Karps Music / Legal · Privacy
Privacy Policy
At Karps Music, your privacy is important to us. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data, in accordance with Brazil's General Data Protection Law (LGPD — Lei nº 13.709/2018) and other applicable regulations.
1. Information We Collect
Account Information
When you register, we collect:
- Username
- Email address
- Password (stored as a hashed value — we never store plain text passwords)
Google Sign-In (optional)
If you choose to sign up or log in with Google, we receive only your name, email address, and profile picture from Google. We do not receive your Google password or any other Google account data.
Usage Data
We automatically collect:
- Pages visited and features used
- Project and track metadata (names, durations, creation dates)
Technical Data
For security and platform analytics purposes, we collect IP addresses and browser information (User-Agent) with each request made to our platform. This data is stored encrypted on our servers and is automatically deleted after 7 days. Aggregated analytics data (total visits, countries, page paths) is retained indefinitely but contains no personal identifiers. This data is used solely to protect the platform against abuse and understand aggregate usage patterns. It is not shared with third parties and is not used for advertising.
Legal basis: legitimate interest (LGPD, Art. 7, IX) — platform protection against abuse and aggregate usage analysis, without personal identification.
Audio Files
Audio files you upload are stored on our servers to apply effects and allow you to download the processed result. Files are stored as part of your project until you delete them or your account is terminated.
Payment Information
We do not collect or store your payment card details. All payment processing is handled by Stripe. We only receive confirmation of successful transactions and your subscription status.
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process your audio files and apply the effects you select
- Manage your account and subscription
- Send transactional emails (verification, password reset, billing)
- Protect the platform from abuse, fraud, and unauthorized access
- Respond to your support requests
We do not sell your personal data to third parties. We do not use your account data or uploaded audio for advertising. With your consent, we use Google Ads cookies only to measure the results of our own ads (see sections 4 and 5).
3. Audio Processing
Your audio files are processed on our servers to apply the effects you select. Your audio is never shared with any third party, and we do not use your uploaded audio to train any model or algorithm.
4. Third-Party Services
We use the following third-party services that may process your data:
- Google — authentication via Google OAuth (optional). Subject to Google's Privacy Policy.
- Google Ads — measurement of our ad campaigns (conversions and, with your consent, audiences for our own ads). Details in section 5. Subject to Google's advertising policies.
- Stripe — payment processing and subscription management. Subject to their Privacy Policy.
- Email provider — transactional emails (verification, password reset). Only your email address is shared for delivery purposes.
5. Cookies
Essential cookies
Authentication cookies keep you logged in. They are required for the Service to work and do not depend on consent. If you disable them in your browser, you will not be able to stay logged in.
Advertising cookies (Google Ads) — optional
Only if you click Accept in the cookie banner, the Google tag stores cookies (such as _gcl_au) that let us know whether a visit or signup came from one of our ads and help Google optimize and target our campaigns. Data involved: cookie identifiers, pages visited, ad click information and conversion events, processed by Google LLC, including in the United States. Legal basis: consent (LGPD, Art. 7, I).
If you decline or make no choice, no advertising cookies are stored. The Google tag still sends Google cookieless signals (such as time, browser, page and consent status) used for aggregate and modeled ad measurement, without identifying you. Legal basis: legitimate interest (LGPD, Art. 7, IX).
You can change your choice at any time:
6. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, your personal information and uploaded files will be permanently deleted within 30 days, except where retention is required by law.
7. Children's Privacy
Karps Music is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If we become aware that we have collected data from a child under 13, we will delete it immediately. If you believe a child under 13 has provided us with personal data, please contact us at contact@karpsmusic.com.
8. Security
We adopt the following technical measures to protect your data:
- HTTPS enforced across the entire platform
- Passwords stored encrypted — never in plain text
- Authentication cookies are HttpOnly and Secure
- Access to production systems is restricted and monitored
No system is 100% secure. In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by law.
9. Your Rights
Under LGPD Art. 18, you have the right to:
- Confirm the existence of processing of your personal data
- Access the personal data we hold about you
- Correct incomplete, inaccurate, or outdated information via your account settings
- Delete your account and all associated data
- Export your data in a portable format upon request
- Withdraw consent at any time — for advertising cookies via Cookie preferences (section 5), and for your account by deleting it
- Be informed about the third parties with whom your data is shared
To exercise any of these rights, contact us at contact@karpsmusic.com.
10. International Data Transfers
Some of your data may be stored or processed outside Brazil. Any such transfer is carried out in accordance with the safeguards permitted under LGPD Art. 33, using infrastructure providers that comply with adequate data protection standards.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the platform. The "Last updated" date at the top of this page reflects the most recent revision.
12. Contact
If you have any questions or concerns about this Privacy Policy, please contact us at contact@karpsmusic.com.