Privacy Policy

Effective October 16, 2026

PaiMusic (“PaiMusic,” “we,” “us” or “our”) provides a music notation editor with an AI assistant at paimusic.ca (the “Service”). This Privacy Policy describes how we collect, use, disclose and retain personal information when you use the Service, and the choices and rights available to you. We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act and other applicable Canadian privacy laws.

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

1.1 Music and Settings Stored on Your Device

The scores you create in the Service (“Pieces”), your library and your settings are stored in your browser’s local storage on your device. They are not transmitted to our servers except as described in Section 1.4. If you clear your browser’s data for paimusic.ca, your Pieces will be deleted and we cannot recover them.

1.2 Account Information

If you create an account, we collect and store the following information.

• Your email address and whether you have verified it.
• Your password, if you choose to set one, which is stored only in hashed form.
• If you sign in with Google, the information described in Section 2.
• The dates on which your account was created and last updated.

1.3 Sign-In and Security Information

When you sign in, we create a session record that contains your IP address and your browser’s user agent. A session remains valid for seven (7) days and is renewed while you continue to use the Service. To protect the Service against abuse, we record the number of requests made from each IP address to our sign-in functions. One-time sign-in codes expire after five (5) minutes, and email verification and password reset links expire after one (1) hour.

1.4 Assistant Requests

When you submit a request to the Assistant, your browser sends us your message and the Piece you have open, including its title and composer. We transmit this content to our third-party AI provider solely to generate a response, which we return to you. We do not transmit your name, email address or account identifiers to the AI provider, and we do not store your messages or Pieces on our servers.

Access to the Assistant is limited to approved accounts. We maintain a list of approved email addresses and, for each account, a record of the number of tokens (the units in which AI models measure text) used in each calendar month.

1.5 Waitlist Information

If you join the waitlist on our home page, we collect your email address, the date, time and time zone of your sign-up, and whether you used the demonstration on the page. If you choose to answer the optional questions, we also collect your description of what you would like PaiMusic to help with and whether you are willing to try an early version.

1.6 Information Received by Third-Party Resources

The studio loads piano sound files from a third-party website. When your browser retrieves these files, their provider receives your IP address and standard browser information.

2. Google User Data

If you choose to sign in with Google, we request access only to the openid, email and profile scopes. Google shares your name, email address, profile picture and Google account identifier with us, together with the authentication tokens issued for your sign-in. We do not request access to any other information in your Google account, such as your contacts, files or calendar.

We use Google user data solely to create your account, authenticate you and maintain your session. We store it with your account record and delete it when your account is deleted. We do not sell Google user data, use it for advertising, or use it to train artificial intelligence or machine learning models. We do not transfer it to any third party other than the hosting provider that stores our database, and we do not disclose it to our AI provider.

PaiMusic’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Your Information

We use personal information only for the following purposes.

• To create and administer your account and to authenticate you.
• To send you one-time sign-in codes, email verification links and password reset links.
• To provide the Assistant, administer access to it and enforce its monthly usage limit.
• To notify waitlist members when access becomes available and to understand what they would like PaiMusic to help with.
• To protect the Service against abuse and maintain its security.
• To comply with applicable law.

We do not use your Pieces or your Assistant messages to train artificial intelligence models.

4. How We Share Your Information

We do not sell or rent personal information. We disclose personal information only to the service providers that operate the Service on our behalf, and only to the extent each requires to perform its services.

• Our hosting provider, which serves the website, operates sign-in and the Assistant, and stores our account database.
• Our email delivery provider, which sends account emails.
• Our AI provider, which processes Assistant requests as described in Section 1.4 and handles them under its own terms.
• Our form provider, which stores waitlist submissions.
• Google, which authenticates you if you choose to sign in with Google.

We may also disclose personal information where required by law, such as in response to a court order or other lawful request.

5. International Transfers

PaiMusic is operated from Canada. Our service providers may store and process personal information in countries outside Canada. Personal information transferred to another country is subject to the laws of that country and may be accessible to its courts, law enforcement and national security authorities.

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy.

• Account information, session records, and Assistant approval and usage records are retained until your account is deleted.
• Waitlist information is retained until PaiMusic becomes available to the general public, after which it is deleted. You may request its deletion sooner.
• Assistant messages and the Pieces sent with them are not retained on our servers.
• Pieces stored in your browser remain on your device until you delete them.

7. Your Rights and Choices

You have the rights described below, subject to applicable law.

• Deletion. You may delete your account at any time from the Settings menu in the studio by selecting Delete account. Deleting your account removes your account information, session records, and Assistant approval and usage records.
• Access and correction. You may request access to the personal information we hold about you, or its correction, by contacting us at privacy@paimusic.ca. We will respond within thirty (30) days.
• Withdrawal of consent. You may withdraw your consent at any time by deleting your account or asking us to remove your waitlist information, subject to legal restrictions. Withdrawing consent may prevent us from providing parts of the Service to you.
• Waitlist removal. You may ask us to remove your waitlist information by contacting us at the address above.
• Local data. You may delete your Pieces from the studio’s library or by clearing your browser’s data for paimusic.ca.
• Complaints. If you are not satisfied with our response to a request or concern, you may file a complaint with the Office of the Privacy Commissioner of Canada.

8. Cookies and Similar Technologies

When you sign in, we set a session cookie that keeps you signed in. It cannot be read by scripts on the page, and it expires after seven (7) days unless renewed through continued use. During Google sign-in, we set a temporary cookie for five (5) minutes to protect the sign-in process against forgery. We do not use advertising cookies, analytics cookies or other tracking technologies. The studio uses your browser’s local storage to keep your Pieces and settings on your device.

9. Security

We take reasonable measures to protect personal information. The Service is served only over encrypted connections, passwords are stored in hashed form, and session cookies cannot be read by scripts on the page. No method of transmission or storage is completely secure. Where a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law.

10. Children’s Privacy

The Service is not directed to children under thirteen (13) years of age, and we do not knowingly collect personal information from them. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child under 13 has provided us with personal information, please contact us.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date above. If we intend to use personal information already collected for a new purpose, we will obtain your consent before doing so.

12. Contact Us

Questions, requests and complaints about this Privacy Policy or our handling of personal information may be directed to our Privacy Officer at privacy@paimusic.ca. Our Terms of Service govern your use of the Service.