Privacy Policy

1. Controller

The data controller for arrangementlabs.ai is Marcin Konopka. We have not appointed a dedicated Data Protection Officer, as the conditions under art. 37 GDPR are not met; for data-protection matters, contact us at the address in section 8.

2. Data we collect on public pages

On all public pages — the landing page and the rest of the site, login, register, the demo pages (/demo), the notation editor that needs no account (/studio), and this Privacy page — we use Plausible Analytics (operated by Plausible Insights OU, Estonia, EU) to count anonymous page views and a few events: waitlist sign-up; on the demo pages, starting playback and opening the editor; in the /studio editor, starting work, choosing an ensemble, importing a file, the first change to the score, downloading, a click on “Request an invite”, and the notice that the device cannot be used for editing. These events carry only technical details, such as the demo piece, the chosen instruments, the file format or the number of bars. Plausible is cookieless: it does not set any cookie, does not track you across sites, and does not collect personal data. The IP address is hashed in-memory and discarded after one day; only an aggregate page-view counter remains. In the /studio editor and on the demo pages we additionally use PostHog (operated by PostHog Inc., hosted in the European Union, Frankfurt) in cookieless mode, to learn how the editor is used — which functions people use, which commands the editor refused, how long a session lasted and how it ended — and to receive reports of technical errors. There, PostHog also receives the page views of those pages and the same events as Plausible. In this mode PostHog sets no cookies, stores nothing in your browser, identifies no one and does not record your screen; visitors are counted with an anonymous hash computed on PostHog's servers. Legal basis: art. 6(1)(f) GDPR (legitimate interest in product improvement).

3. Data we collect when you are signed in

Once you sign in to the app, we use PostHog (operated by PostHog Inc., hosted in the European Union, Frankfurt) to record product-usage events that help us improve arranging and editing. Our servers record: registration; the start, completion and failure of an arrangement; changes you request through the chat (requested, accepted, rejected); files you add to your library and their format, the status of PDF imports and problems with uploaded files; reaching the bar limit; a purchase of bars and any refund of it (amount and currency); downloads and their format; opening the editor and saving a version. The app in your browser records: which screens of the app you open; the preset you select; which functions of the editor, the arrangement view and the player you use, which commands the editor refused and how long an editing session lasted; creating, opening and copying share links; the tutorial (started, completed, dismissed); technical errors. Each event is bound to your Firebase user ID (a random string) and your email address. Team and test accounts are marked so that they can be excluded from our statistics. Legal basis: DSGVO art. 6.1.b (performance of a contract — improving the service you signed up for) and art. 6.1.f (legitimate interest in product improvement). Session replay is disabled. The browser Do Not Track signal is honoured by the analytics running in your browser; it does not stop the events our servers record. If you share an arrangement by link, whoever opens it sees your name (your display name, or the part of your e-mail address before the @ if you have not set one) alongside the shared arrangement, its source file and the text of your instruction to the model. The list of people who opened the link is shown to you in the sharing dialog; you can turn sharing off at any time, which irreversibly invalidates the link you sent.

4. Cookies

Analytics on the public pages — Plausible, plus PostHog in the /studio editor and on the demo pages — sets no cookies and stores nothing in your browser. The waitlist form loads Google reCAPTCHA only when you submit it, and reCAPTCHA may then store its own data in your browser (see section 7). Inside the signed-in app, PostHog keeps a random identifier (your distinct ID) in a functional cookie and also in your browser's local storage — its persistence default, used to remember the ID across page reloads — and your browser stores a sidebar-state preference. We do not set advertising, tracking, or marketing cookies anywhere on the site.

5. Your rights

Under the General Data Protection Regulation (GDPR, art. 15–22) you have the right to access, rectify, erase, restrict processing of, and port your data, as well as to object to processing and to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO). We do not use your data for automated decision-making (including profiling) that produces legal effects concerning you or similarly significantly affects you. To exercise any of these rights, contact us at the address in section 8 below.

6. Data retention

Arrangement files (MIDI, MusicXML, PDF) and the input files served to you in the Service are stored for 3 days, then automatically deleted from object storage. Account data (email, Firebase user ID) is retained for the duration of your account; on an account-deletion request it is removed within 30 days. Anonymised musical and technical data that cannot be linked to an individual may be used to develop and improve our models (art. 6(1)(f) GDPR). Plausible aggregates have no retention limit (page-view counters only). PostHog product events are retained for 12 months for trend analysis, then deleted.

7. Sub-processors

We share data with the following processors to deliver the service:

• Google Cloud Platform (Frankfurt region, EU) — application hosting, database, file storage
• Firebase (Google Ireland Ltd) — authentication
• Brevo (formerly Sendinblue, Paris, EU) — transactional email
• Plausible Insights OU (Estonia, EU) — anonymous web analytics on public pages
• PostHog Inc. (data processed in EU, Frankfurt region) — product analytics for signed-in users, and cookieless analytics of the /studio editor and the demo pages
• Anthropic, PBC (USA, processing outside the EU) — interprets the arrangement description you type when ordering and your messages in the editing chat (Claude model); we send only that text and the name of the chosen ensemble — no e-mail address, account ID or files
• Google Ireland Ltd (reCAPTCHA) — protects the waitlist form against bots; the script loads only when you submit the form

8. Contact

For data-protection enquiries and any other questions, write to hello@arrangementlabs.ai .