Privacy Policy

Effective Date: March 9, 2026  |  Last Updated: March 9, 2026

1. Overview

StemScribe (stemscribe.io) is an audio stem separation and transcription web application operated by Tidepool Artists, based in Charleston, South Carolina, United States. This Privacy Policy describes how we collect, use, and protect your information when you use our service.

By accessing or using StemScribe, you agree to the practices described in this policy. If you do not agree, please discontinue use of the service.

2. Information We Collect

2.1 Information You Provide

2.2 Information Collected Automatically

2.3 Information We Do Not Collect

• We do not require account creation or registration to use StemScribe.
• We do not use analytics or tracking services (no Google Analytics, no ad pixels).
• We do not place marketing or advertising cookies.
• We do not collect payment information (the beta is currently free).

3. How Audio Is Processed

When you upload a song or provide a YouTube URL:

1. Upload/download: The audio file is received by our server or downloaded temporarily from the provided URL.
2. Stem separation: AI models (RoFormer or Demucs) running on our local hardware separate the audio into individual instrument stems (vocals, drums, bass, guitar, piano, other).
3. Transcription: Separated stems are transcribed into MIDI notation using our own transcription models.
4. Output generation: MIDI data is converted into Guitar Pro (.gp5) tablature files.
5. Delivery: Results (stems, MIDI, tablature) are made available for you to download or save to Google Drive.

Key privacy safeguards for audio processing:

• Audio files are processed on our own servers — they are not sent to any third-party AI service (not OpenAI, not Google, not Amazon).
• We do not use your uploaded audio to train, improve, or fine-tune any machine learning models.
• We do not share your audio files or generated outputs with any third party.
• Temporary audio files from YouTube URL processing are deleted after processing completes.

4. How We Use Your Information

We use the information we collect solely for the following purposes:

• Provide the service: Process your audio files and deliver stem separation, transcription, and tablature results.
• Maintain and improve: Monitor server health, debug errors, and improve service reliability.
• Manage beta access: Validate invite codes and track beta participation.
• Security: Detect and prevent abuse, rate-limit requests, and protect service integrity.

We do not sell, rent, or trade your personal information to third parties. We do not use your data for advertising purposes.

5. Third-Party Services

StemScribe interacts with the following external services in the course of providing its functionality:

Each third-party service is governed by its own privacy policy. We encourage you to review them:

• Google Privacy Policy (Google Drive, Google Fonts)
• YouTube Privacy Policy
• LRCLIB (open-source lyrics API)

6. Data Retention & Deletion

Audio Files & Processing Results

• Uploaded audio files are retained on our server only for the duration necessary to complete processing. Once results are delivered, source audio may be cached temporarily for your convenience and is automatically purged.
• Generated stems, MIDI, and tablature files are available for download for a limited period after processing. They are automatically deleted from our servers thereafter.
• YouTube-sourced audio is deleted immediately after processing completes.

Beta Invite Data

• Beta codes, associated names, and redemption dates are stored for the duration of the beta program and will be deleted when the beta concludes or when you request deletion.

Server Logs

• Standard server logs (IP addresses, timestamps, request paths) are retained for up to 30 days for security and debugging purposes, then purged.

Requesting Deletion

You may request deletion of any personal data we hold about you at any time by emailing [email protected]. We will fulfill your request within 30 days.

7. Security Measures

We take reasonable technical and organizational measures to protect your data:

• Encryption in transit: All connections to StemScribe are encrypted via HTTPS/TLS.
• Access control: Server access is restricted to authorized personnel only.
• Rate limiting: API endpoints are rate-limited to prevent abuse.
• Minimal data collection: We collect only what is necessary to provide the service.
• No persistent user data: Without account creation, there is no persistent user profile to breach.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights Under GDPR (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) grants you the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing of your personal data based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contract performance: Processing your audio files is necessary to provide the service you requested.
• Legitimate interests: Server logging for security and service reliability.
• Consent: Google Drive integration is initiated only with your explicit consent via OAuth.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe your rights have been violated, you have the right to lodge a complaint with your local data protection authority.

9. Your Rights Under CCPA (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with specific rights:

• Right to know: You may request that we disclose what personal information we collect, use, and share about you.
• Right to delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to correct: You may request correction of inaccurate personal information.
• Right to opt out: You have the right to opt out of the sale or sharing of your personal information. StemScribe does not sell or share your personal information.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Categories of Personal Information

In the preceding 12 months, StemScribe has collected the following categories of personal information as defined by the CCPA:

• Identifiers: Name (beta invite), IP address.
• Internet activity: Server logs of interactions with the service.

StemScribe has not sold personal information in the preceding 12 months. StemScribe does not use or disclose sensitive personal information for purposes beyond what is necessary to provide the service.

To exercise your rights, email [email protected]. We will verify your identity and respond within 45 days.

10. Children's Privacy

StemScribe is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly.

Users between the ages of 13 and 18 should review this policy with a parent or guardian before using StemScribe.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us at [email protected].

11. Cookies & Local Storage

StemScribe uses minimal browser storage:

• localStorage: We use your browser's localStorage to save your beta access status, UI preferences (such as theme selection and mixer settings), and processing history. This data stays entirely in your browser and is never transmitted to our servers.
• Session cookies: Standard session cookies may be used to maintain your connection during active use. These expire when you close your browser.

We do not use third-party tracking cookies, advertising cookies, or analytics cookies. We do not use fingerprinting or any other cross-site tracking technology.

12. International Data Transfers

StemScribe is operated from the United States. If you access the service from outside the United States, your information (including audio files and server logs) will be transferred to and processed in the United States.

By using StemScribe, you consent to the transfer of your data to the United States. We take steps to ensure your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes:

• We will update the "Last Updated" date at the top of this page.
• For significant changes, we will provide notice through the StemScribe interface.

Your continued use of StemScribe after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

This Privacy Policy was last reviewed on March 9, 2026.