Privacy Policy

01

Who this policy covers

This Privacy Policy applies to the Fretline website, guitar songbook, AI assistant, chord tools, offline features, and public sharing pages (collectively, the “Service”). “Fretline,” “we,” and “us” refer to the operator of the Service.

02

Information we collect

Account and profile information

When you create an account, we receive your email address and any name you provide. If you sign in with Google, we receive the basic profile information you authorize Google to share, generally your Google account identifier, name, email address, and profile image. We do not receive your Google password.

Songbook and user content

We process content you create, import, save, or organize, including song titles, artists, chords, lyrics or notes you enter, arrangements, setlists, capo and transposition settings, practice preferences, source URLs, and public-share settings.

AI and search activity

We process prompts, chat messages, generated responses, tool activity, search queries, and related song results so the assistant can answer requests and update your library. Do not include sensitive personal information in prompts unless it is necessary for your request.

Technical and usage information

We may collect IP address, browser and device information, timestamps, session and request identifiers, feature usage, error reports, security events, and approximate usage or cost measurements. We use this information to operate, secure, troubleshoot, and improve the Service—not for targeted advertising.

Information stored on your device

Fretline uses browser storage, including local storage, IndexedDB, caches, and service-worker storage, to keep you signed in, remember settings, and make selected song content available offline. Signing out clears private offline song caches where supported, but browser-managed data may also be cleared through your device or browser settings.

03

How we use information

• Authenticate your account and maintain your session.
• Save, synchronize, search, transpose, display, export, and delete your songbook data.
• Generate AI responses and perform requested web or song searches.
• Create public song links only when you choose to share an eligible arrangement.
• Provide support, enforce limits, prevent misuse, and protect the Service.
• Debug failures, understand aggregate product usage, and improve reliability.
• Comply with legal obligations and enforce our Terms of Service.

04

Google user data

Fretline uses Google Sign-In only to authenticate you and populate your basic account profile. We do not request access to Google Drive, Gmail, contacts, calendars, or other Google services unless a separate feature clearly asks for additional permission in the future.

We do not sell Google user data, use it for targeted advertising, or use basic Google profile data to train general-purpose AI models. We share it only with service providers needed to operate authentication, account management, security, and hosting, or when required by law. Fretline's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

05

When information is shared

We may share information in the following limited circumstances:

• Service providers. Hosting, database, authentication, AI, web-search, security, and infrastructure providers process information for us under contractual or technical restrictions. Supabase provides account authentication and database services.
• Public links you create. Anyone with an active share link can view the specific song version, chords, lyrics, key, and presentation settings included in that link. Public links do not require an account and may be copied by recipients. You can revoke them from Fretline.
• Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, respond to lawful requests, protect rights and safety, or investigate fraud or abuse.
• Business changes. Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate notice and protections.

We do not sell personal information or share it for cross-context behavioral advertising.

06

AI processing

Prompts and relevant song or conversation context may be sent to AI and search providers to fulfill your request. Their systems may process this information in other countries. We limit the information sent to what is reasonably needed for the feature, but you should not submit secrets, financial information, health information, or other highly sensitive data. AI output may be retained with your conversation history so you can revisit it.

07

Retention and deletion

We generally keep account information and user content while your account is active. When you delete eligible music data, Fretline permanently removes the corresponding private library records and dependent shares from the live Service. Operational, security, sync, billing, or audit records may be retained for a limited period—typically up to 90 days—and information may remain temporarily in encrypted backups or where retention is legally required.

Revoking Google access stops future Google authentication authorization but does not by itself delete your Fretline account or previously stored Fretline data. To request complete account deletion, use the available data controls or contact us.

08

Your choices and rights

• Review or update your profile information in account settings.
• Export or delete supported music data using Fretline's data controls.
• Revoke public song links at any time.
• Clear offline data through Fretline, your browser, or your device settings.
• Disconnect Fretline from your Google Account permissions page.
• Request access, correction, deletion, restriction, or portability where applicable.

We may need to verify your identity before completing a privacy request. Some information may be retained when legally permitted or required.

09

Security and international processing

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including authenticated access controls and user-scoped data access. No internet service is completely secure, so we cannot guarantee absolute security. Fretline and its providers may process information outside your country, subject to the safeguards required by applicable law.

10

Children

Fretline is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If local law requires a higher minimum age for a child to consent to online services, a parent or guardian must provide any required authorization.

11

Changes and contact

We may update this policy as the Service changes. We will update the date above and provide additional notice when required. Questions, privacy requests, and account-deletion requests can be sent to privacy@fretline.app.