Privacy

• What we keep: your email address, your name and language, what you play, and what you do in your groups: the works you add, your ratings, comments and votes, the times you are free, and the sheet music you upload.
• Who sees it: your group sees your name, what you play and what you share there, including who rated or voted on a work, though never the rating or the vote itself. Only its admins see your email address, your phone number and any private note about you. We never sell your address or use it for marketing.
• How long: your account, until you delete it. What you do in a group, while you are a member. Deleting your account takes your name off whatever stays with your groups.
• What you can do: change your details or delete your account on your profile, turn analytics off on this page, or write to hello@upbeat.page.

The full policy follows.

Upbeat is run by Ben Leavett EI (entrepreneur individuel), trading as Cadence Digital, SIRET 104 365 267 00012, [address] ("we"). We are the data controller for the personal data described here.

For anything about your data, write to hello@upbeat.page. We answer within one month.

Your account. Your email address, which is how you sign in. Your name, and the language you read Upbeat in. A phone number, if you or an admin of your group add one. When you joined.

Your place in each group. Whether you are an admin or a member, and what you play. If an admin adds a private note about you (for example "away until March"), we hold that too. And when you last opened the group, and the visit before that, used only to show you what is new since your last visit.

What you do in a group. The works you add, the ratings you give them, your comments, your votes on a shortlist, the times you say you are free, the dates an admin puts in the calendar, and any sheet music you upload.

If someone invites you. The admin's invitation holds your email address, and may hold a phone number, an instrument and a note the admin wrote. If you join with that address, these become part of your membership. If you never join, they stay with the invitation until an admin withdraws it.

What your browser keeps. A few small cookies that keep you signed in and remember where you were (see Cookies, below). One more that PostHog uses to count visits anonymously, unless you turn analytics off.

We do not ask for, and do not want, anything else: no date of birth, no address, no payment details.

• Everyone in the group sees your name, what you play, your role, the works you add, your comments (with your name), and your name against the times you are free.
• Ratings and shortlist votes are shown to members as counts: they do not see which rating or vote you gave. Admins also see who gave which rating when they create a shortlist.
• The group's recent activity, on its Home page, shows everyone in the group who rated, voted on or commented on a work, and who added works, dates or files. It names you, never the rating or the vote itself.
• Only the group's admins see your email address, your phone number, and any private note an admin wrote about you.
• Anyone who has a group's link can see the group's name and its admins' names on the page for joining it.
• We can see an overview of each group (its name, its size, what it plays, and how much it has used Upbeat) to run and improve the service. It does not show us who you are.

Apart from replies to anything you write to us, we send only these. The sign-in code, invitations and new dates go because someone asked for them at that moment; the welcome answers something you have just done; the reminder goes because two days have passed:

• Your sign-in code, when you ask for one. It holds a code and nothing else.
• An invitation, when someone in a group invites your address. At most one per group. Every invitation has a link to stop all invitations to your address, from any group.
• A welcome, once: when you finish setting up the first group you create, or when you join your first group. It says what you can do there and links to the group. Never for a later group.
• A reminder, once per group, two days after you set it up or join it, and only if something is still waiting for you there: for example works to add, a shortlist to vote on, or dates you have not yet looked at. If nothing is waiting, nothing is sent. Every reminder has a link that stops all reminders to your address, from any group, without signing in; it does not stop sign-in codes, invitations or new dates.
• New dates, when an admin adds rehearsal or concert dates and chooses to tell the group. [Until an opt-out is added: if you would rather not receive these, ask your group's admin or write to us.]

We never sell your address or use it for marketing.

When someone in your group asks Upbeat to suggest works, we send Anthropic (the maker of the AI model that writes the suggestions) a description of the group so that it can suggest things you could actually play: the group's name, its instruments, what it says it likes to play, the works it already has, the names of its past programmes, and the reasons members gave for flagging works as unsuitable. We do not send anyone's name, email address or phone number, or any comment, note or rating.

We always count, anonymously, how Upbeat is used: which pages are opened and which features are used, so that we can see what works and what does not. We use PostHog, hosted in the European Union. This counting uses a random id that PostHog gives your browser, and no person: it does not know who you are. We do it on the basis of our legitimate interest, under the CNIL's exemption for audience measurement, which is why it needs no consent.

