1. Introduction

Welcome to Improvisio ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our guitar improvisation learning platform.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Improvisio is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@improvisio.app.

3. Information We Collect

We collect the following types of information:

• Account Information: Email address, name, and profile details when you create an account.
• Authentication Data: Information provided through third-party authentication services (e.g., Google OAuth).
• User Preferences: Guitar type, skill level, and brand preferences you provide.
• Usage Data: Information about how you interact with our platform, including pages visited and features used. This is collected via Plausible Analytics, a privacy-friendly analytics tool that does not use cookies, does not collect personal data, and does not track you across websites.
• Technical Data: IP address, browser type, device information, and cookies.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: Processing necessary to provide our services to you.
• Consent: Where you have given explicit consent for specific processing activities.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services.
• Legal Obligation: Processing necessary to comply with legal requirements.

5. How We Use Your Information

• To provide and maintain our guitar learning platform
• To personalize your learning experience
• To communicate with you about your account and our services
• To improve and optimize our platform
• To ensure the security of our services
• To comply with legal obligations

6. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist in operating our platform (e.g., hosting, authentication).
• Legal Requirements: When required by law or to protect our rights.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal data to third parties.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your personal data.
• Right to Restrict Processing: Request limitation of processing.
• Right to Data Portability: Receive your data in a portable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, please contact us at privacy@improvisio.app or use the account deletion feature in your profile settings.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure authentication, and regular security assessments.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Cookies

We use essential cookies to ensure the proper functioning of our platform — for example, to keep you signed in. We do not use any analytics or tracking cookies: our analytics provider (Plausible) is cookieless by design. You can manage your cookie preferences through your browser settings.

12. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Email: privacy@improvisio.app

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.