Privacy Policy
Last updated: April 16, 2026
What we collect
Account basics (email, optional display name), practice profile (instrument, level, date of birth for COPPA compliance), and interactions with the product (Judge submissions, feedback reports, practice logs). We also collect standard server and product analytics metadata — IP, user agent, event timestamps.
Audio recordings
Your Judge Mode audio is processed in memory, passed to our feature extraction and analysis pipeline, and discarded when the report is returned. We do not store audio by default. You can optionally opt in to recording storage (e.g. to build a longitudinal practice journal); opting out deletes any previously stored audio.
How we use your data
To operate the service, to generate feedback reports for you, to send transactional emails (login links, receipts, account notices), and — if you opt in — to send product updates. We do not sell your data, and we do not train third-party AI models on your recordings.
Sub-processors
We use: Supabase (auth + database), Stripe (payments), Vercel (hosting), Resend (transactional email), Replicate (CREPE pitch feature extraction), Anthropic (Claude language model for feedback generation). Each processes data only as needed to deliver the service.
COPPA (children under 13)
If we identify a user as under 13, we gate audition submissions and paid features behind verifiable parental consent via a confirmation link sent to a parent or guardian. Until consent is received, we limit data collection to what's strictly necessary to support the account.
Cookies
We use first-party cookies for authentication (session tokens set by Supabase). We don't use third-party advertising cookies.
Your rights
You can access, correct, export, or delete your account data by emailing privacy@orchestrakingdom.com. We respond within 30 days. If you're a California resident, you have additional rights under CCPA; if you're in the EU, you have rights under GDPR.
Retention
We keep account and feedback data for as long as your account is active. When you close your account, we delete profile and practice data within 30 days. Billing records are retained longer for accounting and tax compliance.
Security
We encrypt data in transit (TLS) and at rest. Access to production systems is restricted and logged. We'll notify affected users within 72 hours of discovering a material breach.
Changes to this policy
If we materially change how we handle your data, we'll email you at least 14 days before the change takes effect.
Contact
Privacy questions: privacy@orchestrakingdom.com