QuarterTone is operated by JeffCo Industries, LLC ("Company", "we", "us", or "our"). This Privacy Policy describes how we collect, use, and safeguard personal information when you use our services.
1. Information We Collect
We collect only the categories of data required to deliver and secure our music intelligence platform:
- Identity and Authentication: Google subject id and verified email address.
- Age Eligibility: Your explicit assertion that you are at least 18, linked to the version of the Terms you accepted; we do not ask for or store your date of birth.
- Billing and Payments: Billing identifiers and customer tokens provided by Stripe and PayPal (we do not store raw payment card numbers).
- User Assets and Activity: User-uploaded reference files, project structures, and filtered job events.
- Declared Musical Settings: Ensembles and rosters you save, any playing-grade or allocation bounds you declare, your house-style instructions, and your usual deliverable choices. These are your declarations; we do not infer or learn your taste from your activity.
- Optional Studio-Opening Intake Answers: When your account is waiting for a studio place, you may optionally share what kind of piece or work you want to make first, what starting sources you work from, when you need it, and a brief note. Every question is optional.
- Audit and Telemetry: Execution ledgers, legal acceptances, new device confirmations, and Data Loss Prevention (DLP) compliance events.
- Email Delivery Outcomes: For newly queued question and customer-support emails associated with your account and addressed to one recipient, we may record our email provider's delivery, delay, bounce, complaint, failure or suppression reports. We link these reports to the account and message using identifiers, timestamps and a message-specific recipient digest. The digest is pseudonymous personal data, not anonymous data. These outcome records contain no email subject or body, raw provider payload or error, or open or click tracking. They help us investigate whether service messages are reaching their destination. A delivery report means the receiving mail server accepted the message; it does not establish inbox placement or that you read it. Missing reports do not establish delivery or failure.
Optional Google Drive and Dropbox Imports
You can use Google Drive or Dropbox to choose files to copy into a QuarterTone project. We receive the selected files and their names, types and sizes, and record which service they came from. Importing a file creates a separate copy in your project; it does not synchronize your account or change the original file.
- **Google Drive:** We request the `drive.file` permission, which gives access to the specific files you select or otherwise authorize for this app, rather than your entire Drive. We use a short-lived access token held in page memory and sent to our import service to read the selected file. We do not save that token to persistent storage or request a refresh token for file imports.
- **Dropbox:** The Dropbox Chooser supplies temporary download links for the files you select. We use those links to copy the files. We do not link your Dropbox account through OAuth, store Dropbox account credentials, or save the temporary links to persistent storage.
Imported files are stored and processed like files uploaded from your device. They can be made available to the people you authorize to access the project and to the infrastructure and model providers described below as needed to carry out your requests. The AI processing, retention and deletion provisions in this policy apply to these copies. We do not use files received through these integrations to train AI models or for advertising.
You can remove an imported file from the project's Files page or request account deletion through Your data. Removing QuarterTone's access in your Google Account prevents further authorized access but does not delete copies already imported into QuarterTone. Removing a copy in QuarterTone does not delete the original in Google Drive or Dropbox. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
2. Lawful Bases and Purposes of Processing
We process personal data under two primary lawful bases:
- Performance of Contract: To manage your account, open studio places in waves, execute requested commissions, bill subscriptions, and deliver outputs. Declared musical settings and optional studio-opening intake answers are stored at your instruction.
- Legitimate Interests: To detect abuse, enforce rate caps, monitor leak detection security anomalies, and prevent prompt exfiltration; and to improve the shared playbooks our arranger works from, as described below.
When you tell us a result missed, in a correction request or a support message, or when a commission fails or is refused, we may write down a general lesson about how the work should be done and revise the shared playbooks our arranger works from. A lesson describes method only. It never copies your music, lyrics, or files, and it is not linked to your account in the playbooks. We do not use your uploads, sessions, or deliverables to train AI models.
