Privacy Notice

SYNCLAB is operated by Christopher Shivers (Detroit, Michigan, USA), trading as SYNCLAB. We are the data controller for the personal data described here, which means we decide why and how it is used. Contact: cbshivers@gmail.com.

What we collect and why

• Account data (email address, password credentials, sign-in provider ID) — to create and secure your account. Legal basis: performance of our contract with you.
• Project content (projects, audio recordings, MIDI, samples, track notes you choose to save to the cloud) — to provide cloud saving and let you reopen your work. Legal basis: contract.
• Subscription status (plan, status, renewal dates, payment provider customer and subscription identifiers received from Paddle) — to unlock the features you paid for. Legal basis: contract. Card details never reach us; Paddle handles payment data.
• Support messages you send us — to answer you. Legal basis: legitimate interest in supporting customers.
• Technical and usage data (IP address, device and browser type, error reports, feature usage) — for security, fraud prevention, debugging and product improvement. Legal basis: legitimate interests.
• Marketing emails — only if you opt in. Legal basis: consent, withdrawable at any time.

Microphone and MIDI input are used only in your browser to record and play music. Audio is not sent to us unless you save or upload a project.

Who we share it with

• Service providers / subprocessors: hosting, database, authentication and storage providers, and error-monitoring tools.
• Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

We do not sell your personal data.

International transfers

Our providers may process data in the United States and other countries. Where data is transferred out of the UK or EEA, we rely on adequacy decisions or Standard Contractual Clauses as appropriate safeguards.

Retention

Account and project data is kept while your account is active and for up to 12 months after you close it, so you can recover work; billing records are kept as long as tax law requires (typically 7 years). Technical logs are kept for up to 12 months. After that, data is deleted or anonymised.

Your rights

Depending on where you live, you may request access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interests, and withdraw consent at any time. Email cbshivers@gmail.com and we will respond within one month. UK/EEA users also have the right to complain to their local data protection authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level database security, so each account can only reach its own data. No system is perfectly secure, so please use a strong, unique password.

Cookies

We use essential cookies and local storage to keep you signed in, remember your studio settings and your saved microphone and MIDI devices, and to run checkout. We do not use advertising cookies. You can clear or block cookies in your browser settings, but sign-in and saving will stop working.

Children

SYNCLAB is not intended for children under 13, and we do not knowingly collect their data.

Changes

We may update this notice; material changes will be announced in the app.