Privacy policy

Last updated: October 23, 2026

Who we are

Harmonizer Studio ("the Service") harmonizes melodies you upload: you provide a melody, the Service analyses it and produces an accompaniment MIDI file, a score and a preview audio file.

What we collect

Account information. When you sign in with Google, we receive your Google account identifier (sub), email address, name and avatar URL through Google's OpenID Connect service. We never receive your Google password and do not read your mail, contacts, Drive or any other Google data. When you continue as a guest, we only generate a random guest ID stored in a cookie in your browser.
Content you upload. Melody files (MIDI or recordings) and the chords, MIDI, scores and audio generated from them.
Usage records. Timestamps of generations and edits, used to enforce the daily quota; access times and IP addresses in server logs, used for troubleshooting and abuse prevention.

How we use it

To identify your account and associate the sessions you create with you, so you can find them again.
To send the melody's notes, key and candidate chords to a third-party language model service (such as OpenAI) that chooses the chords. Only musical data is sent, never your email, name or other personal information.
To count daily usage and enforce the quotas for guests and signed-in users.

What we do not do

We do not sell or rent your personal information.
We do not share your data with third parties other than the model service described above.
We do not use your melodies or results to train models.
We do not send marketing email.

Retention and deletion

Uploaded melodies and generated files are deleted from the server automatically after 7 days (3 days for guest sessions).
Account records are kept until you ask us to delete them. Contact us at the address below and we will delete your account and all data associated with it.
The guest session cookie lasts 30 days; clearing your browser's cookies ends a guest identity.

Cookies

The Service only uses cookies required for signing in (the session identifier, and a 10-minute verification cookie during Google sign-in). No advertising or cross-site tracking cookies are used.

Google user data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

For any privacy question or a deletion request, email [email protected].

Terms of service

Use of the Service is also governed by the Terms of service. Generated content is owned by the Service and licensed for personal, non-commercial use; see section 4 of the Terms.

Changes

Updates to this policy are published on this page with the date above revised.