Privacy Policy
Effective November 1, 2026
This policy explains what personal information ShedTab (the "Service") collects, why, and how it is handled.
1. What we collect
- When you sign in (Google account): email address, name, profile picture URL and account ID
- When you use the Service while signed in: tab files you upload, song titles, per-bar practice history and practice time, goals and display settings, and rehearsal room details (room name, date, members, parts)
- When you pay: subscription status, next billing date, and order and customer IDs. Card details are handled directly by our payment processor, Lemon Squeezy; we never receive them.
- Automatically: pages visited, feature usage (which features you use), browser and device type, and country (estimated from your IP address)
- Files that fail to open: the file, the error details and browser information, kept so we can fix the problem. File names are not kept.
If you don't sign in, your tabs and practice history stay in your browser and are never sent to us.
2. Why we use it
- Sign-in, account management and syncing tabs and history across your devices
- Showing setlists and practice progress to members of your rehearsal rooms
- Checking your Pro subscription and billing notices
- Improving the Service (which features are used, which files fail to open)
- Answering your questions
We do not use your information for advertising and we never sell it.
3. How long we keep it
- Account information and history are kept until you delete your account, then deleted without delay.
- Usage analytics are kept for up to one year.
- Information we must keep by law, such as payment records, is kept for the required period. Payment records are kept by Lemon Squeezy.
4. Service providers and international transfer
We use the following providers to run the Service. Their servers are located outside Korea (mainly in the United States), and data is transferred over the internet as you use the Service.
- Supabase, Inc. (US): sign-in, database and tab file storage, until account deletion
- Vercel Inc. (US): website hosting and access logs, per their policy
- PostHog, Inc. (US): usage analytics, up to one year
- Lemon Squeezy, LLC (US): payment processing as Merchant of Record, as required by law
- Google LLC (US): Google sign-in
5. What other users can see
When you join a rehearsal room, its members can see your name, profile picture, part, and your practice progress and time on setlist songs. Nothing else is shown to other users.
6. Your rights
- You can ask to see, correct or delete your personal information, or to stop its processing, at any time.
- Use Delete account in the account menu to delete your account and stored data yourself, or email us.
- If you don't want usage analytics, use your browser's tracking protection or let us know.
7. Cookies and browser storage
We use browser storage (localStorage, IndexedDB) for your sign-in, settings and offline tabs, and a one-day cookie with your country to pick the first display language. You can clear them in your browser settings; history saved while signed out may be lost.
8. Security
All traffic is encrypted (HTTPS), and database access is restricted so only you (or members of the same rehearsal room) can read your information. Sensitive values such as payment secrets are protected separately.
9. Children
Children under 14 should use the Service with a parent's or guardian's consent. If we learn we collected information without such consent, we will delete it.
10. Contact
Privacy contact: ShedTab operator
Email: kynghg@gmail.com
11. Changes
We will post changes on this page 7 days before they take effect.