Last updated: 9 October 2026
Who is responsible
Scorehub is the controller of the personal data described in this notice. Contact: privacy@scorehub.org
Information we process
- Account details, including your name, email address, verification status, and optional profile image.
- Authentication records, including encrypted credentials or identifiers from Google or Apple when you choose social sign-in.
- Session and security information, including session identifiers, IP address, user agent, failed sign-in attempts, and verification records.
- Sheet music files, photographs, filenames, upload metadata, and resulting transcription files.
- Messages you send to us and operational records needed to provide support and maintain the service.
Camera access is requested by your browser only after you choose the camera option. A preview remains on your device until you select and upload it.
Why we use it
| Purpose | Typical legal basis |
|---|---|
| Create accounts, authenticate users, and provide transcription services. | Performance of a contract or steps taken at your request. |
| Secure accounts, prevent abuse, enforce rate limits, and diagnose failures. | Legitimate interests in operating a safe and reliable service. |
| Send verification, password-reset, service, and support messages. | Performance of a contract and legitimate interests. |
| Meet accounting, legal, regulatory, and dispute-resolution obligations. | Legal obligation or legitimate interests. |
| Use optional analytics if introduced later. | Your consent. Optional analytics are not currently configured. |
Service providers
Depending on the features you use, data may be handled by:
- Our hosting, database, and S3-compatible file-storage providers.
- The transactional email provider used for verification and password-reset messages.
- Google or Apple when you deliberately choose the corresponding sign-in option.
- Professional advisers and public authorities where disclosure is legally required.
The final provider names, processing locations, transfer safeguards, and processor links must be added before launch. We do not sell personal data or use uploaded scores for advertising.
Retention
Account and session data is kept while needed to provide and secure the service, then deleted or anonymised under the retention schedule. Uploaded and generated files are retained only for the documented delivery and recovery period. Verification and rate-limit records are kept only as long as needed for their security purpose.
Launch blocker: Insert the approved account, upload, backup, security-log, and support retention periods after the operational deletion jobs are finalized.
International transfers
If a provider processes personal data outside the UK or European Economic Area, Scorehub will use an applicable adequacy decision or approved contractual safeguards and supplementary measures where required. The final notice must identify the safeguards used by each production provider.
Your rights
Depending on where you live, you may ask for access, correction, deletion, restriction, portability, or object to processing. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. You may also complain to your local data-protection authority.
Cookies
Scorehub currently uses only cookies needed for secure authentication and privacy preferences. See the cookie notice or use Cookie settings in the footer.
Changes
We will update this notice when our processing or providers change. Material changes will be highlighted, and fresh consent will be requested where the law requires it.