1. Who we are
Coda ("we", "us", "our") is an async music collaboration platform. This Privacy Policy explains what personal data we collect, how we use it, and your rights as a user. Questions: hello@joincoda.app.
2. Data we collect
Account data
When you create an account: name, email address, password (hashed — never stored in plain text), optional bio, location, country, and profile avatar/header image.
Content you create
Audio/video recordings you submit to projects; scores you upload; posts and comments you publish; messages you send to other users.
Usage data
Pages visited, features used, performance view events, and login timestamps. We use this data only in aggregate to improve the platform.
Presence data
When you are actively using the app, a periodic heartbeat signals your online status to other users. No location data is collected.
3. How we use your data
- To provide and operate the Coda service.
- To display your public profile to other musicians.
- To deliver notifications about activity on your projects and recordings.
- To process and store your audio/video recordings for performance generation.
- To send transactional emails (password reset, notification emails if opted in).
- To improve the platform through anonymised usage analytics.
We do not sell your personal data. We do not use your data for advertising.
4. Data sharing
We share data only with:
- Infrastructure providers (hosting, database, file storage) under data processing agreements.
- Other users, but only the data you choose to make public: name, handle, bio, location, instruments, profile images, posts, and published performances.
- Legal authorities if required by law.
5. Data retention
We retain your account data for as long as your account is active. Deleted accounts are removed from the database within 30 days. Audio and video files associated with deleted accounts are removed within 90 days.
6. Your rights
Depending on your jurisdiction you may have the right to access, correct, or delete your personal data, or to restrict its processing. To exercise any of these rights, contact hello@joincoda.app.
7. Cookies
See our Cookie Policy for full details.
8. Security
Passwords are hashed with bcrypt. Data is transmitted over HTTPS. We apply security headers to all responses. We review our security posture regularly and address vulnerabilities promptly.
9. Children
Coda is not directed at users under the age of 13. If you are aware of a minor who has created an account, contact us and we will delete it.
10. Changes
We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Continued use of Coda after changes constitutes acceptance.
11. Contact
Privacy-related enquiries: hello@joincoda.app