Privacy Policy

1. Privacy Commitment

At bipluk, we respect your privacy and are committed to protecting the limited personal data you share with us. This policy describes what information we collect, how it is stored, who helps us process it, and your control over it.

2. Data Collection and Usage

• Account Credentials: We store your email address and a securely hashed representation of your password to manage authentication. We never store passwords in plain text.
• SysEx and Patch Data: When you backup patches or banks, the raw binary content (`.syx` format) and parsed names are stored in our secure database. This data is exclusively accessible by your authenticated user account.
• Payment Information: All payment transactions are securely handled directly by Stripe, Inc. We never collect, process, or store your credit card details or bank account information on our servers.
• Approximate Location (Pricing Only): We may infer your country or region from your IP address or hosting headers (for example, Vercel cf-ipcountry) to show localized pricing symbols and amounts on the marketing site. We do not use this for advertising profiles or to sell data.
• Product Analytics: We use PostHog to understand how the site and dashboard are used (pages visited, feature usage, errors). This helps us fix bugs and improve the product. PostHog may set cookies or use similar browser storage. We do not use PostHog for cross-site ad targeting.

3. Cookies, Sessions & Analytics

We use a signed session cookie to keep you logged into your dashboard. That cookie is strictly for authentication.

We also use PostHog (a third-party analytics service) as described above. PostHog is not an advertising network. We do not run third-party advertising cookies or sell your browsing history to ad brokers.

You can limit analytics in your browser (block third-party cookies, use a privacy extension, or disable JavaScript), though some dashboard features may not work correctly without session cookies.

4. Email Communications

Transactional and marketing email is sent through Resend via our authorized domain delivery or directly from support@bipluk.com.

• Account drip (one-time): If you register on the free tier, we may send a single follow-up email about upgrading your vault. This is not a recurring newsletter.
• Newsletter (opt-in only): If you subscribe via the footer or similar opt-in, we may send occasional product updates. Every newsletter includes an unsubscribe link.
• Support: If you email us, we reply from our support inbox.

You can opt out of the newsletter at any time via the unsubscribe link in those emails. To stop the one-time account drip before it sends, delete your account or email support@bipluk.com.

5. Internal Operator Alerts

When you sign up, purchase, upload banks, or trigger certain errors, we may send an automated notification to our private Discord webhook so the operations engineering team running bipluk can respond to support issues and monitor system health. These alerts are for internal operations only (not public channels) and typically include your email address and event type (for example, signup or checkout started). We do not post your SysEx file contents to Discord.

6. Service Providers (Subprocessors)

We use trusted vendors to run the service. They process data on our behalf only as needed to provide bipluk:

• Vercel: website hosting, serverless application runtime, and edge headers
• Neon: PostgreSQL database hosting (accounts, banks, subscribers)
• Stripe: payment processing and checkout
• Resend: outbound email delivery
• PostHog: product analytics
• Discord: private webhook alerts for the operator team

We do not sell, rent, or trade user database entries to anyone. All traffic between your browser and our servers is encrypted using industry-standard TLS.

7. Security and Data Protection

Our databases are stored behind access controls with periodic backups. No system is perfectly secure; you are responsible for keeping your login credentials safe and maintaining your own offline SysEx backups.

8. Children's Privacy (COPPA & Minors)

bipluk is strictly intended for audio professionals, hobbyists, and individuals aged 18 or older (or the age of majority in your jurisdiction). We do not knowingly solicit, collect, or maintain personal information from children under the age of 13 (or under 16 where applicable by European or state law) in compliance with the Children's Online Privacy Protection Act (COPPA) and the EU GDPR. If we discover that an individual under the age of 13 has registered or submitted personal information without verified parental consent, we will promptly delete that account and all associated data. If you believe a child has provided us with personal data, please notify us immediately at support@bipluk.com.

9. User Rights & Statutory Disclosures (GDPR & CCPA)

Depending on your location, you hold specific statutory rights under data protection laws such as the General Data Protection Regulation (GDPR) and California Consumer Privacy Act as amended by CPRA:

• Right to Access & Portability: You may request a copy of the personal data and raw SysEx files stored in your account.
• Right to Erasure (Deletion): You have the right to request full permanent deletion of your account, authentication tokens, and all uploaded synthesizer files. Purging occurs within thirty (30) days of your request.
• Right to Rectification: You may update or correct inaccurate profile details at any time.
• No Sale or Sharing of Personal Information: We do not sell your personal information, nor do we share your personal information with third parties for cross-context behavioral advertising.

To exercise any of these rights, email us directly at support@bipluk.com.

10. Data Controller & Jurisdiction

The data controller responsible for the processing of your personal information is Half Radiation LLC, a limited liability company organized and existing under the laws of the State of New Mexico, United States.

11. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision. Continued use of bipluk after an update means you accept the revised policy. If we make a material change to how we use personal data, we will update this page and may show a notice in the dashboard.