Privacy Policy

Prod Crate is operated by [Prod Crate, Inc.], [registered address]. This policy covers prodcrate.com, the Prod Crate web app, the Mac app, and the mobile apps. It explains what we collect, why, and what you can make us do about it.

If anything here is unclear, email support@prodcrate.com and ask. We would rather rewrite a paragraph than have you guess.

• Account details: your email address, and your name if you give us one.
• File metadata: filenames, folder paths, file size, format, duration, sample rate, bit depth, and when each file was added or changed.
• Audio analysis results: the detected instrument, key, BPM, and the confidence score for each of those.
• Billing details: your plan, your invoices, and a token from [payment processor]. Card numbers are handled by them and never reach our servers.
• Technical logs: IP address, app and browser version, and timestamps of requests, kept for security and debugging.

We do not collect anything from your Mac beyond the Prod Crate folder. The app has no access to the rest of your disk.

Your files are stored on Amazon Web Services S3, in the us-east-1 region. They are encrypted in transit and at rest. WAV and AIFF files are converted to FLAC, which is lossless — the audio is unchanged, only the storage format differs, and you get the original format back on download.

Files are analysed automatically to detect instrument, key, and BPM. That analysis happens on our servers, and the result is stored as metadata against your file. Nobody at Prod Crate listens to your audio, and your audio is not used to build or improve detection models. [If that ever changes it will be an opt-in setting, announced before it exists.]

A small number of engineers can access stored files where it is necessary to fix a fault or respond to a support request you raised. That access is logged.

• To run the service: store your files, sort them, sync them, and search them.
• To bill you, and to tell you when a payment fails.
• To answer your support messages.
• To keep the service secure, detect abuse, and diagnose faults.
• To send service emails — a receipt, a security alert, a notice that you are near your storage limit. Marketing email is separate and optional.

We do not sell your data. We do not rent it, trade it, or hand it to data brokers. We do not run advertising, and we do not let anyone else advertise to you using what we know about you. There is no version of Prod Crate where your library is the product.

We use a small set of vendors to run the service. Each is bound by a data processing agreement and may only use your data to provide their service to us.

• Amazon Web Services — file storage and compute, us-east-1.
• [Payment processor] — subscriptions, cards, and invoices.
• [Email provider] — transactional and account email.
• [Analytics provider] — aggregate product usage, with no cross-site tracking.
• [Error reporting provider] — crash and error reports from the apps.

We disclose data to anyone else only where we are legally required to, and only against valid legal process. Where we are allowed to tell you, we will.

In the United States, in AWS us-east-1. If you are outside the United States, using Prod Crate means your files and account data are transferred there. [Standard Contractual Clauses / UK IDTA reference to be added by counsel.]

• Files you delete sit in Recently deleted for 30 days, then are purged.
• When you ask us to delete your account, we delete your library, file metadata, analysis results, and account record within 7 days of confirming the request.
• Encrypted backups hold a copy for up to 30 days after that, then roll off. Backups are only ever restored to recover the whole system from a failure.
• Invoices and tax records are kept for [7 years], because we are required to keep them.
• Technical logs are kept for [90 days].

Wherever you live, you can ask us to show you what we hold, correct it, export it, or delete it, and you can object to a particular use. Settings has an Export that gives you the whole library in the formats you uploaded; for anything else, email us from the address on your account.

We answer within 30 days. If you are in the EEA or the UK you also have the right to complain to your data protection authority; if you are in California you have the rights set out in the CCPA, including the right not to be discriminated against for using them. Requests go to support@prodcrate.com.

We set a session cookie so you stay signed in, and a preference cookie for your light or dark theme. [Analytics provider] sets an aggregate usage cookie which you can decline. We set no advertising cookies and allow no third-party trackers.

Prod Crate is not for people under [16]. We do not knowingly collect data from them, and we delete any account we find out belongs to one.

Changes are posted on this page with a new date at the top. If a change materially affects how we handle your data, we email you before it takes effect.