Privacy policy
What data SyncoTab keeps, what for, and what you can do about it.
Template pending legal review. This text is a starting point. Before publishing, fill in the details in square brackets and have it reviewed by a professional under the applicable law (for example, the GDPR and Spain's LOPDGDD).
Data controller
[Name or company name], with registered address at [address] and tax ID [number]. Privacy contact: [contact email].
What data we process
- Account data: email, display name, password (stored hashed with a one-way algorithm), preferred language, current plan, and sign-up and last sign-in dates.
- Cloud projects: the .syncotab files you choose to upload, which may include scores, embedded audio, zones, markers and sync data, along with their name and size.
- Technical data: IP address and request data in the server logs, used for security and to prevent abuse.
Audio and scores you open without saving them to the cloud are processed in your browser and are not sent to our servers.
What we use it for
- Providing the service: creating and maintaining your account, storing your projects and applying your plan's limits. Legal basis: performance of a contract.
- Sending you emails your account needs, such as email confirmation or password reset. Legal basis: performance of a contract.
- Protecting the service against unauthorized access and abuse. Legal basis: legitimate interest.
We don't sell your data or use it for advertising.
Cookies
We only use strictly necessary technical cookies: the session cookie, to keep you signed in, and the one that protects against request forgery. The app also stores data in your browser's storage to remember your recent projects and to work offline.
How long we keep it
For as long as you keep your account. If you delete it, we delete your account and your cloud projects immediately, except for backups, which are overwritten within [number] days.
Who we share it with
With the providers needed to run the service, such as web hosting ([provider]) and email delivery ([provider]), who act as data processors. [State whether there are international transfers and the safeguards in place.]
Your rights
You can access, rectify and erase your data, object to or restrict its processing, and request its portability by writing to [contact email]. From your profile you can change your name and email, download your projects and delete your account. You can also lodge a complaint with the supervisory authority ([Spanish Data Protection Agency (AEPD) or the relevant authority]).
Last updated: [date].