Privacy Policy

Draft — effective date [DATE] · [ENTITY NAME], Switzerland

BROUILLON pour relecture par David — aligné nLPD (Suisse) + RGPD (UE) selon l'audit légal. Remplacer [ENTITY NAME], neuma.tools, [DATE] et compléter la liste des sous-traitants avant mise en ligne.

1. What we collect

• Account data — your email address (used to sign in) and plan.
• Your uploads — the audio files you submit for analysis.
• Derived data — the analysis results (notes, chords) and the practice tracks generated from your uploads, stored in your private library.
• Corrections — the edits you make (hand assignments, note flags).
• Usage — privacy-friendly, cookie-less analytics (aggregate page views), and technical logs needed to run and secure the service.

2. What we do with it

We process your uploads solely to produce your analysis results. The original uploaded file is deleted from our servers once analysis completes; only the derived practice data remains, private to your account, until you delete it.

3. Model training — opt-in only

We never use your uploads or corrections to train our models without your explicit opt-in. The opt-in is off by default and can be withdrawn at any time.

4. Where your data lives

Application data is hosted in the European Union; GPU analysis runs on transient cloud instances that hold your file only for the duration of the analysis. Processors we rely on: [Railway — hosting], [Modal — GPU processing], [Stripe — payments], [Resend — sign-in emails], [Plausible — analytics]. We do not sell personal data.

5. Retention and deletion

Your library exists until you delete a song or your account — deletion is immediate and includes the derived files. Sign-in and billing records are kept as required by law.

6. Your rights

Under the Swiss nLPD and the EU GDPR you may access, correct, export or delete your personal data. Most of this is self-service in the app; for anything else write to privacy@neuma.tools.

7. Contact

[ENTITY NAME], Switzerland — privacy@neuma.tools.