Privacy
Your songs stay yours
Draft, to be checked by your accountant or a solicitor before launch. Remove this note once it's checked.
Palimpsest keeps your songs on your own device. There's no account, no advertising, no tracking and no analytics, in the app or on this website.
Who looks after your information
Palimpsest is a business name of your full legal name, a sole trader at your business address, Ireland. You can reach me at hello@palimpsestmusic.com about anything in this policy.
The app
Your songs and settings
Your songs, recordings, set lists and settings are kept on your own device: in the folder you choose in the desktop app, or in your browser in the web version. I never receive them, and Palimpsest doesn't send them anywhere unless you choose one of the things below.
Your licence key
Your licence key holds your name, your plan and its dates. It's checked on your own device; nothing is sent to check it.
Things that use the internet, only when you choose them
- Co-writing or reviewing over the internet. When you co-write with someone far away, or send a mix for review by link, the session passes through Palimpsest's relay server, run on Cloudflare. Everything is locked on your device before it's sent, so the relay can't read the words, the music or the comments. Nothing is kept there for long: a review is deleted once it's approved, and nothing stays longer than 30 days. Like any server, the relay sees the internet addresses of the devices that connect.
- Co-writing in the same room goes straight between your devices over your own network, not over the internet.
- Reviews by email or shared folder go through your own email or your own cloud folder (such as Dropbox, iCloud Drive or OneDrive), under that service's terms.
- Splitting a recording into its parts needs a model file, which Palimpsest downloads once, after asking you, from Hugging Face. Hugging Face sees your internet address for that download. Your recordings never leave your computer.
- Keeping your Songbook folder in iCloud Drive, Dropbox or OneDrive is your choice, under that service's terms.
Palimpsest sends no crash reports, usage statistics or anything else in the background.
This website
This site is hosted by Cloudflare, which handles your internet address to deliver the pages and protect them from attacks. The site sets no cookies and uses no analytics or trackers. If you open the checkout to buy, Paddle's checkout sets the cookies it needs for the payment.
The launch list
If you join the list, your email address is kept by Buttondown, the service that sends the emails. You'll get one email to confirm first. I use the list only to write about Palimpsest, and every email has a link to leave the list straight away. Buttondown is based in the United States; how the transfer is protected, for example the EU–US Data Privacy Framework or standard contractual clauses.
Buying Palimpsest
Palimpsest is sold through Paddle, which handles the payment, the VAT and the receipt as the seller (the “merchant of record”). Your card details go to Paddle, never to me. Paddle passes me your name, email address, country and what you bought, so I can send you your licence key, help you with it, and keep the records the law requires. Paddle's own privacy policy applies to the payment.
Email to hello@palimpsestmusic.com is forwarded to my Gmail account by Cloudflare, so Google keeps it. I use it only to reply to you.
Why I may use your information
- To give you what you bought: your licence key and help with it (a contract).
- To write to you on the launch list (your consent, which you can take back at any time).
- To reply to your emails and keep the site and relay secure (legitimate interests).
- To keep records for tax (the law: Irish law asks for six years).
I never sell your information or use it for advertising.
Your rights
You can ask to see the information I hold about you, have it corrected or deleted, take it elsewhere, or object to how it's used. Write to hello@palimpsestmusic.com. If you're not happy with my answer, you can complain to the Data Protection Commission in Ireland (dataprotection.ie) or to the authority in your own country.
If you're under 16, please ask a parent before joining the list.
Last changed: date.