Privacy Policy

1. What We Collect

When you use Riffwork without an account, no data is sent to our servers — your files stay in your browser's local storage.

When you create an account we collect:

• Your email address (for authentication and account recovery)
• Guitar Pro files you choose to sync to the cloud
• Bar notes you attach to songs
• Timestamps for sync conflict resolution

2. How We Use It

• Delivering your cloud library to your devices
• Generating cloud share links you create
• Sending password reset emails (only when you request one)
• Processing subscription payments (via Lemon Squeezy)

We do not use your data for advertising, and we do not sell or rent it to third parties.

3. Data Storage

Account data and cloud files are stored with Supabase (AWS infrastructure, US East region). Data is encrypted in transit (TLS) and at rest.

4. Payment Processing

Pro subscriptions are processed by Lemon Squeezy. We receive your email address and subscription status. We do not store your card details — those are handled entirely by Lemon Squeezy.

5. Local Storage

Riffwork stores your local library, preferences, and app state in your browser's localStorage. This data never leaves your device unless you sign in and enable cloud sync.

6. Cookies

We use a session cookie issued by Supabase to keep you signed in. We do not use advertising cookies or third-party tracking.

7. Your Rights

• Access: Your cloud songs are visible in your account library.
• Export: Download any song by opening it and exporting to .gp7.
• Delete: Delete individual songs in the app, or email us to delete your entire account.
• Correction: Update your email via account settings.

8. Children

Riffwork is not directed at children under 13. We do not knowingly collect data from children.

9. Changes

We may update this policy. Material changes will be communicated via the app or email before taking effect.

10. Contact

Questions or data requests: heath@silentpartnersstudio.com