Privacy Policy
Privacy Policy
GuitarToMIDI converts guitar audio into MIDI locally on your device, either in real time from a live guitar input or offline from recorded audio files. This Privacy Policy describes the data processing related to the GuitarToMIDI website, desktop application, standalone app, VST plugin, authentication flows, account area, trial activation, license management, and checkout flows.
Effective date
October 8, 2026
1. Controller and scope
The controller for the processing described in this policy is Guitar to MIDI for the services offered on the website, in the application, and in the account area.
This policy covers data processed when you browse the website, create or use an account, activate a free trial, manage a license, pay for the service, or request support.
2. Data we collect
We may process identity and account data such as your email address, name or nickname, avatar, user identifier, and sign-in provider.
We may also process service and license data such as your trial status, license status, invoices, authorized devices or sessions, license validation status, app version, operating system, sign-in provider, certain technical information about your environment, and logs strictly necessary for security, fraud prevention, diagnostics, and support.
We do not collect or upload guitar audio, imported audio files, DAW audio streams, or DAW project files for audio-to-MIDI conversion.
For website audience measurement, we use Umami to collect visitor and traffic statistics.
3. Desktop app, VST plugin, and local audio processing
GuitarToMIDI converts guitar audio into MIDI locally on your device, either in real time from a live guitar input or offline from recorded audio files.
The audio processing model runs on your device. Guitar audio, imported audio files, and audio streams processed by the standalone app or VST plugin do not need to be uploaded to our servers for audio-to-MIDI conversion.
When used as a VST plugin, GuitarToMIDI processes the audio signal provided by the host DAW locally. GuitarToMIDI does not upload your DAW project files or guitar audio to a remote server for MIDI conversion.
The application may connect to our servers or third-party providers only for functions such as account login, trial activation, license verification and validation, authorized device/session management, fraud prevention, security, support, billing, and license management.
4. Purposes and legal bases
We process your data to provide the service you request, including creating and securing your account, activating the free trial, verifying access rights, validating licenses and authorized sessions/devices, managing licenses, issuing invoices, and handling support.
We also process certain data on the basis of our legitimate interest to secure the service, prevent abuse, diagnose incidents, and improve the product. Audience measurement with Umami is triggered only after your acceptance.
Some data may also be processed to comply with legal obligations, including accounting, tax, and record-keeping obligations.
5. Recipients and processors
Data is accessible only to authorized persons when necessary for service operations, technical administration, customer support, billing, or security.
We may use providers such as Supabase for hosting and database services, Google for authentication, Stripe for payment and invoicing, and Umami for website visitor statistics and application usage statistics. These providers are used for service operation, authentication, billing, analytics, security, and support. They are not used to process guitar audio for audio-to-MIDI conversion.
We do not sell your personal data to third parties.
6. Retention
Account, access, and license data is kept for as long as necessary to manage the service relationship and then for the period required to handle disputes, evidence, and legal obligations.
Billing data and accounting records are kept for the period required by applicable law.
Technical logs and audience measurement data are kept for a limited period proportionate to their purpose.
7. Cookies and audience measurement
We use neither advertising cookies nor analytics cookies.
Audience measurement is handled by Umami, which we host ourselves. Its script neither writes nor reads any information on your device: no cookie, no local storage, no identifier of any kind.
Article 82 of French Act No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, which transposes Article 5(3) of Directive 2002/58/EC, makes prior consent a condition for any action seeking to access information already stored on your device or to store information on it. Since our audience measurement performs neither operation, that article does not apply to it and no consent banner is required.
The resulting statistics are aggregated and limited to our own needs. The information sent is the page viewed, the referring page, the page title, the browser language, and the screen size. No IP address is retained, no tracking is carried out across websites, and no data is shared with third parties.
The legal basis for this processing is our legitimate interest in knowing how our website is used, within the meaning of Article 6(1)(f) of Regulation (EU) 2016/679.
In accordance with Article 21 of that regulation, you may object to this audience measurement at any time: the "Opt out of audience analytics" button at the bottom of every page disables it for your browser.
Strictly necessary cookies are, however, used for sign-in and session management when you authenticate or access your account area. They fall under the consent exemption provided by that same Article 82, which covers cookies strictly necessary for the provision of a service expressly requested by the user.
The GuitarToMIDI desktop application (standalone app and VST3 plugin) has its own audience measurement, handled by Umami, which we host ourselves (analytics.musictomidi.com), and counted separately from the website. It sends the actions performed in the application (launch and exit, sign-in, mode changes, settings changed with their final value, conversions with the number of notes, durations, and file type, playback, export attempts, evaluation windows, errors), the screen displayed (sign-in, real-time, offline, audio settings, etc.), the license status (trial, trial ended, purchased license), the application version, the format used (standalone app or VST3 plugin) and, for the plugin, the name of the host software, as well as the interface language and the screen resolution. It never sends your email address, account identifier, name, audio, MIDI content, or file names or paths: the user folder is removed from error messages. No tracking identifier is stored; the application only keeps on your device your choice regarding this audience measurement and the last known license status. Umami does not retain your IP address, which is used only to infer your country and an anonymous session. Audience measurement statistics, for both the website and the app, are kept for no more than 25 months and then deleted. You may object to this measurement at any time by unchecking the "Share anonymous usage statistics" box, checked by default, in the application's gear menu: all sending stops immediately, including pending events.
8. YouTube videos
Demo videos are hosted on YouTube, a service provided by Google Ireland Limited. They are never loaded automatically: the page displays a preview image served from our own domain, and no request is sent to Google until you click the play button.
Clicking that button requests the YouTube player. Doing so transmits data about you to Google, including your IP address, your user agent, and the page the video is played from, and allows Google to set cookies or other trackers on your device.
The player is embedded from the youtube-nocookie.com domain, which limits advertising trackers without removing them entirely.
This processing is carried out by Google, whose privacy policy is available at https://policies.google.com/privacy.
9. Security
We implement reasonable technical and organizational measures to protect data against unauthorized access, alteration, disclosure, loss, or destruction.
No system is completely risk-free, so you must also protect your credentials, devices, and access.
10. Your rights
You may request access to, rectification, erasure, or restriction of processing of your data, and you may object where that right applies. You may also request data portability where the legal basis gives you that right.
For any privacy-related request, use the address or contact point provided on the website, in the application, or on your billing documents.
You may also lodge a complaint with the competent data protection authority if you believe your data has been processed in breach of applicable law.