Privacy Policy

Last updated: October 2025

1. Introduction

Welcome to GearPlug ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

Account Information: Email address, password (encrypted), name
Profile Information: Production preferences, experience level, DAW, genres, instruments
Gear Data: Equipment names, categories, serial numbers, purchase prices, dates, conditions, notes
Uploaded Files: Photos of gear, receipts (images/PDFs), user manuals (PDFs)
Payment Information: Processed by Stripe (we do not store credit card data)

2.2 Automatically Collected Information

Usage Data: Pages viewed, features used, time spent, click patterns
Device Information: Browser type, operating system, device model, screen resolution
Log Data: IP address, timestamps, error logs, API requests
Cookies: Session cookies for authentication, preference cookies

2.3 AI Interaction Data

Messages sent to our AI assistant
AI-generated responses and insights
Gear search queries
Usage counters (for Pro tier limits)

2.4 Companion App Data

Installed VST/AU plugins (names and file paths)
Plugin scan results
API keys for desktop authentication

3. How We Use Your Information

3.1 To Provide the Service

Create and manage your account
Store and organize your gear catalog
Provide AI-powered features and insights
Process payments and manage subscriptions
Sync data across your devices
Generate gear specifications using AI

3.2 To Improve the Service

Analyze usage patterns to enhance features
Train and improve AI models
Fix bugs and optimize performance
Conduct research and development

3.3 To Communicate With You

Send service updates and announcements
Respond to support requests
Send security alerts
Provide Pro tier usage notifications
Send marketing communications (with your consent)

4. Data Sharing and Disclosure

4.1 We Share Your Data With:

Firebase (Google): Authentication, database, file storage, hosting
Anthropic: AI processing (gear identification, chat assistant)
Apple In-App Purchase: Subscription payments (iOS app only)
Service Providers: Analytics, monitoring, email delivery

4.2 We Do NOT:

Sell your personal data to third parties
Share your gear catalog publicly without permission
Use your photos for marketing without consent
Share AI conversation history with other users

4.3 Legal Requirements

We may disclose your information if required by law, court order, or to:

Comply with legal obligations
Protect our rights and property
Prevent fraud or abuse
Protect user safety

5. Data Storage and Security

5.1 Where We Store Data

Firebase Firestore: Gear data, user profiles (US data centers)
Firebase Storage: Photos, receipts, manuals (US data centers)
Firebase Authentication: Encrypted credentials

5.2 Security Measures

HTTPS encryption for all data transmission
Firebase security rules to restrict data access
Password hashing with industry-standard algorithms
Regular security audits and updates
Session-based authentication with secure cookies
Rate limiting to prevent abuse

5.3 Data Retention

Active Accounts: Data retained while account is active
Deleted Accounts: Data deleted within 90 days
Backups: May persist in backups for up to 30 days
Legal Holds: Data may be retained if legally required

6. Your Rights and Choices

6.1 Access and Control

Access: View all your data in the app
Export: Download your gear catalog as CSV
Edit: Update your profile and gear information anytime
Delete: Remove individual gear items or entire account

6.2 Privacy Settings

Manage AI profile preferences
Control email notifications
Revoke desktop companion API keys
Opt out of marketing communications

6.3 Account Deletion

You can delete your account at any time from Settings. This will:

Permanently delete all your gear data
Remove all uploaded files (photos, receipts, manuals)
Cancel any active subscriptions
Delete your account within 90 days

7. Cookies and Tracking

7.1 Cookies We Use

Essential Cookies: Authentication, session management (required)
Preference Cookies: Dark mode, UI settings (optional)
Analytics Cookies: Usage tracking (optional, can be disabled)

7.2 Managing Cookies

You can control cookies through your browser settings. Disabling essential cookies may limit functionality.

8. Children's Privacy

GearPlug is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

9. International Users

GearPlug is operated in the United States. If you access the Service from outside the US, your data will be transferred to and stored in the US, which may have different data protection laws.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

Right to know what personal information is collected
Right to know if personal information is sold (we do not sell data)
Right to delete personal information
Right to non-discrimination for exercising privacy rights

11. European Users (GDPR)

If you are in the European Economic Area, you have additional rights:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent

12. Third-Party Links

GearPlug contains affiliate links to music gear retailers. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before making purchases.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via:

Email to your registered address
In-app notification
Updated "Last Updated" date at the top

Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us:

Email: privacy@gearplug.ai
Support: support@gearplug.ai
Website: https://gearplug.ai

15. Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at dpo@gearplug.ai