3. Authorized Subprocessors
JeffCo Industries, LLC engages authorized subprocessors to deliver platform capabilities:
- Hosting and Infrastructure: Vercel, Cloudflare
- Database and Authentication: Supabase
- Payments and Billing: Stripe, PayPal
- Transactional Email: Resend
- Rate Limiting: Upstash
- Model Inference: OpenRouter, Z.ai, DeepInfra, Anthropic, OpenAI, Google
Managed-tier requests are routed through OpenRouter to one pinned provider per model: Z.ai for GLM models (processed in Singapore) and DeepInfra for DeepSeek models (processed in the United States).
Retention periods depend on the data category and the processor's applicable terms. Our transcript retention period does not apply to all processor records, including payment records.
For questions, contact legal@quartertone.ai.
4. AI Model Processing by Tier
Data processing differs based on your selected compute tier:
- Managed Tier: Executed via dedicated platform accounts. We route your requests through OpenRouter to the selected model provider. The provider may retain prompts and completions under its own policies. We do not guarantee zero data retention.
- Own-Account Tier: Your external provider serves as your own-account processor subject to your direct agreement with that vendor. Prompts and completions may be visible in your provider-side logs.
5. Data Retention Schedule
We retain personal data in accordance with defined lifecycle schedules:
| Category | Retention Duration | Purpose |
|---|---|---|
| Conversation Transcripts | 90 days | Arranger session logging and replay |
| Idle Thread Archives | 90 days | Inactive session history preservation |
| Stored Asset Revisions | 5 revisions | Version history per musical deliverable |
| Declared Musical Settings & Studio-Opening Intake Answers | Until you remove them or your account is erased after the deletion grace period | Reuse of your declared settings and matching early studio waves to your starting materials |
| Email Delivery Outcomes | An observation window of up to 30 days from when the email was queued, followed by scheduled deletion | Investigating service-message delivery; retries and later reports never extend the window |
| Deletion Grace Period | 7 days | Temporary retention before permanent purge |
| Accounting & Ledger | As required by law | Tax and financial accounting obligations |
| Compliance & DLP Events | 365 days | Platform security and integrity verification |
Expired email outcomes no longer appear in operational views or the account JSON export. Their account linkage, recipient digest, provider identifiers and facts are removed by scheduled cleanup, or when the account is erased. Older mail, anonymous support requests, team mail and messages addressed to multiple recipients are outside this outcome-recording scope.
6. Access, Deletion, and User Rights
You may request an export of your stored personal data or exercise data access rights within one month through Your data. The Settings JSON export includes your saved declared musical settings and any optional studio-opening intake answers on your account. It also includes available recent email outcome facts for your account, stating the observation window and whether the list was truncated; this is not a complete email archive. When you request account deletion, Your Content enters a 7-day grace period, followed by complete permanent deletion within 30 days. Declared musical settings and studio-opening intake answers are erased with your account and are not retained as accounting records.
7. Security and Data Protection
Our technical safeguards include:
- Per-user encryption of container harness homes.
- Host-side credential injection without client-side parsing.
- Single-tenant, isolated execution environments.
- Per-musician database access controls for declared musical settings and studio-opening intake answers.
8. International Transfers and Incident Notification
Where personal data is transferred internationally, we rely on Standard Contractual Clauses (SCCs). In the event of a verified personal data breach involving high risk to your rights, we notify supervisory authorities within 72 hours where required by applicable law.
9. Cookies and Tracking
We use essential cookies only for session authentication and security. We do not use third-party tracking, profiling, or advertising cookies, and therefore do not present an intrusive cookie banner.
To know how many people reach our home and pricing pages, our server counts page loads per day, together with the website a visitor arrived from cut down to its domain name (for example, a link from a forum post is counted under that forum's domain, never the post's address). The count sets no cookie, runs no script in your browser, and stores no IP address, browser details, account, or full address of the page you came from; it is a running total per day, page and domain, and is not linked to you. Automated clients and link previews are not counted.
10. Age Requirement and Contact
The platform is not directed to individuals under 18 years of age. For privacy inquiries or rights requests, contact legal@quartertone.ai. For general legal matters, reach legal@quartertone.ai.