1. Introduction

Noteshift AI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Noteshift AI, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our Service:

Account Information: Email address and password when you create an account
Payment Information: Subscription details and billing history. Note: We do NOT store your credit card numbers, CVV, or full payment details. All payment information is processed and securely stored by Stripe, our PCI-DSS compliant payment processor. We only receive the last 4 digits of your card and subscription status.
User Content: Music notation content, chat messages, and files you upload to the Service
Communications: Information you provide when contacting our support team

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information:

Usage Data: Pages visited, features used, time spent on the Service
Device Information: Browser type, operating system, device type
Log Data: IP address, access times, referring URLs

2.3 Analytics

We use Plausible Analytics, a privacy-friendly analytics service that does not use cookies and does not collect personal data. Plausible is GDPR, CCPA, and PECR compliant. The analytics data collected includes:

Page views and navigation patterns (anonymized)
Referral sources
Device type and browser (without identifying you)
Geographic location (country level only)

All data is aggregated and anonymized. No personal information is tracked or stored by Plausible.

3. How We Use Your Information

We use the collected information for the following purposes:

To provide, operate, and maintain the Service
To process your transactions and manage your subscription
To improve and personalize your experience
To communicate with you about the Service, updates, and support
To detect, prevent, and address technical issues and security threats
To comply with legal obligations
To analyze usage patterns and improve the Service (via privacy-friendly analytics)

4. AI Processing

Our Service uses AI technology (Claude API by Anthropic) to generate and transform music notation. When you interact with our AI:

Your messages and music content are sent to Anthropic's API for processing
Anthropic processes this data in accordance with their privacy policy and data processing agreement
Your conversations and generated content are stored on our servers to provide the Service
We do not use your content to train AI models

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

Payment Processing (Stripe): We use Stripe to process payments securely. When you subscribe to a paid plan, your payment information (credit card details, billing address) is transmitted directly to Stripe and is never stored on our servers. Stripe processes this information in accordance with their privacy policy and PCI-DSS compliance standards. We receive only limited information from Stripe (last 4 digits of card, subscription status) necessary to manage your account.
AI Services (Anthropic): Your messages and music content are sent to Anthropic's Claude API for processing to generate music notation. Anthropic processes this data in accordance with their privacy policy and data processing agreement.
Analytics (Plausible): We use Plausible Analytics for privacy-friendly website analytics. Plausible does not collect personal data or use cookies. All analytics data is aggregated and anonymized.
Legal Requirements: When required by law or to respond to legal process
Business Transfers: In connection with a merger, acquisition, or sale of assets
Protection of Rights: To protect our rights, property, or safety, or that of our users

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

Encryption of data in transit using HTTPS/TLS
Secure password storage using industry-standard hashing
Regular security assessments and updates
Access controls and authentication mechanisms

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

Account data is retained while your account is active
Chat history and music notation are retained for the duration of your account
Billing records are retained as required by law (typically 7 years)
When you delete your account, we delete your personal data within 30 days, except where retention is required by law

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information
Data Portability: Request a copy of your data in a structured, machine-readable format
Objection: Object to certain processing of your personal information
Withdrawal of Consent: Withdraw consent where we rely on consent to process your data

To exercise these rights, please contact us at privacy@noteshift.ai. We will respond to your request within 30 days.

9. Cookies and Tracking

We use minimal cookies for essential functionality:

Authentication Cookies: To keep you logged in and manage your session
Preference Cookies: To remember your settings (e.g., theme preference)

We do not use third-party advertising cookies or tracking cookies. Our analytics provider (Plausible) does not use cookies at all.

10. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

Users between 13 and 18 must have permission from a parent or guardian to use the Service.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to the United States and other countries where we operate.

12. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information to them.

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information we collect, use, and disclose
Right to request deletion of your personal information
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising your privacy rights

14. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

Contract Performance: Processing necessary to provide the Service you requested
Legitimate Interests: To improve our Service and ensure security
Consent: Where you have given explicit consent
Legal Obligation: To comply with legal requirements

You have the right to lodge a complaint with a supervisory authority if you believe we have violated your privacy rights.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the new Privacy Policy on this page
Updating the "Last updated" date
Sending an email notification for significant changes

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: privacy@noteshift.ai

Support: support@noteshift.ai