What PostHog receives is deliberately narrow:

• A random id for your browser, which says nothing about who you are. Its cookie lasts at most 13 months.
• What happened, as a fixed list: "a work was rated", "a shortlist was created" and so on, with a count or a choice where it matters (for example which rating level). Never anything anybody typed.
• Which kind of page, never its real address. Upbeat's addresses contain the key to your group, so we send only the pattern, such as "a group's join page".
• Your browser, device type and screen size. Your internet address reaches PostHog in transit, but we ask it not to use it to locate you, and it does not.

It never receives your group, its name or any link to it, and it never records your screen. It keeps what it receives for at most 25 months.

With your agreement, we also link this counting to your account, using an internal number that stands for you, never your name or email address, so that your phone and your laptop count as one person. We ask when you are signed in, and you can change your answer at any time on this page.

You can turn analytics off here, and then nothing is sent to PostHog at all. Either way, Upbeat works exactly the same.

How far people get, counted on our own server. To see where people stop when they set up a group or join one, Upbeat notes, on its own server, which steps were reached and when: for example that a group's link was opened, that an address was then confirmed, and that the person then joined the group. Before anyone signs in, the steps are tied together by a random id in a cookie (upbeat_visitor), set when a group's link is opened; it says nothing about who you are and is never sent to PostHog or anyone else. Nobody is listed by name, and it stops if you turn analytics off.

Trying out features. To offer a feature to some accounts before others, we may list their account ids in PostHog. Upbeat checks that list on its own server, so nothing about you is sent to PostHog to do it, whether analytics is on or off.

We use these providers, who handle data only on our instructions:

The United Kingdom has an adequacy decision from the European Commission. Vercel, Neon, Resend and Anthropic are US companies: for Vercel we rely on the European Commission's standard contractual clauses; for Neon, Resend and Anthropic, on [basis to be confirmed].

Spotify and SoundCloud. If you press Listen on a work, your browser loads the player for that recording from Spotify or from SoundCloud, whichever the link is to. Their own privacy policies apply to that. Nothing is loaded from either until you press it.

SoundCloud short links. If you save a work with a SoundCloud short link (on.soundcloud.com), our server asks SoundCloud which recording it leads to, so that the full link can be stored. That request carries the link and nothing about you.

Links out. Find recording and Find sheet music open searches on Spotify or IMSLP in your browser only when you click them. Play recording opens the link a member saved for that work, wherever it leads, also only when you click it.

The first five are strictly necessary for Upbeat to work, and the last two are exempt as anonymous audience measurement; none of them needs consent. Linking your use to your account does, and is asked for separately.

• Your account is kept until you delete it.
• What you do in a group (ratings, comments, votes, availability) is kept while you are a member, and so is when you last opened the group. Ratings older than twelve months stop counting towards anything, but are kept until you leave or delete your account.
• Sign-in codes work for ten minutes. [Unused codes are deleted after [period].]
• A deleted group can be restored by its admins for 30 days. [At present it is not erased after that; we will erase deleted groups after [period].]
• Invitations are kept until the person joins or an admin withdraws them.
• If you stop invitations to your address, we keep the address on a list so that we can keep that promise.
• Analytics is kept by PostHog for at most 25 months.

Leaving a group, or being removed from one, deletes your membership: your role, what you play, the private note about you, when you last opened the group, and your ratings, comments, votes and times in that group. Works you added stay in the group's library without your name.

Deleting your account (on your profile) deletes your account and does the same in every group you are in. Works you added and sheet music you uploaded stay with the groups, without your name. If you are the only admin of a group, you will be asked to make someone else an admin first, so that the group is not left without one.

You can ask us to show you the data we hold about you, correct it, delete it, restrict or object to how we use it, or send it to you in a portable form. You can withdraw your consent to linking, or turn analytics off, at any time on this page.

You can do some of this yourself: change your name and language on your profile, your phone number and instrument on your group's Members page, and delete your account on your profile. For anything else, write to hello@upbeat.page. We may need to confirm the request comes from you, which we will do by email to your address.

If you think we have not handled your data properly, you can complain to the CNIL, the French data protection authority (cnil.fr), or the authority where you live.

Upbeat is not meant for children under 15 unless a parent or guardian agrees.

If we change how we use your data, we will update this page and its date. If a change matters, we will tell you in Upbeat before it takes effect.