Privacy policy

• Your collection is private by default. Nobody sees it unless you choose to share it.
• No ads, no trackers, no third-party analytics. We don't sell or rent your data — to anyone, ever.
• AI features only see what you submit to them, and it isn't used to train anyone's models.
• You can export everything from Settings, and you can ask us to delete everything.
• Questions any time: privacy@fretbook.app.

The rest of this page is the detail behind those promises, written in plain English on purpose.

Fretbook is a gear library for musicians, operated from Tennessee, USA. When this policy says "we," it means the people who run Fretbook. You can reach us about anything on this page at privacy@fretbook.app.

Everything we hold falls into a few buckets, and all of it exists to make the product work:

• Your account — your email address, and your name if you sign in with Google or Apple. We never see your password; sign-in is handled by our authentication provider, which stores only a secure hash.
• Your collection — the gear records you create: makes, models, serial numbers, purchase details, values, maintenance history, and notes.
• Photos and documents you upload — receipts, certificates, appraisals, and the photos of your gear.
• Community content — posts, comments, and reactions in the Lounge, and your public profile if you turn one on.
• Marketplace activity — listings you create, offers, messages with other members, and order records.
• Coda — if you set up a succession plan, the name and contact details of the person you designate. That's information about someone else: only share what you have the right to share. We use it solely to prepare and deliver the page you set up for them.
• Operational records — when you use a paid AI feature (Identify, appraisal), we keep a usage record tied to your account. That's how rate limits and our costs are managed; it isn't marketing analytics.

Just as important is what we don't collect: no behavioral analytics, no advertising identifiers, no location tracking, and no access to your contacts.

One thing: running Fretbook. Signing you in, storing and showing your collection, and powering the features you deliberately use. We don't build advertising profiles, and we don't use your data for anything you didn't ask for.

We don't sell your data. We don't rent it. We don't share it with advertisers or data brokers. There are no tracking pixels and no third-party analytics anywhere in Fretbook. If any of that ever changes, we'll update this policy first and tell you before it takes effect.

Your data is stored with Supabase (our database and file storage) and served through Vercel (our hosting provider), in the United States. These providers process data only to provide their service to us — they don't get to use it for their own purposes. When Fretbook emails you — or, for Coda, the person you designate — the message is delivered through Resend, our email provider, which processes the recipient's address only to deliver it.

One honest detail about photos: gear photos are stored at long, unguessable web addresses. They aren't listed or discoverable anywhere, but anyone who has the exact link to a photo can view it — so treat photo links like the photos themselves. Documents are stricter: they're private, and every view goes through a short-lived signed link.

Like any web service, our providers keep short-lived server logs — including IP addresses — for security and debugging.

When you use Identify or an appraisal, the photos and gear details you submit are shared with the AI provider that powers the feature, only to generate your result. Our agreements don't allow what we send to be used to train their models. Market-value lookups search public marketplace listings using your gear's specs — make, model, year — never your identity.

Everything in Fretbook starts private. Three features share things, and each one is an explicit choice you make: a public profile (off until you turn it on), share links you create for a specific piece, and Coda, the page you prepare for one chosen person. Each one can be turned off again — Coda includes a one-click stop.

Marketplace checkout is currently a clearly labeled demo: no real charge ever occurs, and full card numbers are never stored or sent to a payment processor. When real payments launch, a dedicated payment processor will handle card details — we still won't store card numbers — and this policy will be updated first.

Fretbook sets only what's needed to keep you signed in. There are no tracking cookies, which is why there's no cookie banner: there's nothing to consent to.

We keep your data for as long as your account is active. Items you delete go to the Trash in Settings, where you can restore them or purge them permanently. You can export your collection records as a JSON backup from Settings at any time; document files can be downloaded individually from the app. To delete your account and everything in it, email privacy@fretbook.app — we'll confirm and complete the deletion within 30 days.

Wherever you live, you can access, correct, export, and delete your data — most of that is built into the product, and the rest is an email away at privacy@fretbook.app. If you're in the European Union or the United Kingdom, you also have the rights the GDPR and UK GDPR give you, including objecting to processing and complaining to your local supervisory authority. If you're in California: we don't sell or share personal information as the CCPA defines those terms, so there's nothing to opt out of.

Fretbook is for people 13 and older — or older where local law sets a higher age for consenting to a service like this. We don't knowingly collect data from children under that age.

When we make a material change, we'll announce it in the app or by email before it takes effect, and update the date at the top of this page. Smaller clarifications just update the date.

For anything about your data or this policy: privacy@fretbook.app.