and Casset links — not raw private audio or media URLs.
Limited operational access
Casset may process private material only as needed to provide the service: storage, playback, transcription, moderation, support, and artist-approved AI features.
Private does not mean “used for AI training.” API access and AI processing are governed separately by artist permission and product settings.
Private by choice
Start private. Publish deliberately.
Casset does not have to be public. Artists can keep an entire catalog private while using Casset as a vault for tracks, visuals, notes, demos, and context. Private material is not exposed on public profiles, public APIs, fan surfaces, or agent endpoints. When the artist is ready, individual tracks, drops, moments, or worlds can be made public or gated.
Private catalog
Keep tracks, visuals, notes, demos, and drafts hidden from fans, agents, and public APIs.
Artist-only Room
Use Casset’s Room/search privately over your own archive, if enabled.
Publish piece by piece
Make a single drop, track, visual, or moment public without exposing the whole catalog.
AI processing controls
Choose whether private uploads can be analyzed for your own Room/search, or kept out of AI processing.
Visibility model
Four levels. The artist sets the boundary.
Public
Visible on public profile and eligible for public/API surfaces.
Profile, public tracks, public visuals, public drops, approved moments, public lineage.
Gated
Requires payment, invite, token, subscription, or approved access.
Private drops, B-sides, holder-only content, paid Rooms, unreleased previews.
Private
Visible only to the artist/account owner inside Studio. Not public or API-visible.
Drafts, raw uploads, private notes, fan personal data, payment data, unapproved moments, internal analytics.
Vault
Hidden from public surfaces and excluded from AI/agent processing unless explicitly enabled.
An entire private catalog — tracks, visuals, notes, demos — kept as a creative vault before anything is published.
API access and agents
Access is a key. Not a door left open.
API keys are server-side secrets, never shipped to a browser. Beyond that, access is deliberately narrow:
Scoped
Keys are issued for a purpose — not a blanket key to everything Casset knows.
Logged
Usage against a key is tracked, not anonymous.
Rate-limited
Every endpoint has request limits, so a key can't be used to bulk-harvest a catalog.
Revocable
A key can be turned off at any time, by Casset or the artist it was issued for.
No training rights by default
A key grants retrieval, linking, and artist-approved experiences — not model training rights.
Bound by terms
Partners agree to Casset's API terms: link back to Casset as source-of-truth, don't copy or redistribute private material.
AI training stance
Built for retrieval. Not blanket training rights.
Casset API access is for retrieval, linking, contextual experiences, and artist-approved tools. It does not grant blanket rights to train models on an artist's music, media, or private archive. Any training or derivative dataset use requires explicit permission from the rightsholder or artist.
AI processing and model training
Processed to run the product. Not to train generative models.
To power timed lyrics, musical analysis, search, and your Room, Casset sends uploaded audio and content derived from it to third-party AI providers — currently OpenAI — for processing. This operates Casset's features and is not used to train generative AI models: not by Casset, and our providers do not use data sent through their API to train their models.
We do not sell uploaded music to third parties for AI model training. We avoid claims like “no processing,” because playback, lyrics, waveforms, storage, and visual rendering all require limited processing to make the product work.
Playback processing
Uploads may be transcoded, cached, analyzed for waveforms, and prepared for smooth playback across profiles, rooms, feeds, and exports.
AI-assisted features
Casset uses AI for timed lyrics, musical analysis, search, and your Room. Your audio and content derived from it are sent to third-party providers (currently OpenAI) to run these features — not to train generative models.
Storage
Creator media is stored so Casset can host releases, stream audio, render visuals, and restore saved work.
Fans and moments
A moment isn't public just because a fan submitted it.
Fan-submitted moments are not automatically public API data. Artists can approve, publish, hide, or remove moments depending on product settings. Fan personal data is not part of the public artist API.
The fine print
This page is product-facing trust copy, not a replacement for a full legal privacy policy. For account and associated data deletion, see the Data Deletion Instructions. For questions, email support@casset.fm.