Privacy Policy

1. Privacy Commitment

At bipluk, we respect your privacy and are committed to protecting the limited personal data you share with us. This policy describes what information we collect, how it is stored, who helps us process it, and your control over it.

2. Data Collection and Usage

• Account Credentials: We store your email address and a securely hashed representation of your password to manage authentication. We never store passwords in plain text.
• SysEx and Patch Data: When you backup patches or banks, the raw binary content (`.syx` format) and parsed names are stored in our secure database. This data is exclusively accessible by your authenticated user account.
• Payment Information: All payment transactions are securely handled directly by Stripe, Inc. We never collect, process, or store your credit card details or bank account information on our servers.
• Approximate Location (Pricing Only): We may infer your country or region from your IP address or hosting headers (for example, Vercel cf-ipcountry) to show localized pricing symbols and amounts on the marketing site. We do not use this for advertising profiles or to sell data.
• Product Analytics: We use PostHog to understand how the site and dashboard are used (pages visited, feature usage, errors). This helps us fix bugs and improve the product. PostHog may set cookies or use similar browser storage. We do not use PostHog for cross-site ad targeting.

3. Cookies, Sessions & Analytics

We use a signed session cookie to keep you logged into your dashboard. That cookie is strictly for authentication.

We also use PostHog (a third-party analytics service) as described above. PostHog is not an advertising network. We do not run third-party advertising cookies or sell your browsing history to ad brokers.

You can limit analytics in your browser (block third-party cookies, use a privacy extension, or disable JavaScript), though some dashboard features may not work correctly without session cookies.

4. Email Communications

Transactional and marketing email is sent through Resend from support@bipluk.

• Account drip (one-time): If you register on the free tier, we may send a single follow-up email about upgrading your vault. This is not a recurring newsletter.
• Newsletter (opt-in only): If you subscribe via the footer or similar opt-in, we may send occasional product updates. Every newsletter includes an unsubscribe link.
• Support: If you email us, we reply from our support inbox.

You can opt out of the newsletter at any time via the unsubscribe link in those emails. To stop the one-time account drip before it sends, delete your account or email halfradiationllc@gmail.com.

5. Internal Operator Alerts

When you sign up, purchase, upload banks, or trigger certain errors, we may send an automated notification to our private Discord webhook so the small team running bipluk can respond to support issues and monitor system health. These alerts are for internal operations only — not public channels — and typically include your email address and event type (for example, signup or checkout started). We do not post your SysEx file contents to Discord.

6. Service Providers (Subprocessors)

We use trusted vendors to run the service. They process data on our behalf only as needed to provide bipluk:

• Vercel — website hosting, serverless application runtime, and edge headers
• Neon — PostgreSQL database hosting (accounts, banks, subscribers)
• Stripe — payment processing and checkout
• Resend — outbound email delivery
• PostHog — product analytics
• Discord — private webhook alerts for the operator team

We do not sell, rent, or trade user database entries to anyone. All traffic between your browser and our servers is encrypted using industry-standard TLS.

7. Security and Data Protection

Our databases are stored behind access controls with periodic backups. No system is perfectly secure; you are responsible for keeping your login credentials safe and maintaining your own offline SysEx backups.

8. Data Deletion and Portability

Under modern privacy frameworks, you have the right to request deletion of your account and all associated MIDI SysEx banks at any time. To request full deletion of your record, email us at halfradiationllc@gmail.com, and your account files will be purged from our database within 30 days.

9. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top reflects the latest revision. Continued use of bipluk after an update means you accept the revised policy. If we make a material change to how we use personal data, we will update this page and may show a notice in the dashboard.