Privacy policy

This policy explains what personal data PinDrop Music holds, why, and what you can do about it. We collect only what we need to run the service, and we never sell it or use it for advertising.

Who's responsible

Owain Williams, trading as PinDrop Music, is the data controller. Contact us at hello@pindropmusic.com; our postal address is available on request.

What we hold

• Your account: your name, email address, and a hashed password (we never see the password itself).
• Sign-in sessions: the IP address and browser of each signed-in session, to keep your account secure.
• What you put into Projects: Project and Song names, the Versions you upload with their file names, and your Feedback.
• Invitations: the email addresses an Owner invites as Members, which we hold before those people have an account.
• Your Plan: which Plan you're on and the state of your Subscription. Stripe handles your card details and billing address, and we never see your card number.
• Error reports: when something goes wrong in your browser or on our servers, what went wrong, the page and steps that led to it, how long things took, your browser and device, and your IP address.
• How you use the site, only if you allow it: the pages you visit and what you click, your browser, device and rough location (from your IP address), and recordings of how the pages respond as you use them. Recordings hide the text on the page and everything you type, and never include your audio. When you're signed in, these are linked to your account by its ID, with your Plan, so we can follow them across your devices; never by your name or email. We also note when you do key things, such as creating a Project or Song, uploading a Version, inviting a Member, making a Share Link or leaving Feedback, by their IDs alone, never their names or what you write.
• Tours: which of the app's Tours and First steps you finished or skipped, the step you stopped at, and when.
• Emails with us: anything you send to us.

Why, and on what basis

• To provide PinDrop Music to you and the people you share Projects with: necessary for our contract with you.
• To send account emails, such as verification, password resets and invitations: necessary for that contract.
• To keep the service secure and prevent abuse: our legitimate interest in running a safe service.
• To find and fix errors and slow pages, from error reports: our legitimate interest in a service that works.
• To show each Tour only until you've seen it, and to find where PinDrop Music confuses people, from the record of Tours: our legitimate interest in a service that's easy to learn.
• To learn how people use PinDrop Music and where it confuses them, from analytics and recordings: your consent, which you can withdraw at any time.
• To keep records the law requires, such as for tax: legal obligation.

Who else handles it

• Amazon Web Services stores your audio and backups of the database in London (eu-west-2), and sends our emails.
• Neon (part of Databricks) hosts the database, which holds your account, Projects and Feedback, on Amazon Web Services in London.
• Vercel hosts the website and passes requests to it, so it sees IP addresses and requests.
• Cloudflare runs our domain's DNS and forwards email sent to us.
• Sentry receives error reports and, if you allow it, session recordings, and stores them in the EU (Germany).
• PostHog receives analytics and session recordings, only if you allow it, and stores them in the EU (Germany). Its AI tools review recordings to point us to errors and confusing moments.
• Stripe sells paid Plans as our reseller. It's responsible for the payment data it collects, under its own privacy policy.

Some of these companies may process data outside the UK, for example in the United States. Where they do, they protect it with safeguards UK law recognises, such as the UK's International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.

Cookies

These are the cookies and similar browser storage we use. We use none for advertising.

• Strictly necessary, always on: a cookie that keeps you signed in, and browser storage that remembers your light or dark theme, your cookie choice, and when you restarted First steps, if you have. The service needs these, so we don't ask first.
• Analytics and session recordings, only if you allow them: PostHog's cookie and browser storage (named ph_…), which tell your visits apart, and Sentry's session storage for recordings, which lasts until you close the tab.

We ask the first time you visit. Error reports store nothing in your browser, so they don't need your consent. You can change your choice at any time: Cookie settings.

How long we keep it

• Your account and Projects, and the record of Tours: for as long as you have an account.
• Deleted Versions: we keep the audio after you delete it, so a Version deleted by mistake can be recovered. If you ask us to erase your data, we permanently remove it, including those copies, within 30 days.
• Database backups: 7 days.
• Error reports and Sentry recordings: up to 90 days.
• Analytics: up to a year. PostHog recordings: up to 30 days.
• Sign-in sessions: until they expire or you sign out.
• Billing records: as long as tax law requires, usually 6 years.

When an account is closed, the Feedback that person left in other people's Projects stay there without their name attached, unless they ask us to erase those too.

Your rights

You can ask to see, correct, download or erase your personal data, or object to or restrict how we use it. Email hello@pindropmusic.com and we'll reply within a month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If we change this policy in a way that matters, we'll email you before it takes effect.