Privacy Policy

1. Who we are

STEISH (“we”, “us”, “our”, or “the Platform”) is a browser-based live performance sequencer and music project platform. This Privacy Policy describes how we collect, use, store, and protect information when you use our website, application, and related services (the “Service”). It forms part of our Terms and Conditions. By using STEISH, you consent to the practices described here.

2. Information we collect

We collect information that you provide directly, that we obtain when you use the Service, and that we receive from third-party services we use to operate STEISH.

2.1 Account and profile

• Email address — required to create an account and for login.
• Password — stored only in hashed form; we never store or transmit your plain-text password.
• Name — optional; used to personalize your experience and display in the Service.
• Account metadata — creation date, role (user/admin), and subscription tier (e.g. starter, pro, team) when you use paid plans.

2.2 Band and artist profile

• Band or project name, artist type (band/solo), bio, location, genre, year formed, and social links (e.g. Spotify, Instagram, YouTube, website) if you choose to provide them.

2.3 Projects and creative content

• Project data — project name, timeline/snapshot data (arrangements, tracks, songs), scope (editor/set), and sharing settings (e.g. shared with team).
• Live sets — names and snapshot data of live sets you create.
• Media — references and metadata for audio and video files you upload or that are associated with your projects; the actual files may be stored in our cloud storage (e.g. Amazon S3) and processed for playback, export, or backup.

2.4 Team and collaboration

• If you use team features: email addresses of invited members, invite tokens, acceptance status, and association with your band/account.

2.5 Payment and subscription

• When you subscribe: we use Stripe to process payments. We store a Stripe customer identifier and your subscription plan; we do not store your full payment card details. Stripe’s own privacy policy applies to payment data they collect and process.

2.6 Session and technical data

• Session — we use NextAuth (or equivalent) to maintain your login session; session data and cookies are used to keep you signed in and to secure the Service.
• Usage — when Google Analytics is enabled (e.g. via NEXT_PUBLIC_GA_MEASUREMENT_ID), we may collect usage data such as pages visited, approximate location, device type, and similar analytics. Admin-only analytics (e.g. GA4 server-side) are used only for internal product and operations analysis.
• Local storage and PWA — the Service may use browser storage (e.g. IndexedDB) and service workers (e.g. Serwist) to cache project media and assets on your device for performance and offline use.
• Language preference — a cookie storing the interface language you chose, so the Service opens in the same language next time.

3. How we use your information

We use the information we collect to:

• Provide, operate, and improve the Service (e.g. authentication, project and media storage, playback, export, team collaboration).
• Store and process your projects, live sets, and media solely to deliver the functionality you use (e.g. rendering, backups, previews).
• Manage your account, subscription, and billing (including via Stripe).
• Send you service-related communications (e.g. account or security notices) where necessary.
• Understand usage patterns and improve the product (e.g. via analytics when enabled).
• Enforce our Terms and Conditions, prevent abuse, and protect the security of the Platform.
• Comply with applicable law and respond to valid legal process.

We do not sell your personal information. We do not claim ownership, royalties, or financial participation in your musical or creative works; we use your content only as needed to run the Service as described in our Terms.

4. Legal basis (if applicable)

Where laws such as the GDPR require a legal basis: we process your data for the performance of our contract with you (providing the Service), for our legitimate interests (security, analytics, improvement of the Service), and with your consent where we explicitly ask for it (e.g. optional marketing). You may have the right to withdraw consent or object to certain processing where applicable.

5. Storage and retention

Your data is stored on our infrastructure and with our service providers:

• Databases — account, profile, project metadata, snapshots, team data, and subscription information.
• Object storage — uploaded media files (audio, video) associated with your projects.
• Your device — cached media and app assets (e.g. IndexedDB, service worker caches) for performance and offline use.
• Session/cookies — session identifiers and related data for the duration of your session and as configured by our auth provider.

We retain your data for as long as your account is active or as needed to provide the Service, comply with law, or resolve disputes. If you close your account, we may delete or anonymize your data in line with our retention practices and the Terms (including possible permanent deletion of project and media data).

6. Third-party services and sharing

We use and may share data with the following types of third parties:

• Hosting and infrastructure — cloud providers (e.g. AWS) that host our databases, storage, and application servers; they process data on our instructions.
• Stripe — for payment and subscription management; Stripe’s privacy policy applies to their processing of payment data.
• Google Analytics / GA4 — when we enable analytics, Google may collect and process usage data; their policies apply to that data.
• Legal and safety — we may disclose data if required by law, to protect rights and safety, or to enforce our Terms.

We do not sell or rent your personal information to third parties for their marketing. We require service providers to use your data only for the purposes we specify and in line with this policy.

7. Your rights and choices

Depending on where you live, you may have the right to:

• Access and receive a copy of your personal data.
• Correct or update inaccurate data.
• Request deletion of your data (subject to legal or operational retention needs).
• Object to or restrict certain processing.
• Data portability (e.g. receive your data in a structured format).
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority (e.g. in the EU).

To exercise these rights or to close your account, contact us at support@steish.com. We will respond in accordance with applicable law. You can also use in-app options to manage your profile and, where available, to delete or export your data.

8. International transfers

Our servers and service providers may be located in different countries. If you access the Service from outside the country where we or our providers operate, your data may be transferred to and processed in those jurisdictions. We take steps to ensure that such transfers are subject to appropriate safeguards (e.g. standard contractual clauses or other mechanisms recognized by applicable law).

9. Security

We implement technical and organizational measures to protect your data (e.g. encryption in transit, access controls, secure storage). You are responsible for keeping your login credentials confidential. No system is completely secure; we will notify you and relevant authorities of significant breaches where required by law.

10. Children

The Service is not directed at children under the age required in your jurisdiction (e.g. under 13 in the US, or higher where applicable). We do not knowingly collect personal data from such users. If you believe we have collected data from a child, please contact us and we will take steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date. Continued use of the Service after changes constitutes acceptance of the revised policy. For material changes, we may provide additional notice (e.g. by email or in-app).

12. Governing law and contact

This Privacy Policy is governed by and interpreted in accordance with the laws of the Republic of Argentina, consistent with our Terms and Conditions. Any disputes are subject to the exclusive jurisdiction of the competent courts in Rosario, Santa Fe, Argentina.

If you have questions about this Privacy Policy or your personal data, contact us at: support@steish.com