Privacy Policy
Privacy Policy
This Privacy Policy describes the data processing related to the Guitar to MIDI website, desktop application, authentication flows, account area, and checkout flows.
Publisher
Guitar to MIDI
Effective date
April 14, 2026
1. Controller and scope
The controller for the processing described in this policy is Guitar to MIDI for the services offered on the website, in the application, and in the account area.
This policy covers data processed when you browse the website, create or use an account, activate a free trial, manage a subscription, pay for the service, or request support.
2. Data we collect
We may process identity and account data such as your email address, name or nickname, avatar, user identifier, and sign-in provider.
We may also process service and usage data such as your trial status, subscription, invoices, authorized devices, certain technical information about your environment, and logs strictly necessary for security, fraud prevention, and support.
For website audience measurement, we use Umami to collect visitor and traffic statistics.
3. Purposes and legal bases
We process your data to provide the service you request, including creating and securing your account, activating the free trial, verifying access rights, managing subscriptions, issuing invoices, and handling support.
We also process certain data on the basis of our legitimate interest to secure the service, prevent abuse, diagnose incidents, improve the product, and measure website traffic with Umami.
Some data may also be processed to comply with legal obligations, including accounting, tax, and record-keeping obligations.
4. Recipients and processors
Data is accessible only to authorized persons when necessary for service operations, technical administration, customer support, billing, or security.
We may rely on technical providers acting as processors or separate providers, including for hosting and database services, social authentication, payment, invoicing, and audience measurement. In the current service setup, this includes Supabase, Google or Microsoft for authentication, Stripe for payment, and Umami for visitor statistics.
We do not sell your personal data to third parties.
5. Retention
Account, access, and subscription data is kept for as long as necessary to manage the service relationship and then for the period required to handle disputes, evidence, and legal obligations.
Billing data and accounting records are kept for the period required by applicable law.
Technical logs and audience measurement data are kept for a limited period proportionate to their purpose.
6. Cookies and visitor analytics
We do not use advertising cookies or analytics cookies on the website.
We use Umami to collect visitor statistics. The Umami audience measurement script does not use tracking cookies.
Strictly necessary cookies may still be used for sign-in and session management when you authenticate or access your account area.
7. Security
We implement reasonable technical and organizational measures to protect data against unauthorized access, alteration, disclosure, loss, or destruction.
No system is completely risk-free, so you must also protect your credentials, devices, and access.
8. Your rights
You may request access to, rectification, erasure, or restriction of processing of your data, and you may object where that right applies. You may also request data portability where the legal basis gives you that right.
For any privacy-related request, use the address or contact point provided on the website, in the application, or on your billing documents.
You may also lodge a complaint with the competent data protection authority if you believe your data has been processed in breach of applicable law.