Privacy Policy

1. Information we collect

• Account information: your email address, your name, your profile name, your profile photo if you add one, the identifier our sign-in provider gives you, and your organization if you use single sign-on.
• Project content: the Live Sets (.als files), samples, presets and other files in the project folders you sync, plus what we read from them (tracks, devices, clips, plugin names), your version history, commit messages and changelogs.
• Collaboration information: which projects you share and with whom, live sessions you host or join, the edits relayed during a live session, and share links (we store only a scrambled form of each link's token).
• Plugin inventory: the names, makers, formats and versions of the plugins installed on your computer, so collaborators can see what a project needs.
• Device information: an app-generated device identifier, a machine identifier, your operating system and app version, and your device name.
• Technical and security logs: IP address, user agent and timestamps of requests, and a record of security-relevant actions such as sign-ins and uploads.
• Your agreement to these policies: each version of the Terms of Service and Privacy Policy you accept, when you accepted it, and the IP address, user agent and app version you accepted from.
• Crash and error reports: when the desktop app crashes or hits an error, a report describing the error and what the app was doing, tagged with your account's internal ID and the app version. Before a report is sent, the app removes sign-in tokens, email addresses, the query part of web addresses, your computer's name, and your home folder from file paths. You can turn crash reports off in Settings → Privacy.

We don't collect payment information, we don't use advertising or cross-site tracking, and the app contains no third-party analytics. Crash reports are used only to find and fix problems.

The desktop app also keeps a local database and cached copies of project files on your computer. That data stays on your device except for what the app syncs as described above.

2. How we use it

• to provide CollabSync: storing, syncing and showing your versions and changes, running live sessions, and checking plugin compatibility;
• to sign you in and keep accounts and the service secure, including detecting abuse and enforcing rate limits;
• to send you sign-in emails and important notices about the service or these policies;
• to fix problems and improve CollabSync;
• to comply with the law and enforce our Terms.

We don't sell your information, use your content for advertising, or use your content to train machine-learning models.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performing our contract with you (providing the service), our legitimate interests (security, fixing and improving the service), complying with legal obligations, and your consent where we ask for it.

3. Who we share it with

• People you choose: collaborators on your projects and participants in your live sessions see the content, names and plugin information you share with them.
• Service providers who process information for us under contract: WorkOS (sign-in and sign-in emails), Railway (application hosting and our database, in the United States), Cloudflare (file storage on Cloudflare R2) and Sentry, operated by Functional Software, Inc. (crash and error reports from the desktop app, in the United States). They may use it only to provide their services to us.
• Authorities, when the law requires it, or when needed to protect the rights, safety or property of our users, the public or us.
• A successor, if CollabSync is transferred to someone else. We will tell you before your information becomes subject to a different privacy policy.

4. How long we keep it

We keep your information while your account is open.

When you delete your account, we immediately delete your profile, your devices, your projects with their full version history, your live sessions, your plugin inventory, your security logs, your record of accepting these policies, and the stored files that no other user's project still uses. Versions you contributed to other people's projects stay in those projects with your name removed, along with the files they need.

Copies in database backups expire within 30 days. Server logs, which can include IP addresses, are kept by our hosting provider for up to 30 days. Crash and error reports are kept by Sentry for up to 90 days.

5. Your choices and rights

In the desktop app, under Settings → Account, you can download a copy of your data (Export my data) and delete your account (Delete account). Under Settings → Privacy you can turn off crash reports. You can also email us to access, correct, export or delete your information, or to object to or restrict how we use it.

Depending on where you live (for example the EU, the UK, California or Texas), the law may give you these rights, the right to withdraw consent, and the right to appeal our decision on a request. We honor these requests for everyone, wherever you live, and answer within 30 days. We may need to confirm the request comes from you. We won't treat you differently for using your rights.

We don't sell personal information or share it for cross-context behavioral advertising.

If you are in the EEA or UK and are unhappy with how we handled your information, you may complain to your local data protection authority.

6. Where your information is processed

CollabSync is run from the United States, and our service providers process your information there. If you use CollabSync from another country, your information is transferred to the United States, where privacy laws may differ from those where you live. Where the law requires it, we rely on safeguards such as standard contractual clauses for these transfers.

7. Security

Information is encrypted in transit, and our providers encrypt stored data. The desktop app keeps your sign-in tokens in your operating system's secure storage, and access to projects and sessions is checked on every request. No system is perfectly secure, though. If a breach affects your information, we will tell you as the law requires.

8. Children

CollabSync is not meant for anyone under 16, and we don't knowingly collect information from them. If you think a child has given us information, contact us and we will delete it.

9. Changes to this policy

We may update this policy. We will post the new version with a new effective date, and for material changes the desktop app will ask you to review and accept it.

10. Contact

For any question or request about privacy, email girardi.ang@gmail.com.