Last updated: June 2026
1. Data Controller
The controller of your personal data is Florian Kurpiela, creator of the Musi Edit platform (hereinafter referred to as the 'Controller'). In matters related to the protection of personal data, its modification or deletion, you can contact directly at the e-mail address: kontakt.musi@gmail.com.
2. What data do we collect and for what purpose?
We collect only the information that is absolutely necessary to provide the service at the highest level:
- Account and login data: We collect your e-mail address and basic profile data (e.g., first and last name if you log in via Google). We process them to authorize and maintain your account. This process is handled by the secure Firebase Authentication system (Google LLC).
- Billing and transaction data: We collect information about your subscription status and transaction identifiers. Important: Musi Edit does not process, see, or store your payment card numbers. The entire payment process is encrypted and handled externally by Stripe, Inc. We only receive confirmation of whether the subscription was successfully paid.
- Technical and creative data (MIDI / Audio signals): When you use the editor and record tracks, the application processes signals from your instrument. They are used in real time solely to generate a correct musical score (MusicXML/PDF files). We do not claim any copyrights to your melodies, do not sell them to third parties, and do not use them to train external artificial intelligence models.
- Operational data: We collect basic server logs (e.g., IP addresses, error information) to ensure the stability and security of our infrastructure.
3. Legal basis for processing (GDPR)
We process your data in accordance with European law on the following bases:
- Art. 6 sec. 1 lit. b GDPR: Processing is necessary for the performance of a contract (provision of the score generation service, account maintenance in the SaaS model).
- Art. 6 sec. 1 lit. c GDPR: Processing is necessary for compliance with a legal obligation (e.g., tax and accounting regulations for paid subscriptions).
- Art. 6 sec. 1 lit. f GDPR: Legitimate interest of the Controller (protection against fraud, diagnosing errors in the application, and improving transcription algorithms).
4. Data Recipients (Third Parties)
To ensure Musi Edit runs smoothly, we use trusted infrastructure providers (so-called Processors) who meet the highest security standards:
- Google LLC (Firebase): User database storage and authentication.
- Stripe, Inc.: Payment gateway and recurring subscription management.
- Hosting providers (e.g., Vercel / Render): Maintenance of frontend application servers and engines converting music files in the backend.
5. Data retention period
We store your login data and subscription information as long as you have an active account on the site.
Session files related to recording notes (raw MIDI/ABC data) are processed by our servers temporarily, for the duration of the session, in order to generate the final file for download.
If you delete your account, your data will be completely anonymized or removed from our database, except for transaction data that we must store for the period required by tax law.
6. Your Rights
In accordance with data protection regulations, you have full control over your information. You have the right to:
- Access your personal data and receive a copy of it.
- Rectify data if it is incorrect.
- Delete data ('right to be forgotten').
- Restrict processing or object to processing.
To exercise your rights, send a message to the Controller's contact address.
7. Cookies
Musi Edit uses only strictly necessary cookies. They are used to:
- Maintain your session (so you do not have to log in again when refreshing the page).
- Ensure the correct and secure operation of the Stripe payment gateway.
We do not use aggressive tracking cookies (so-called advertising trackers), so we do not attack you with annoying consent banners. By using the application, you accept the use of technical cookies necessary for its operation.