Privacy Notice

1. Who We Are

SongSyntax 101 is operated by Simon Watson ("we", "us", "our"). Simon Watson is the data controller responsible for personal data processed through the Service.

2. Personal Data We Collect

• Account data — name, email address, and login credentials you provide when signing up.
• Support messages — the contents of any messages you send us through the contact form or email.
• Usage & telemetry — how you interact with the Service, prompts you generate, feature usage, and error logs.
• Device & connection data — IP address, browser type, device identifiers, and similar technical information.

Payment card details are collected and processed directly by Paddle, our Merchant of Record. We do not receive or store your full payment card information.

3. How We Use Personal Data

• To create and maintain your account and provide the Service.
• To respond to support requests and communicate with you about your account.
• To secure the Service, prevent fraud, and enforce our Terms & Conditions.
• To improve product features, fix bugs, and analyze usage.
• To comply with legal obligations.

4. Legal Bases

Where applicable law requires a legal basis for processing, we rely on: performance of a contract with you (to provide the Service); our legitimate interests (to secure, operate, and improve the Service); your consent (where required); and compliance with legal obligations.

5. Sharing Personal Data

We share personal data with:

• Paddle — our Merchant of Record, which handles sale of the Service, subscription management, payments, tax compliance, invoicing, and refunds.
• Hosting & infrastructure providers — for application hosting, database storage, and content delivery.
• AI model providers — where necessary to process your prompts through third-party AI services that power the Service.
• Analytics & error-monitoring providers — to understand product usage and diagnose problems.
• Professional advisers — such as accountants or legal advisers, where necessary.
• Authorities — where required by law or legal process.

6. International Transfers

Our providers may process personal data outside the UK/EEA. Where such transfers occur, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Retention

We keep personal data only for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When no longer needed, data is deleted or anonymised.

8. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data; to restrict or object to certain processing; to withdraw consent; and to lodge a complaint with your local data protection authority. In the UK/EEA, we aim to respond to requests within one month.

To exercise any of these rights, contact us via the contact form.

9. Security

We apply appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege administration — to protect personal data. No system can be guaranteed 100% secure, but we work to reduce risk.

10. Cookies

We use essential cookies necessary to run the Service (for example, to keep you signed in). Where we use analytics or other non-essential cookies, we will request your consent where required by law. You can manage cookies through your browser settings.

11. Changes

We may update this Privacy Notice from time to time. The "Last updated" date above reflects the most recent revision.

12. Contact

Questions about this Privacy Notice or your personal data? Contact us through the contact form.