1. Data controller
The operator of the Planistage service is the data controller for the personal data described in this policy. The controller's complete business and billing details are provided during checkout and on the applicable invoice. Privacy questions and requests may be sent to info@planistage.com.
2. Data we process
Account data: first and last name, email address, country, password hash, optional notes, email-confirmation status, trial dates and subscription status. Passwords are stored as one-way hashes and are not available to Planistage in readable form.
Project data: projects and setlist information that you choose to save or synchronize, which may include track titles, timing, document references, MIDI settings and other configuration contained in your Planistage project.
Contact data: name, email address, selected topic and message when you contact support.
Payment data: checkout identifiers, payment status, subscription identifiers, amount and dates. Card and payment-instrument details are collected and processed directly by Stripe and are not stored on Planistage servers.
Technical data: IP address, user agent, session information, security events and, for signed-in users, download records. Anonymous downloads do not require a name or email address, although normal server logs may still contain technical connection data.
3. Why we process data and our legal bases
Account, project, trial, synchronization, support and subscription data is processed to provide the service you request and perform the applicable contract or pre-contractual steps.
Payment and invoice information may also be processed to comply with accounting, tax and other legal obligations. Technical and security data may be processed for Planistage's legitimate interests in protecting accounts, preventing abuse, diagnosing faults and maintaining a reliable service, provided those interests do not override your rights.
Optional notes are processed to understand your request or intended use. Please do not include sensitive personal information or information that is not necessary.
4. When providing data is required
No personal account data is required to download the Windows installer or Android APK. Name, email, country and password are required only when you choose to create an account. Without them, Planistage cannot provide authenticated online saving, synchronization, trial management or the reserved area.
Contact-form data is required to receive and answer your message. Payment information is required only if you decide to activate a paid plan.
5. Cookies and local session data
The website uses technical session cookies that are necessary for login, security controls, form protection and temporary status messages. These cookies are not used to build advertising profiles.
Planistage does not currently use advertising cookies or third-party analytics tools. If optional analytics or marketing technologies are introduced, this policy and any required consent controls will be updated before they are activated.
6. Recipients and service providers
Personal data may be processed by providers that support the operation of Planistage, such as website and database hosting, email delivery, technical maintenance and payment services. These providers receive only the data reasonably needed for their role and act under applicable data-protection obligations.
Stripe processes checkout and payment information under its own privacy terms and as a payment-service provider. Google-hosted fonts may receive basic technical connection information when your browser loads the website's typefaces. If you follow the external Facebook link, Meta processes information according to its own privacy policy.
Data may also be disclosed where required by law, a competent authority, or to establish, exercise or defend legal claims. Planistage does not sell personal data.
7. International transfers
Some service providers may process data outside the European Economic Area. Where this occurs, Planistage or the relevant independent provider relies on a lawful transfer mechanism, such as an adequacy decision, approved standard contractual clauses or another safeguard permitted by data-protection law.
8. How long data is kept
Account and synchronized project data is generally retained while the account is active or while needed to provide the service. If an account is closed, data is deleted or anonymized within a reasonable period unless retention is required for legal obligations, dispute resolution, security or backup integrity.
Billing and transaction records may be retained for the period required by tax and accounting law. Support correspondence is normally retained for up to 24 months after the request is closed, unless a longer period is needed for an ongoing issue or legal claim. Security and technical logs are retained only for a proportionate period needed to investigate incidents and operate the service.
Residual copies may remain temporarily in protected backups until the normal backup cycle replaces them.
9. Security
Planistage uses reasonable technical and organizational measures intended to protect personal data, including password hashing, authenticated account access, form-security controls and restricted storage. No internet service can guarantee absolute security, so you should use a unique password and protect access to your devices and email account.
10. Your rights
Subject to the conditions in applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability or objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent without affecting earlier lawful processing.
Send requests to info@planistage.com. Planistage may ask for information reasonably necessary to verify your identity and will normally respond within one month, subject to any lawful extension.
11. Complaints
If you believe your personal data has been processed unlawfully, you may contact Planistage first so the issue can be investigated. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali, or with the competent supervisory authority in your country of residence or work.
12. Children
Planistage is not directed specifically at children. A person who cannot enter into a valid contract independently should use the account and paid services only with the authorization of a parent or legal guardian, where required by applicable law.
13. Automated decisions and marketing
Planistage does not currently use personal data for automated decision-making that produces legal or similarly significant effects. Account status may change automatically when a trial expires or a payment is confirmed, solely to administer access under the selected plan.
Planistage does not currently send promotional newsletters. Transactional messages, such as email confirmation, password reset, payment and service notices, are sent because they are necessary to operate your account.
14. Changes to this policy
This policy may be updated when the service, providers or legal requirements change. Material changes will be communicated through the website, account or email where appropriate. The effective date above identifies the current version.